$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: bfXEGQjwJo5hcTsIF0xfp1sZt5o0+cLwpUsmCsuW0vs= Subject key identifier: 33:28:74:42:F0:31:20:96:FE:17:28:0C:30:EC:EE:A8:76:76:B2:A2 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: D2 Signing time: Wed 03 Sep 2025 06:10:42 +0000 Manifest this update: Wed 03 Sep 2025 06:10:41 +0000 Manifest next update: Wed 10 Sep 2025 06:10:41 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: WD9Ip8lBWUDqkX6jTdmzK4uH+gHwgwNKQQMPi9kC5Bo=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Sep 3 06:10:41 2025 GMT Not After : Sep 10 06:10:41 2025 GMT Subject: CN=68b7dbe2-cc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:65:01:b4:5b:2d:45:b8:19:80:0c:27:f2: 21:01:76:e2:4d:bd:a3:15:d0:09:45:aa:7e:a6:65: c7:cc:38:1c:bd:fb:2f:85:7d:8e:13:aa:c4:ea:b6: 1a:1b:f9:13:64:aa:8e:18:fd:86:69:10:d5:a4:b8: 1d:be:74:f2:c0:e3:9f:5d:be:b8:7c:39:58:37:b1: ba:8a:8e:d2:f2:f1:55:32:b6:ea:4b:1a:7c:6f:88: 93:b0:99:97:bd:02:e3:93:90:9d:c6:f9:09:31:88: 4e:bd:c8:a0:bb:dc:85:dd:f5:7b:59:d1:95:65:2b: 16:74:40:b0:17:dd:41:23:4e:b2:0f:db:ea:4b:f7: 7c:05:65:b4:20:3d:da:5d:e0:d0:2b:4d:cc:a8:5a: 26:09:00:cd:ab:82:03:24:f1:2d:61:df:c6:4c:33: b8:be:7d:19:64:f2:3b:25:83:c5:0e:64:c9:2e:30: 6d:c5:51:91:db:b5:3a:ae:cb:a8:1b:0b:7f:79:83: 58:19:58:8b:0c:45:a0:ad:f3:80:c0:dd:1e:eb:a2: 86:bf:76:e4:e7:35:18:9b:24:ac:1a:11:5d:e2:60: db:03:c3:11:aa:c5:6a:e2:1d:8d:64:e7:9f:07:69: e5:63:30:cd:4f:6b:65:7b:18:13:f7:e9:ba:09:ab: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:74:42:F0:31:20:96:FE:17:28:0C:30:EC:EE:A8:76:76:B2:A2 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:3f:76:b1:48:ac:e2:10:e8:b7:8e:41:d1:99:e3:06:1e: 07:bb:bb:26:81:66:af:7a:9d:6f:3c:72:ca:f2:9a:4b:07:2b: 90:69:19:64:03:f4:76:dd:65:4c:b7:dd:2e:8f:24:d3:2d:24: 03:a9:95:25:06:0f:bc:f4:5e:94:71:61:9a:3b:f3:fb:4d:79: 4d:7f:77:b7:80:e0:e0:09:53:63:14:10:2f:e6:83:9b:78:81: 15:46:1f:b3:5f:69:e4:ca:e5:f6:97:46:02:0f:8a:f6:00:31: 6c:f9:e0:84:84:57:3f:d4:f0:6b:4d:96:f7:88:c3:f6:01:d5: 9b:43:06:a9:bf:00:b3:a7:1e:4d:de:0c:8f:fa:d4:c1:91:9b: a8:d6:66:48:89:8e:4f:cb:c5:cd:d7:fd:12:e7:e0:06:dc:58: 43:c8:cc:fe:9c:50:1b:ef:5d:6e:4c:3b:03:fe:96:41:01:13: 3f:82:85:c8:04:21:16:97:fe:40:21:c1:c7:ec:64:7d:74:2a: 31:e9:31:c6:0c:40:4c:59:aa:e5:87:68:35:85:c0:55:db:3b: fc:a3:08:59:66:e7:4f:c5:91:f7:87:66:db:fb:e8:e6:5b:be: 7b:a4:57:8a:71:a9:76:c9:ef:90:13:4f:d2:bf:7c:61:e8:16: 70:bc:79:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwOTAzMDYxMDQxWhcNMjUwOTEwMDYxMDQxWjAYMRYwFAYD VQQDEw02OGI3ZGJlMi1jYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9FlAbRbLUW4GYAMJ/IhAXbiTb2jFdAJRap+pmXHzDgcvfsvhX2OE6rE6rYa G/kTZKqOGP2GaRDVpLgdvnTywOOfXb64fDlYN7G6io7S8vFVMrbqSxp8b4iTsJmX vQLjk5CdxvkJMYhOvcigu9yF3fV7WdGVZSsWdECwF91BI06yD9vqS/d8BWW0ID3a XeDQK03MqFomCQDNq4IDJPEtYd/GTDO4vn0ZZPI7JYPFDmTJLjBtxVGR27U6rsuo Gwt/eYNYGViLDEWgrfOAwN0e66KGv3bk5zUYmySsGhFd4mDbA8MRqsVq4h2NZOef B2nlYzDNT2tlexgT9+m6Cas4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDModELw MSCW/hcoDDDs7qh2drKiMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu4z92sUis4hDot45B0ZnjBh4Hu7smgWavep1vPHLK8ppLByuQaRlk A/R23WVMt90ujyTTLSQDqZUlBg+89F6UcWGaO/P7TXlNf3e3gODgCVNjFBAv5oOb eIEVRh+zX2nkyuX2l0YCD4r2ADFs+eCEhFc/1PBrTZb3iMP2AdWbQwapvwCzpx5N 3gyP+tTBkZuo1mZIiY5Py8XN1/0S5+AG3FhDyMz+nFAb711uTDsD/pZBARM/goXI BCEWl/5AIcHH7GR9dCox6THGDEBMWarlh2g1hcBV2zv8owhZZudPxZH3h2bb++jm W757pFeKcal2ye+QE0/Sv3xh6BZwvHny -----END CERTIFICATE-----Generated at Thu Sep 4 14:02:17 2025 by rpki-client