$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: InldPYBFSNeBe8P4sipOoxN9RntuvCeT9iv1wgPDk3c= Subject key identifier: 93:71:FA:11:E9:D1:47:E8:81:FC:98:08:A6:03:8A:54:36:6E:1B:68 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02BB Signing time: Wed 23 Jul 2025 02:01:53 +0000 Manifest this update: Wed 23 Jul 2025 02:01:53 +0000 Manifest next update: Wed 30 Jul 2025 02:01:53 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: nwaEsppclmYAIroPQB/Ws2SSP234GIWXCDOx6nGlPoo=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: DeTJWRmDeKmiEdEbaqf7bVSh2DO8AXjNSQova+ZvrBU=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Jul 23 02:01:53 2025 GMT Not After : Jul 30 02:01:53 2025 GMT Subject: CN=68804291-aee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:60:45:9e:41:bb:93:03:78:ac:f2:81:a5: e4:ca:63:d0:5a:e0:e3:f6:a8:a2:35:84:2b:26:96: 79:2f:6c:4e:da:ca:e3:a0:9c:69:ec:30:a9:3b:5f: 59:ca:ae:95:6f:87:40:80:f2:9b:66:35:69:72:2b: 2c:12:d1:d7:32:82:56:93:cd:8d:a7:60:30:a1:b9: fa:35:2f:28:02:b3:15:41:a2:08:ea:d9:d2:af:86: 94:6b:03:9e:3b:d9:61:11:27:08:0f:2b:2b:1b:05: 92:71:6a:b6:a0:da:77:70:02:a4:04:61:e9:cb:b7: 23:fa:ef:e6:99:e4:cb:30:74:0e:58:bd:f8:cb:24: 65:d0:5e:43:e3:e4:a6:6e:71:b2:7a:f8:65:a3:a6: f5:24:3c:9a:5f:e6:87:e8:18:1b:2c:a8:4f:31:72: 53:b9:ea:19:8e:41:cf:8e:5d:7d:39:be:3b:cf:55: a3:04:5d:e3:ff:ce:f4:28:02:6b:8f:98:1f:5a:a7: 64:b1:57:ba:ac:73:77:43:61:fe:ae:06:74:95:3a: 80:1c:c6:0e:3f:7c:5f:3d:ee:6b:34:7c:0a:55:09: f9:e0:c1:5a:98:32:1d:87:b3:17:0b:b1:6a:0c:b9: c1:af:c3:4e:74:54:58:c0:1b:be:e8:8f:47:93:d4: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:FA:11:E9:D1:47:E8:81:FC:98:08:A6:03:8A:54:36:6E:1B:68 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:84:47:b6:57:45:30:ab:12:a2:81:1f:63:e7:a2:97:3e: cd:70:34:0f:02:70:6c:52:e3:b2:38:de:8f:39:01:a9:36:5e: d3:98:93:4c:12:27:f5:89:c9:6d:8c:98:b5:e2:42:53:74:f9: 47:9a:df:99:09:52:c6:86:34:21:fe:78:4e:e2:6b:22:e6:10: 59:0c:11:a5:4b:e5:1c:54:16:ec:1f:b4:14:59:4c:a1:46:0b: 4f:9b:ac:08:63:e5:fa:1b:1d:30:99:6f:60:f0:11:87:3c:3c: a7:f5:9f:5f:10:e1:d3:83:bb:9e:7d:81:e9:fb:e2:d8:9e:95: c4:c5:1e:c7:6a:20:bd:d6:fa:6b:7e:1a:21:e9:35:be:9c:a9: 24:de:19:7b:42:ac:1e:60:ed:27:c2:96:a9:41:b3:8a:a5:66: 67:77:0b:d3:1c:15:ed:b0:92:1e:46:3a:75:b7:95:77:e7:b8: 13:c8:6e:0b:9a:99:1e:a0:ab:6a:db:36:d6:c9:72:f9:15:80: 2f:c3:d1:ce:5b:0d:d2:8b:aa:43:65:9f:1f:c8:09:6c:81:3a: 27:26:fd:52:56:be:19:65:07:35:af:07:7c:38:d0:46:0e:ff: 5d:44:e7:46:2c:47:20:33:38:b6:49:e5:5c:c8:9c:70:50:e3: 49:22:eb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwNzIzMDIwMTUzWhcNMjUwNzMwMDIwMTUzWjAYMRYwFAYD VQQDEw02ODgwNDI5MS1hZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KBgRZ5Bu5MDeKzygaXkymPQWuDj9qiiNYQrJpZ5L2xO2srjoJxp7DCpO19Z yq6Vb4dAgPKbZjVpcissEtHXMoJWk82Np2Awobn6NS8oArMVQaII6tnSr4aUawOe O9lhEScIDysrGwWScWq2oNp3cAKkBGHpy7cj+u/mmeTLMHQOWL34yyRl0F5D4+Sm bnGyevhlo6b1JDyaX+aH6BgbLKhPMXJTueoZjkHPjl19Ob47z1WjBF3j/870KAJr j5gfWqdksVe6rHN3Q2H+rgZ0lTqAHMYOP3xfPe5rNHwKVQn54MFamDIdh7MXC7Fq DLnBr8NOdFRYwBu+6I9Hk9Sm0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNx+hHp 0UfogfyYCKYDilQ2bhtoMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlV4RHtldFMKsSooEfY+eilz7NcDQPAnBsUuOyON6POQGpNl7TmJNM Eif1icltjJi14kJTdPlHmt+ZCVLGhjQh/nhO4msi5hBZDBGlS+UcVBbsH7QUWUyh RgtPm6wIY+X6Gx0wmW9g8BGHPDyn9Z9fEOHTg7uefYHp++LYnpXExR7HaiC91vpr fhoh6TW+nKkk3hl7QqweYO0nwpapQbOKpWZndwvTHBXtsJIeRjp1t5V357gTyG4L mpkeoKtq2zbWyXL5FYAvw9HOWw3Si6pDZZ8fyAlsgTonJv1SVr4ZZQc1rwd8ONBG Dv9dROdGLEcgMzi2SeVcyJxwUONJIusx -----END CERTIFICATE-----Generated at Wed Jul 23 17:24:39 2025 by rpki-client