$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: OiMis7LJm3CKsOAP8cxw2n7/+gLmmgspF310+6BAICQ= Subject key identifier: 51:88:6B:18:C6:9E:1C:80:B8:C3:3E:97:60:29:31:5D:F9:9C:46:0C Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07AC Signing time: Wed 20 Aug 2025 21:27:52 +0000 Manifest this update: Wed 20 Aug 2025 21:27:51 +0000 Manifest next update: Wed 27 Aug 2025 21:27:51 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: IKtxBYj5AJESfrK0C2Tsvvfj0BUkThqL1wQiSlPqZ/o=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Aug 20 21:27:51 2025 GMT Not After : Aug 27 21:27:51 2025 GMT Subject: CN=68a63dd7-35dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:40:a6:f5:cb:1c:43:c3:48:a7:0b:9b:56: d0:90:65:82:b3:80:ee:16:9c:62:6f:56:b6:ff:ce: 30:04:6e:1d:f7:ff:41:5b:48:c1:4c:d1:da:b8:24: 94:e6:09:d9:01:1e:07:f4:39:f6:6b:e2:84:4d:56: ab:58:af:41:4f:da:45:ff:64:7b:fa:9c:3f:b2:86: 2c:96:eb:4e:87:84:b3:08:5f:5f:14:62:b4:63:0f: ee:c0:e3:21:d1:59:84:01:f9:64:ac:ad:a1:bf:66: bf:58:fb:e6:d8:82:a7:d4:c0:6a:b9:23:64:df:ed: d9:71:94:ba:6c:ff:f2:a2:4e:fb:d2:3f:81:79:b6: d9:98:d8:16:81:bf:69:43:48:4a:0d:e4:5b:74:14: 34:40:e6:bb:dc:4e:56:3f:63:f4:98:6c:0c:3f:76: 71:f2:06:82:c0:6e:4c:ee:cc:01:d2:b7:c0:eb:af: 52:ba:0d:f9:a5:16:72:84:c2:12:a7:39:60:ae:22: 98:47:71:c3:ad:9e:7d:88:33:a9:ac:7f:24:c1:05: fa:a3:f7:e3:91:9b:fa:78:0b:4a:fa:f6:2a:19:7d: bc:e8:02:f6:67:39:36:54:27:b6:f2:c2:60:57:5e: 1a:48:4e:45:65:10:7b:8d:61:a9:4a:e0:53:31:2e: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:88:6B:18:C6:9E:1C:80:B8:C3:3E:97:60:29:31:5D:F9:9C:46:0C X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b7:19:7e:ea:72:18:ac:ed:00:64:d6:e4:2c:d3:3d:9b:d9: b6:76:c0:17:86:c6:53:8c:b7:36:30:4d:e5:0c:4a:37:fd:9b: a9:5d:63:19:19:15:00:13:d5:06:44:dc:13:97:1d:1b:69:ee: aa:35:56:76:a4:ec:68:79:74:65:fb:f5:08:0f:75:e0:45:ae: 7f:59:ac:5f:7a:13:a3:eb:c1:f2:3c:0c:7b:4d:9f:34:55:2d: e8:69:85:0a:b6:01:56:92:54:5f:16:f0:5a:20:ef:0c:40:e9: 1d:a0:c5:04:b4:66:47:1c:d6:ad:32:a4:7d:97:8d:d2:d6:62: 4c:ff:69:44:f3:36:3a:dd:14:7f:96:ed:98:5c:54:2a:e6:49: a1:80:69:8b:9b:81:06:e6:7a:93:a7:58:08:d9:d5:1d:4d:c0: c8:3e:9c:1d:12:26:5f:50:3c:0b:75:aa:8c:1e:e9:af:02:19: 0d:de:ab:22:27:04:f8:c4:54:36:42:7a:eb:0a:64:31:3d:4d: 43:01:47:36:a1:7b:63:d2:47:79:f1:83:aa:0d:2d:ab:3e:ad: 62:8b:c9:70:62:bd:29:61:78:df:88:15:ea:c1:f4:26:1b:d3: 65:25:f2:68:7d:23:98:ed:17:50:45:f7:77:79:87:33:4d:62: 8b:31:3e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwODIwMjEyNzUxWhcNMjUwODI3MjEyNzUxWjAYMRYwFAYD VQQDEw02OGE2M2RkNy0zNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH1ApvXLHEPDSKcLm1bQkGWCs4DuFpxib1a2/84wBG4d9/9BW0jBTNHauCSU 5gnZAR4H9Dn2a+KETVarWK9BT9pF/2R7+pw/soYslutOh4SzCF9fFGK0Yw/uwOMh 0VmEAflkrK2hv2a/WPvm2IKn1MBquSNk3+3ZcZS6bP/yok770j+BebbZmNgWgb9p Q0hKDeRbdBQ0QOa73E5WP2P0mGwMP3Zx8gaCwG5M7swB0rfA669Sug35pRZyhMIS pzlgriKYR3HDrZ59iDOprH8kwQX6o/fjkZv6eAtK+vYqGX286AL2Zzk2VCe28sJg V14aSE5FZRB7jWGpSuBTMS50LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGIaxjG nhyAuMM+l2ApMV35nEYMMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAtxl+6nIYrO0AZNbkLNM9m9m2dsAXhsZTjLc2ME3lDEo3/ZupXWMZ GRUAE9UGRNwTlx0bae6qNVZ2pOxoeXRl+/UID3XgRa5/WaxfehOj68HyPAx7TZ80 VS3oaYUKtgFWklRfFvBaIO8MQOkdoMUEtGZHHNatMqR9l43S1mJM/2lE8zY63RR/ lu2YXFQq5kmhgGmLm4EG5nqTp1gI2dUdTcDIPpwdEiZfUDwLdaqMHumvAhkN3qsi JwT4xFQ2QnrrCmQxPU1DAUc2oXtj0kd58YOqDS2rPq1ii8lwYr0pYXjfiBXqwfQm G9NlJfJofSOY7RdQRfd3eYczTWKLMT7w -----END CERTIFICATE-----Generated at Thu Aug 21 06:09:13 2025 by rpki-client