$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: Pq82s045PySWIFMd7RFrNyJwYqamZW5Yq5EcApEhr1E= Subject key identifier: 6F:3D:0B:6C:53:1C:6F:09:B3:B2:E4:6F:D0:9F:24:95:8F:4F:2C:C4 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01D8 Signing time: Mon 21 Jul 2025 02:50:39 +0000 Manifest this update: Mon 21 Jul 2025 02:50:38 +0000 Manifest next update: Mon 28 Jul 2025 02:50:38 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: Hk+NlXvNYLOVOR860eklzroyjAQ3NrcEVkXt8WSy1/w=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Jul 21 02:50:38 2025 GMT Not After : Jul 28 02:50:38 2025 GMT Subject: CN=687daafe-ace1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:44:87:6a:62:71:cf:f1:88:5e:0b:98:0b:21: a5:93:65:cd:9b:bd:85:97:39:49:f7:e6:01:ea:66: 1a:e6:3d:3c:5a:d3:29:e2:8c:13:3c:95:41:0f:f6: c2:7d:d1:75:53:6b:5f:9a:20:39:b8:c0:dc:17:46: a4:be:17:56:dd:f1:df:02:b3:28:17:c0:a6:a8:99: 2b:ab:16:72:5c:50:50:6c:eb:5a:8f:b8:8d:f4:07: ff:9e:ce:5d:29:90:45:b7:b0:4b:29:af:e8:e3:6c: 46:ae:ac:6f:6f:af:fb:33:c9:7e:ba:5c:61:a2:87: de:dd:1d:53:cf:b0:49:4e:0d:a0:58:c7:20:a7:b7: 87:b7:22:b4:59:09:85:3c:50:aa:22:a2:91:2e:73: 0d:26:a4:8d:17:6d:f8:af:41:0f:be:c2:6e:6b:3f: 48:6c:f7:46:30:d4:c2:22:b9:9e:e1:95:f3:f9:e5: 4d:18:c9:20:b6:6e:57:bf:ad:d1:9a:ee:f5:38:78: 8d:b1:08:1f:f3:6a:56:de:8c:b4:7e:fc:24:52:b5: 90:51:c7:63:d8:08:a0:0c:9b:f5:21:51:de:c5:d0: db:41:23:2b:14:a9:2c:ec:c2:9b:20:a6:67:f0:7f: e3:e3:8c:ca:c3:8c:b9:dd:6f:d3:1d:e9:94:b3:8c: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:0B:6C:53:1C:6F:09:B3:B2:E4:6F:D0:9F:24:95:8F:4F:2C:C4 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ac:7f:e8:3c:f4:f6:fa:c2:1c:99:bf:a3:14:17:78:e2:75: 14:46:44:50:7a:c5:47:51:4d:26:ac:04:12:2c:8b:a0:69:4c: e7:b1:e1:64:2f:0d:3e:f5:c5:cd:bf:81:87:6d:f9:7d:9b:12: af:3d:30:f8:6a:18:ae:0c:8b:32:28:6c:12:59:9d:9b:ec:f0: ca:9d:11:78:3e:91:4e:f7:62:4f:5d:09:e9:d7:3d:2d:d2:7c: 97:01:a3:fb:9e:fc:1c:05:f8:36:65:f5:ed:65:da:c2:32:1a: 35:fc:61:8a:78:19:de:11:2b:fb:47:0f:79:b0:5f:10:70:7d: 26:bc:43:8f:5e:51:b7:65:8f:f4:ff:b8:c2:5a:5d:74:43:f1: 5d:27:11:75:03:eb:8e:5d:b9:6a:c1:ec:e4:b9:72:f8:34:40: 98:d3:c2:5b:54:06:7d:b7:1b:a5:66:f8:fa:b9:a3:34:9e:69: 8b:99:b6:ff:d6:e8:79:36:0c:d4:82:ad:c3:ca:fc:34:0c:52: d0:e9:b5:9f:7d:62:c3:31:31:7f:fd:89:4e:f2:59:f6:e7:6e: 23:87:87:70:00:91:84:87:a6:0d:f4:34:2d:a4:7e:4e:1e:68: c7:ec:65:34:29:ba:1e:1f:86:c5:11:4d:3f:7c:3e:55:72:bb: 3f:41:2c:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwNzIxMDI1MDM4WhcNMjUwNzI4MDI1MDM4WjAYMRYwFAYD VQQDEw02ODdkYWFmZS1hY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kSHamJxz/GIXguYCyGlk2XNm72FlzlJ9+YB6mYa5j08WtMp4owTPJVBD/bC fdF1U2tfmiA5uMDcF0akvhdW3fHfArMoF8CmqJkrqxZyXFBQbOtaj7iN9Af/ns5d KZBFt7BLKa/o42xGrqxvb6/7M8l+ulxhoofe3R1Tz7BJTg2gWMcgp7eHtyK0WQmF PFCqIqKRLnMNJqSNF234r0EPvsJuaz9IbPdGMNTCIrme4ZXz+eVNGMkgtm5Xv63R mu71OHiNsQgf82pW3oy0fvwkUrWQUcdj2AigDJv1IVHexdDbQSMrFKks7MKbIKZn 8H/j44zKw4y53W/THemUs4ynuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG89C2xT HG8Js7Lkb9CfJJWPTyzEMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrH/oPPT2+sIcmb+jFBd44nUURkRQesVHUU0mrAQSLIugaUznseFk Lw0+9cXNv4GHbfl9mxKvPTD4ahiuDIsyKGwSWZ2b7PDKnRF4PpFO92JPXQnp1z0t 0nyXAaP7nvwcBfg2ZfXtZdrCMho1/GGKeBneESv7Rw95sF8QcH0mvEOPXlG3ZY/0 /7jCWl10Q/FdJxF1A+uOXblqwezkuXL4NECY08JbVAZ9txulZvj6uaM0nmmLmbb/ 1uh5NgzUgq3Dyvw0DFLQ6bWffWLDMTF//YlO8ln2524jh4dwAJGEh6YN9DQtpH5O HmjH7GU0KboeH4bFEU0/fD5Vcrs/QSxZ -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:45 2025 by rpki-client