$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: mcvSPPXYl6igtdDXtYqHjNLobkP5ZR8r5V3Z/4QENw0= Subject key identifier: 8A:32:CB:C6:8A:28:EA:A1:7B:4C:E6:CE:28:EE:FC:4F:DD:B6:84:9C Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 08B6 Signing time: Sat 06 Sep 2025 20:42:10 +0000 Manifest this update: Sat 06 Sep 2025 20:42:09 +0000 Manifest next update: Sat 13 Sep 2025 20:42:09 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: nPyjXzU+bo+NB/LRTWcOOkQgECCQShQ2+gBSuzYTIes=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Sep 6 20:42:09 2025 GMT Not After : Sep 13 20:42:09 2025 GMT Subject: CN=68bc9ca1-2d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:35:f9:22:f4:c9:d1:5d:63:98:dd:5f:d3: 48:e9:ef:ab:a6:ea:d2:f1:28:28:96:99:15:0a:37: 71:94:44:52:d7:58:42:84:15:bc:ff:9b:98:f8:47: c6:9d:2b:b3:5b:2a:b1:f6:7f:d1:21:4e:6c:c2:9d: f6:14:84:dd:f4:f5:7b:4c:79:30:cd:3a:d0:6e:2d: 2b:09:94:7d:60:01:ad:9e:38:0d:96:98:8a:55:32: 55:e6:4c:a7:87:10:ec:d1:4a:ac:d6:fc:3d:62:6a: 1f:a2:cb:b0:7b:1a:75:8b:71:c6:4e:d4:31:04:b8: bd:ec:89:00:3e:93:19:fe:d5:4e:e9:4b:11:a0:e3: 3e:5c:78:39:07:09:10:5b:43:9b:19:5d:2b:4e:82: 50:52:09:f1:08:48:e0:43:52:94:86:2e:f3:e6:c5: 53:6e:71:a6:d2:80:53:8b:38:29:51:b0:85:bb:4d: 41:56:10:bc:e3:ef:fa:b6:e8:87:82:53:f9:90:74: 20:b8:b8:7f:9d:ed:02:5b:64:55:03:10:e7:56:3c: 0d:d1:c4:f1:f8:d7:46:24:08:ac:f4:89:66:96:07: 07:17:87:de:ab:fc:82:75:65:8a:17:13:e9:cb:04: 95:e0:a0:0a:30:88:ab:84:f5:2a:b5:b6:49:94:65: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:32:CB:C6:8A:28:EA:A1:7B:4C:E6:CE:28:EE:FC:4F:DD:B6:84:9C X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:07:96:b1:4a:8b:fe:05:1c:16:5c:24:4f:34:67:42:ed:ea: 8a:a9:1c:6e:09:b5:ad:43:b0:eb:30:72:82:08:70:f9:f8:ff: 1b:d8:73:be:78:20:f5:6b:78:c4:ec:a3:71:04:92:6e:63:7c: 6d:1f:28:4a:9f:bb:3a:fc:49:4b:af:40:29:56:ba:2b:9e:28: f5:89:b9:d4:d1:e9:3b:7b:5f:3b:4a:45:46:03:90:89:d5:7a: b5:a9:81:5c:99:2b:fd:cf:25:4c:c9:c9:ec:60:cf:00:3b:d9: a2:d7:c1:3a:5f:b7:52:53:1b:c7:de:21:64:ea:0a:23:c5:67: d5:60:9d:34:c4:cf:ec:22:dd:69:c6:cb:6b:ab:5d:4f:ac:b3: 14:d4:0b:7e:ef:4b:20:f9:6f:a0:bd:e7:67:61:a3:a5:ba:78: db:d3:e1:4d:cf:2d:eb:eb:e2:fb:e2:83:08:49:1e:a5:af:4e: 2c:55:f1:8b:7e:ff:40:5e:a0:40:73:9b:5a:6e:e4:4d:74:7d: bf:59:14:f8:14:20:b1:62:b3:15:0a:3f:76:56:a9:d9:6e:c3: c9:80:d8:ad:ab:8a:39:da:55:3b:46:19:2e:22:a1:0e:97:d6: 89:a4:a4:c6:f0:dc:d5:1c:d0:7b:ef:4a:c7:bd:d8:69:c3:d1: 3b:b4:94:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwOTA2MjA0MjA5WhcNMjUwOTEzMjA0MjA5WjAYMRYwFAYD VQQDEw02OGJjOWNhMS0yZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRs1+SL0ydFdY5jdX9NI6e+rpurS8SgolpkVCjdxlERS11hChBW8/5uY+EfG nSuzWyqx9n/RIU5swp32FITd9PV7THkwzTrQbi0rCZR9YAGtnjgNlpiKVTJV5kyn hxDs0Uqs1vw9Ymofosuwexp1i3HGTtQxBLi97IkAPpMZ/tVO6UsRoOM+XHg5BwkQ W0ObGV0rToJQUgnxCEjgQ1KUhi7z5sVTbnGm0oBTizgpUbCFu01BVhC84+/6tuiH glP5kHQguLh/ne0CW2RVAxDnVjwN0cTx+NdGJAis9IlmlgcHF4feq/yCdWWKFxPp ywSV4KAKMIirhPUqtbZJlGU2JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoyy8aK KOqhe0zmziju/E/dtoScMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLB5axSov+BRwWXCRPNGdC7eqKqRxuCbWtQ7DrMHKCCHD5+P8b2HO+ eCD1a3jE7KNxBJJuY3xtHyhKn7s6/ElLr0ApVrornij1ibnU0ek7e187SkVGA5CJ 1Xq1qYFcmSv9zyVMycnsYM8AO9mi18E6X7dSUxvH3iFk6gojxWfVYJ00xM/sIt1p xstrq11PrLMU1At+70sg+W+gvednYaOlunjb0+FNzy3r6+L74oMISR6lr04sVfGL fv9AXqBAc5tabuRNdH2/WRT4FCCxYrMVCj92VqnZbsPJgNitq4o52lU7RhkuIqEO l9aJpKTG8NzVHNB770rHvdhpw9E7tJRE -----END CERTIFICATE-----Generated at Mon Sep 8 03:17:33 2025 by rpki-client