$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: vRM/xhdDL/GeCuyIdKiCf4CagJBn13kmE6TfMs0/2Eg= Subject key identifier: 45:1D:07:15:20:C2:E9:D6:F3:E4:DF:7C:18:85:61:2E:E8:1D:D2:65 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01D8 Signing time: Mon 21 Jul 2025 02:51:49 +0000 Manifest this update: Mon 21 Jul 2025 02:51:49 +0000 Manifest next update: Mon 28 Jul 2025 02:51:49 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: Lm5rWHLhCfDQBqJ6+/u0XJxxf7lrJaTWufvKH9oUMSY=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Jul 21 02:51:49 2025 GMT Not After : Jul 28 02:51:49 2025 GMT Subject: CN=687dab45-aead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:cc:77:7c:fb:ff:d9:51:03:3e:38:a5:ea: b6:4d:95:d0:db:58:92:ee:7e:0c:79:eb:d7:1d:d6: 51:25:28:6f:cd:ab:9b:45:02:74:be:97:43:54:f7: 75:4a:5d:45:09:32:80:12:bc:70:4b:de:3f:29:aa: 54:99:13:dc:8d:aa:20:e6:25:a1:e0:fb:fb:9a:2b: ff:1b:7d:2c:be:77:2a:2e:54:58:1c:02:43:12:fd: 1b:9e:6b:65:82:2a:d2:e6:02:b1:a4:35:5a:87:d8: 03:a8:41:c1:af:8f:88:b4:74:d0:ae:b5:06:c3:5a: 39:4c:2e:7d:25:28:65:29:8d:30:1f:76:b1:b5:34: af:9b:5d:68:96:85:9a:08:8b:88:c0:51:25:1d:fe: 01:61:de:73:55:29:0d:6d:2e:57:dc:61:9a:93:dd: 34:d8:5b:e0:aa:0a:7a:c2:38:39:44:f6:f0:42:e3: f8:80:5c:3d:11:d3:0a:03:89:b6:c2:8d:e7:a5:97: 19:27:3f:3a:6b:ef:00:a0:60:b2:75:f8:a7:96:00: 0b:52:4f:50:8e:be:04:0d:fc:4a:28:64:81:ab:d8: c9:93:a1:9a:a1:a6:3b:d3:e1:24:5a:05:39:2e:c5: a1:ff:89:47:f2:03:fb:8e:c1:9c:88:29:36:4e:d2: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:07:15:20:C2:E9:D6:F3:E4:DF:7C:18:85:61:2E:E8:1D:D2:65 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:84:78:92:7a:12:b8:ee:e5:01:73:f8:e5:80:2d:cb:af:19: 13:d2:30:61:56:39:9c:5a:c1:cf:30:99:de:5b:b1:22:b1:de: 73:c5:0e:ec:39:b7:42:cb:13:48:c9:ac:16:37:bf:16:a5:25: 87:f9:75:75:4b:0a:c3:67:4e:61:27:9a:45:cd:f0:e2:22:4c: 7f:d3:cb:a7:c5:a6:f8:bd:f1:d9:6b:ac:d9:4c:f5:55:e7:ff: 2f:1a:47:cb:0c:ff:1a:09:48:f9:e1:8e:f5:18:c2:ac:9d:95: d4:a1:59:70:d2:56:d2:68:d0:fd:a2:ff:e8:e6:8e:70:5f:de: e0:9b:28:b8:6e:62:6d:42:7d:97:b3:3d:82:9a:1a:c6:8e:4f: 32:23:47:65:c5:0c:40:ce:5d:4e:81:1f:32:19:08:b1:f5:87: c0:8a:d1:59:6d:de:59:49:fc:dd:30:02:70:53:aa:14:ab:5c: bc:5e:80:40:fb:19:dd:1f:a3:1f:2d:5c:fe:bc:ad:16:c6:02: 63:5a:8a:36:1d:68:04:d3:83:e2:2a:9f:ef:00:36:94:c2:58: d7:bc:63:87:80:87:d0:0e:8a:6d:c7:f6:95:4e:3d:3d:61:98: 49:bc:9e:7d:12:d1:5a:b2:2a:25:e0:29:58:a1:96:dd:14:b2: 87:76:61:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwNzIxMDI1MTQ5WhcNMjUwNzI4MDI1MTQ5WjAYMRYwFAYD VQQDEw02ODdkYWI0NS1hZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNbMd3z7/9lRAz44peq2TZXQ21iS7n4MeevXHdZRJShvzaubRQJ0vpdDVPd1 Sl1FCTKAErxwS94/KapUmRPcjaog5iWh4Pv7miv/G30svncqLlRYHAJDEv0bnmtl girS5gKxpDVah9gDqEHBr4+ItHTQrrUGw1o5TC59JShlKY0wH3axtTSvm11oloWa CIuIwFElHf4BYd5zVSkNbS5X3GGak9002Fvgqgp6wjg5RPbwQuP4gFw9EdMKA4m2 wo3npZcZJz86a+8AoGCydfinlgALUk9Qjr4EDfxKKGSBq9jJk6GaoaY70+EkWgU5 LsWh/4lH8gP7jsGciCk2TtKb8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUdBxUg wunW8+TffBiFYS7oHdJlMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvhHiSehK47uUBc/jlgC3LrxkT0jBhVjmcWsHPMJneW7Eisd5zxQ7s ObdCyxNIyawWN78WpSWH+XV1SwrDZ05hJ5pFzfDiIkx/08unxab4vfHZa6zZTPVV 5/8vGkfLDP8aCUj54Y71GMKsnZXUoVlw0lbSaND9ov/o5o5wX97gmyi4bmJtQn2X sz2CmhrGjk8yI0dlxQxAzl1OgR8yGQix9YfAitFZbd5ZSfzdMAJwU6oUq1y8XoBA +xndH6MfLVz+vK0WxgJjWoo2HWgE04PiKp/vADaUwljXvGOHgIfQDoptx/aVTj09 YZhJvJ59EtFasiol4ClYoZbdFLKHdmH+ -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:27 2025 by rpki-client