$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: ySnCrcHGwBwpLRQd9wfLzvvi4cW1OLZ8f9/uEdVfwCk= Subject key identifier: B2:18:43:69:26:03:77:71:27:EE:96:B1:26:E4:1A:C8:DE:25:5D:E8 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 0106 Signing time: Sat 19 Jul 2025 05:16:43 +0000 Manifest this update: Sat 19 Jul 2025 05:16:43 +0000 Manifest next update: Sat 26 Jul 2025 05:16:43 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: CXvb+1TanzMgifYH1HJB11Q06uRKi+GPxX2bJZJedPo=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Jul 19 05:16:43 2025 GMT Not After : Jul 26 05:16:43 2025 GMT Subject: CN=687b2a3b-cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:45:3b:12:6e:9f:ad:a0:aa:15:5e:8b:cd: 71:78:a7:8e:60:d7:31:ba:79:c5:a3:9e:7b:2a:35: 09:f3:1d:b6:46:f4:34:e8:29:69:41:b1:9e:a5:d5: 59:d9:13:07:43:b8:23:29:d6:47:a5:35:a3:af:3d: 02:a8:34:0d:7f:84:49:bc:2e:08:96:e9:10:7d:13: e3:59:ce:5e:10:a0:9c:38:6d:cc:f4:98:f1:9c:ba: b6:d1:2f:cf:6c:da:44:3c:32:dd:a8:59:e0:e8:94: 50:ab:ed:1c:f1:36:c8:d9:9b:e4:b2:bb:fb:15:f2: ae:cb:13:b1:a8:97:b6:4a:30:48:63:4d:46:14:fe: 2a:97:94:1e:50:f3:00:06:e6:fc:45:3c:0e:36:a4: d5:8e:6a:49:75:2c:db:15:41:f3:bf:1b:cc:77:56: 6b:67:6e:d8:5a:b4:3d:32:98:ef:54:82:a7:ff:3f: 3f:eb:60:01:5d:64:68:c0:89:a1:f2:4f:64:bb:27: 80:50:b3:2d:a6:fc:01:a3:06:d3:e4:4a:79:2b:15: 6b:b1:5f:6d:bf:5d:ab:9e:29:ae:e5:92:31:38:85: c8:d6:ef:f3:a0:93:2a:34:45:04:af:38:d0:84:6c: 1c:c4:ab:60:0c:fe:5c:dc:dd:13:e1:2c:66:e0:d9: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:43:69:26:03:77:71:27:EE:96:B1:26:E4:1A:C8:DE:25:5D:E8 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:19:fd:3a:af:d4:1a:11:ab:2c:c0:0b:4e:5e:b6:47:49:cd: b9:f4:43:01:54:7c:4f:22:ef:8c:7c:6d:fe:44:fc:80:9e:2a: 29:4f:42:f4:f0:b3:11:27:fa:eb:63:de:c3:d0:75:2b:f6:ff: fe:ef:66:ce:50:6c:47:3a:73:22:c8:6e:4e:2a:b6:57:22:92: a0:9b:a1:f1:c2:e7:7a:dc:c6:a5:86:f6:3c:97:4d:63:86:3f: 8e:12:08:8c:3b:06:e9:a8:6f:af:aa:a2:ab:3d:c4:04:7f:48: cf:ba:d5:67:ae:73:ca:bd:6e:92:e2:8d:2b:81:d4:c3:b3:f6: 20:6e:db:2c:2f:4d:ac:5c:00:9e:d0:72:dd:43:aa:10:83:9c: 18:d0:d8:56:89:22:78:f0:dc:43:2c:6f:e7:09:57:ea:fb:87: 2e:47:1b:8b:3a:86:67:76:b0:da:c4:29:b5:ee:e3:40:af:94: 66:ab:43:b2:a0:fd:79:de:23:93:4d:10:33:52:61:39:9d:3a: 51:86:43:78:c3:d5:dc:4d:17:3b:b3:bc:e5:36:4d:d1:08:ab: b5:cb:2a:7b:b1:a2:8a:dc:63:2a:0a:ff:9a:92:18:da:63:2e: 10:81:05:38:1d:cf:30:10:d5:7e:16:b2:b3:3b:ac:bc:6c:74: 0b:93:fb:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwNzE5MDUxNjQzWhcNMjUwNzI2MDUxNjQzWjAYMRYwFAYD VQQDEw02ODdiMmEzYi1jYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOpFOxJun62gqhVei81xeKeOYNcxunnFo557KjUJ8x22RvQ06ClpQbGepdVZ 2RMHQ7gjKdZHpTWjrz0CqDQNf4RJvC4IlukQfRPjWc5eEKCcOG3M9JjxnLq20S/P bNpEPDLdqFng6JRQq+0c8TbI2Zvksrv7FfKuyxOxqJe2SjBIY01GFP4ql5QeUPMA Bub8RTwONqTVjmpJdSzbFUHzvxvMd1ZrZ27YWrQ9MpjvVIKn/z8/62ABXWRowImh 8k9kuyeAULMtpvwBowbT5Ep5KxVrsV9tv12rnimu5ZIxOIXI1u/zoJMqNEUErzjQ hGwcxKtgDP5c3N0T4Sxm4NlpgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIYQ2km A3dxJ+6WsSbkGsjeJV3oMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGf06r9QaEasswAtOXrZHSc259EMBVHxPIu+MfG3+RPyAniopT0L0 8LMRJ/rrY97D0HUr9v/+72bOUGxHOnMiyG5OKrZXIpKgm6Hxwud63MalhvY8l01j hj+OEgiMOwbpqG+vqqKrPcQEf0jPutVnrnPKvW6S4o0rgdTDs/YgbtssL02sXACe 0HLdQ6oQg5wY0NhWiSJ48NxDLG/nCVfq+4cuRxuLOoZndrDaxCm17uNAr5Rmq0Oy oP153iOTTRAzUmE5nTpRhkN4w9XcTRc7s7zlNk3RCKu1yyp7saKK3GMqCv+akhja Yy4QgQU4Hc8wENV+FrKzO6y8bHQLk/sL -----END CERTIFICATE-----Generated at Sun Jul 20 06:56:09 2025 by rpki-client