$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: BDfHikFWAQtyScC/g9RMssoN2MczvzCS8OV1CTa9z+w= Subject key identifier: 44:2D:76:24:21:AB:44:B8:9F:2C:F8:32:99:D4:04:5D:79:63:66:97 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FD4 Signing time: Sun 20 Jul 2025 17:31:26 +0000 Manifest this update: Sun 20 Jul 2025 17:31:25 +0000 Manifest next update: Sun 27 Jul 2025 17:31:25 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: Y4h3wBDTv3j4rxtRSC7HIXBFAyhiV7nCjroCzHzMvoo=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Jul 20 17:31:25 2025 GMT Not After : Jul 27 17:31:25 2025 GMT Subject: CN=687d27ee-ca7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:c9:02:21:85:2d:9b:f3:78:44:7b:b3:c2: bf:c1:f9:7a:0a:93:8f:ef:6e:43:44:c5:ae:ee:53: 74:26:e8:d8:1e:5c:52:83:5f:aa:69:2d:34:6e:f8: 45:b5:59:82:ad:b1:93:1d:95:ae:4c:dc:1e:69:2f: 22:20:60:79:e0:50:a8:03:b4:ad:05:c4:85:70:1e: ee:69:73:6f:13:3e:5e:09:51:d1:39:48:e8:62:55: 53:f1:ac:07:b5:80:16:fc:a7:1b:ec:be:b7:a7:47: 25:3a:d6:31:5f:93:04:34:22:15:66:47:bb:a2:63: 97:97:8b:10:a9:ab:f1:3b:b4:ef:1e:d6:8e:6b:5c: a0:c8:44:62:8e:27:6b:42:90:be:d9:c7:fc:4f:2a: 19:b3:b1:ab:3f:25:cb:52:6b:67:37:7b:14:7d:23: 37:1c:5b:63:32:88:27:0c:ca:08:52:a7:c5:ba:a6: 8f:c8:29:46:4f:d5:83:53:e4:ec:1b:0b:94:85:6b: 8c:32:3e:0f:ee:43:33:fb:3a:1c:31:3f:57:07:69: 1d:d6:c1:d2:f6:75:11:7c:e8:cc:57:5a:a2:02:0d: 52:0e:16:15:c6:07:12:b2:08:f1:33:12:1c:85:f5: 89:75:7d:d7:71:ce:25:e1:92:d2:14:33:f5:3c:50: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:76:24:21:AB:44:B8:9F:2C:F8:32:99:D4:04:5D:79:63:66:97 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e8:83:51:73:0c:24:9f:f5:39:81:be:a9:19:f3:b2:4a:8d: 1b:a8:3c:8d:ef:89:19:34:e5:dd:d9:8e:f9:92:11:b7:14:b2: 4a:78:ae:6a:8e:41:2b:6c:4d:dc:72:cb:bc:4a:4d:61:5d:52: b2:e4:e8:e8:9c:43:dc:9e:af:ad:35:02:90:6e:7b:a4:51:01: 67:35:11:b5:12:0a:95:66:68:6e:af:1a:8c:a1:4d:35:8b:eb: 91:2e:97:f5:97:37:96:50:17:06:80:c3:6a:9a:78:0d:fd:12: a5:5a:22:9d:d7:9d:f0:8a:45:50:20:5c:b2:58:3d:4e:a9:94: 9c:18:6e:79:4a:a0:ae:3d:d8:3d:d8:07:58:af:80:18:b8:39: d8:68:7e:72:54:23:5a:d1:a0:2a:0d:4d:9f:44:22:e7:26:14: 6b:e5:52:9e:89:02:fe:55:1e:75:b5:97:f7:73:de:c4:ea:71: 8c:90:42:af:68:fe:8e:00:bf:0e:9d:fc:8e:88:f9:dc:4c:6f: 70:ce:cb:b2:88:41:52:2f:0c:77:d6:97:be:42:5c:20:23:72: 77:9b:8e:50:d9:a8:db:a8:e9:cf:1a:d0:6f:98:41:d9:90:67: c0:95:a1:5d:22:3c:72:3d:72:0a:22:5f:fa:c0:2d:9f:41:21: 40:7e:0a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwNzIwMTczMTI1WhcNMjUwNzI3MTczMTI1WjAYMRYwFAYD VQQDEw02ODdkMjdlZS1jYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvfJAiGFLZvzeER7s8K/wfl6CpOP725DRMWu7lN0JujYHlxSg1+qaS00bvhF tVmCrbGTHZWuTNweaS8iIGB54FCoA7StBcSFcB7uaXNvEz5eCVHROUjoYlVT8awH tYAW/Kcb7L63p0clOtYxX5MENCIVZke7omOXl4sQqavxO7TvHtaOa1ygyERijidr QpC+2cf8TyoZs7GrPyXLUmtnN3sUfSM3HFtjMognDMoIUqfFuqaPyClGT9WDU+Ts GwuUhWuMMj4P7kMz+zocMT9XB2kd1sHS9nURfOjMV1qiAg1SDhYVxgcSsgjxMxIc hfWJdX3Xcc4l4ZLSFDP1PFBbiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQtdiQh q0S4nyz4MpnUBF15Y2aXMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt6INRcwwkn/U5gb6pGfOySo0bqDyN74kZNOXd2Y75khG3FLJKeK5q jkErbE3ccsu8Sk1hXVKy5OjonEPcnq+tNQKQbnukUQFnNRG1EgqVZmhurxqMoU01 i+uRLpf1lzeWUBcGgMNqmngN/RKlWiKd153wikVQIFyyWD1OqZScGG55SqCuPdg9 2AdYr4AYuDnYaH5yVCNa0aAqDU2fRCLnJhRr5VKeiQL+VR51tZf3c97E6nGMkEKv aP6OAL8OnfyOiPncTG9wzsuyiEFSLwx31pe+QlwgI3J3m45Q2ajbqOnPGtBvmEHZ kGfAlaFdIjxyPXIKIl/6wC2fQSFAfgr4 -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:55 2025 by rpki-client