$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: 8YHVz3jGaAByLrpO3Ia+ZW9p6ueKzjWOW2aJqytJTiM= Subject key identifier: CB:3E:B7:24:A3:25:15:F2:DD:DD:32:BE:39:B3:E9:25:32:74:F6:DD Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B7C Signing time: Sun 24 Aug 2025 19:01:52 +0000 Manifest this update: Sun 24 Aug 2025 19:01:52 +0000 Manifest next update: Sun 31 Aug 2025 19:01:52 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: EqPPeZc5GLKwqWtz/gRQsf6z1KC3tOU+rWi+J3CEED8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Aug 24 19:01:52 2025 GMT Not After : Aug 31 19:01:52 2025 GMT Subject: CN=68ab61a0-e7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:15:e2:f2:9d:fe:fb:2b:b9:88:dd:80:7b: 40:55:7d:78:69:9b:81:9f:20:cf:f5:6a:eb:87:fe: 96:d2:9c:a2:3b:bc:af:c9:13:b9:21:a0:cc:42:ac: 49:00:bf:98:bf:28:d8:51:98:37:b5:90:04:2c:fa: a7:ce:40:dd:92:49:9b:7a:1a:cf:11:98:a8:93:45: f8:a0:1f:83:ca:4a:79:e1:fe:e0:f4:6c:25:39:71: 47:7b:d3:66:06:4a:82:96:72:1f:a0:1a:25:1c:9c: f2:cd:1a:37:35:b5:54:57:55:74:6c:ef:90:46:3a: 2a:45:db:18:4c:aa:35:a8:27:2c:9a:cc:5a:1d:cf: bb:bd:b5:63:c9:9d:03:32:90:9a:68:50:89:92:65: dc:2e:ad:29:7d:90:ea:89:82:75:4e:64:d8:57:b4: a2:95:21:24:4e:58:3a:70:c9:92:9e:ec:86:81:77: 3e:9c:d3:92:31:e7:25:28:dc:cf:17:24:12:23:55: 0d:91:b8:a4:44:d5:2f:34:55:c6:07:fb:de:02:73: 0a:0d:52:cc:fb:c0:72:d1:3d:f1:86:82:0e:ec:be: b9:0d:b8:bf:79:3a:6c:18:c7:73:11:f3:4f:d9:41: f5:a7:13:c9:36:6a:b7:3b:56:f6:aa:b9:20:a7:c1: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:B7:24:A3:25:15:F2:DD:DD:32:BE:39:B3:E9:25:32:74:F6:DD X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:60:19:2c:0e:61:78:c0:5e:f3:75:ee:26:f5:56:e1:88:8d: 6b:ec:09:82:fe:0f:a1:57:55:81:91:4f:41:06:b5:5e:18:2c: b5:05:e4:72:e9:be:fc:86:33:c2:f7:66:66:09:90:94:85:d8: 3f:a0:fb:bf:02:2d:75:9d:e6:16:33:df:ef:50:57:23:1b:78: b2:d7:f0:66:5a:40:43:74:51:fa:69:7c:25:21:ee:8e:ab:54: e7:e1:3c:db:40:42:41:f8:a6:af:e0:35:72:42:d8:c7:19:00: 1d:d0:f3:36:13:18:6b:ed:de:9f:a2:5d:9f:22:33:0a:e0:d4: fc:41:57:b2:d2:da:89:d4:4f:cf:68:e4:7d:e8:43:77:6a:1f: b2:86:f3:3f:1d:6e:94:33:c5:04:af:bb:3f:81:99:90:0f:8f: 64:9d:cc:99:8a:21:c4:66:e0:5e:53:06:d3:e4:ca:4e:a1:10: bc:0b:00:11:d0:5e:21:b7:f3:ba:fd:7c:ce:0e:e1:b5:d2:35: f1:eb:26:10:61:9d:e9:35:69:44:74:1c:fe:8f:42:08:32:b7: d7:6e:c1:1f:3f:06:a2:2d:a4:9e:e4:68:35:2a:bf:4a:11:f9: ff:32:8e:3b:2b:19:f6:6b:82:39:95:14:84:fc:c2:8c:5e:0d: 8d:30:a0:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwODI0MTkwMTUyWhcNMjUwODMxMTkwMTUyWjAYMRYwFAYD VQQDEw02OGFiNjFhMC1lN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFQV4vKd/vsruYjdgHtAVX14aZuBnyDP9Wrrh/6W0pyiO7yvyRO5IaDMQqxJ AL+YvyjYUZg3tZAELPqnzkDdkkmbehrPEZiok0X4oB+Dykp54f7g9GwlOXFHe9Nm BkqClnIfoBolHJzyzRo3NbVUV1V0bO+QRjoqRdsYTKo1qCcsmsxaHc+7vbVjyZ0D MpCaaFCJkmXcLq0pfZDqiYJ1TmTYV7SilSEkTlg6cMmSnuyGgXc+nNOSMeclKNzP FyQSI1UNkbikRNUvNFXGB/veAnMKDVLM+8By0T3xhoIO7L65Dbi/eTpsGMdzEfNP 2UH1pxPJNmq3O1b2qrkgp8G0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs+tySj JRXy3d0yvjmz6SUydPbdMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKYBksDmF4wF7zde4m9VbhiI1r7AmC/g+hV1WBkU9BBrVeGCy1BeRy 6b78hjPC92ZmCZCUhdg/oPu/Ai11neYWM9/vUFcjG3iy1/BmWkBDdFH6aXwlIe6O q1Tn4TzbQEJB+Kav4DVyQtjHGQAd0PM2Exhr7d6fol2fIjMK4NT8QVey0tqJ1E/P aOR96EN3ah+yhvM/HW6UM8UEr7s/gZmQD49kncyZiiHEZuBeUwbT5MpOoRC8CwAR 0F4ht/O6/XzODuG10jXx6yYQYZ3pNWlEdBz+j0IIMrfXbsEfPwaiLaSe5Gg1Kr9K Efn/Mo47Kxn2a4I5lRSE/MKMXg2NMKDu -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:08 2025 by rpki-client