$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: 9C7Dsm+OcDBtWVL6NYB/O/MPLmH7jqFwgT0jJMO788o= Subject key identifier: C2:C4:0A:2C:3A:29:1C:DD:F3:E7:39:F9:45:30:59:39:BF:7E:D1:30 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1C41 Signing time: Thu 04 Sep 2025 16:21:06 +0000 Manifest this update: Thu 04 Sep 2025 16:21:05 +0000 Manifest next update: Thu 11 Sep 2025 16:21:05 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: TS3k249yl9ECe0JdTNnlH+SpWTd+3xQ3NS7UrK4a14c=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: v+bqhI45Rj4tdal+cGC8iPqXxp1K8uMCBnHwfcYfPqQ=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7317 (0x1c95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Sep 4 16:21:05 2025 GMT Not After : Sep 11 16:21:05 2025 GMT Subject: CN=68b9bc71-583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:ab:b1:b3:5b:09:38:0b:5d:62:85:6f:8a: 46:2e:c1:fd:47:b9:5b:a6:27:e4:25:43:3a:cf:6c: f5:7a:54:d8:fc:42:ed:40:f8:df:5b:ba:77:52:c7: 2e:65:b7:ae:67:e9:02:0a:23:bd:fc:b9:7b:4a:e5: f3:1f:44:7e:d9:c6:49:84:f0:03:c0:9c:5e:eb:c3: 3c:07:25:a7:cf:c4:24:d5:ab:44:65:5f:49:87:61: 0d:d2:40:d8:93:85:ad:dd:16:42:30:5d:09:03:82: db:d3:ee:c5:f6:80:0a:95:73:94:c7:73:c3:37:c6: 07:50:2c:0b:8a:ff:20:b0:27:78:dc:b5:0d:16:c3: 37:3b:6c:3b:42:b2:b8:79:3a:29:6d:68:62:c2:28: 1a:14:3d:dc:90:ec:cf:7f:a0:3a:95:d8:26:99:16: 5a:3f:6a:21:e5:a0:71:78:7a:0e:82:0e:9e:a2:3a: 4d:89:e5:d8:39:4c:2d:20:09:66:73:da:07:27:8e: 23:b3:30:e9:fc:02:c7:dc:99:25:16:46:7d:64:a5: 38:98:22:7b:2f:40:a4:2f:1e:9e:f5:59:4c:26:00: 05:ba:99:32:56:b1:e2:4a:83:cd:3b:62:d2:c6:ad: fb:50:ae:45:e7:57:6d:a0:71:8e:99:47:c8:88:9a: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:0A:2C:3A:29:1C:DD:F3:E7:39:F9:45:30:59:39:BF:7E:D1:30 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cd:a8:b2:de:15:5c:c8:7c:1e:e0:a3:0e:32:f6:ce:59:4d: fa:da:8f:15:12:ff:9e:c3:58:31:81:de:84:df:91:07:a0:6e: fe:2c:7f:89:3c:95:1c:bc:4b:b5:67:f0:a1:ec:27:9c:ff:09: 83:d3:9c:69:74:d9:86:af:d0:7f:94:a0:1a:5c:06:05:cb:00: 45:35:8b:98:2e:c1:9b:39:9b:de:fb:86:4e:02:f2:7d:45:1d: 03:ed:bb:1c:77:0b:69:6a:a7:60:2f:4c:06:9a:05:7e:3e:e5: 0c:8c:c8:a5:f7:c7:d8:f1:47:3c:87:c2:1d:69:e3:1c:97:f7: 3f:83:64:b4:41:69:c1:32:4c:50:66:6a:7a:44:d5:9e:05:ac: c2:1c:0d:a3:fa:18:92:a9:c0:ac:92:68:f1:e5:b3:1f:9d:b9: 7c:2c:c4:3f:ff:da:01:e4:03:cf:27:3e:05:f2:83:13:20:20: c4:7d:a2:67:ab:03:f5:27:71:b6:04:c4:0c:0f:4f:51:ff:2a: 86:62:4a:63:30:74:a1:6e:ec:5d:54:aa:10:cb:80:ef:57:43: 17:27:38:0d:25:34:9c:64:6f:fe:66:42:2d:d4:7f:cd:0a:99: 53:aa:c3:7c:b1:37:c0:30:a1:24:dc:db:91:66:40:48:8c:68: d2:c1:97:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUwOTA0MTYyMTA1WhcNMjUwOTExMTYyMTA1WjAYMRYwFAYD VQQDEw02OGI5YmM3MS01ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuyrsbNbCTgLXWKFb4pGLsH9R7lbpifkJUM6z2z1elTY/ELtQPjfW7p3Uscu ZbeuZ+kCCiO9/Ll7SuXzH0R+2cZJhPADwJxe68M8ByWnz8Qk1atEZV9Jh2EN0kDY k4Wt3RZCMF0JA4Lb0+7F9oAKlXOUx3PDN8YHUCwLiv8gsCd43LUNFsM3O2w7QrK4 eTopbWhiwigaFD3ckOzPf6A6ldgmmRZaP2oh5aBxeHoOgg6eojpNieXYOUwtIAlm c9oHJ44jszDp/ALH3JklFkZ9ZKU4mCJ7L0CkLx6e9VlMJgAFupkyVrHiSoPNO2LS xq37UK5F51dtoHGOmUfIiJqn5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLECiw6 KRzd8+c5+UUwWTm/ftEwMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBszaiy3hVcyHwe4KMOMvbOWU362o8VEv+ew1gxgd6E35EHoG7+LH+J PJUcvEu1Z/Ch7Cec/wmD05xpdNmGr9B/lKAaXAYFywBFNYuYLsGbOZve+4ZOAvJ9 RR0D7bscdwtpaqdgL0wGmgV+PuUMjMil98fY8Uc8h8IdaeMcl/c/g2S0QWnBMkxQ Zmp6RNWeBazCHA2j+hiSqcCskmjx5bMfnbl8LMQ//9oB5APPJz4F8oMTICDEfaJn qwP1J3G2BMQMD09R/yqGYkpjMHShbuxdVKoQy4DvV0MXJzgNJTScZG/+ZkIt1H/N CplTqsN8sTfAMKEk3NuRZkBIjGjSwZdQ -----END CERTIFICATE-----Generated at Sat Sep 6 14:15:29 2025 by rpki-client