$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: eJ3wpYxJT1sDiie/Cg/BR/0EV+FJPl1wi4catl3G/lk= Subject key identifier: 49:71:E2:DB:8C:62:48:10:BB:5F:3B:F7:4C:1E:95:89:40:29:E8:9F Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 016C Signing time: Wed 17 Sep 2025 04:26:52 +0000 Manifest this update: Wed 17 Sep 2025 04:26:52 +0000 Manifest next update: Wed 24 Sep 2025 04:26:52 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: f+XhWjmwauEQj5cDaym28TT2jW3Xbayf+DlD4hZl3Ls=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Sep 17 04:26:52 2025 GMT Not After : Sep 24 04:26:52 2025 GMT Subject: CN=68ca388c-87c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:59:e2:25:26:9c:b2:b5:0b:31:ac:2e:0f:7c: 6a:5c:e0:30:49:6c:d6:68:93:38:6b:3b:d5:ac:56: 75:1e:ae:4b:af:a3:8c:e5:35:e9:38:bc:92:51:6d: fc:30:b4:1c:05:f9:0d:33:c2:32:fb:8a:ce:4f:c3: ea:6a:63:20:09:05:88:5a:e9:ae:14:6a:91:58:54: cc:e7:f4:bc:03:2a:2f:97:18:3c:ae:7d:45:33:b2: c6:c3:63:02:cd:b2:e7:5c:14:f1:4a:80:6e:b0:4f: f1:7c:8c:ce:00:a4:bd:e5:79:00:0d:11:65:05:7a: c9:7f:6b:48:cc:9f:99:f5:0d:7d:00:e7:e3:d2:92: 8d:e2:dc:c7:33:37:64:6b:02:c2:e3:08:95:84:15: 96:59:f0:74:9e:e2:f3:b8:be:2c:0e:d6:d1:b9:c8: cc:e9:79:a7:54:ff:c6:55:23:b8:99:cc:53:19:d5: 99:ea:e0:81:92:2d:ac:5e:65:8d:bf:9c:f1:d5:cd: a8:3b:a6:7e:36:8f:89:f5:64:39:7a:d7:31:f2:06: f4:a0:2c:f6:d9:0e:b3:0b:e0:ba:0f:11:bf:fd:bb: d8:12:d4:ce:43:b9:79:d5:7f:d4:cf:c9:be:75:1e: f2:6d:11:05:18:8a:a6:be:18:a6:29:8f:ea:28:2f: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:E2:DB:8C:62:48:10:BB:5F:3B:F7:4C:1E:95:89:40:29:E8:9F X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:76:20:5a:8e:6f:88:98:13:ab:49:74:c5:0a:36:1a:15:bf: 02:51:54:a5:22:c3:fd:c8:8b:ab:47:1b:d4:26:ac:15:27:81: 7d:40:13:fb:1c:5d:62:9a:02:78:5d:35:fe:20:da:48:ca:2c: 6a:3a:a7:93:f3:fb:86:1d:6e:16:7a:d6:7e:4d:c1:bf:99:e7: 30:b2:f1:78:62:c7:84:09:7d:5d:6a:41:3f:e7:cb:02:dc:69: 9e:c1:cf:8b:9d:28:d3:39:ed:13:ac:5f:01:24:70:1b:59:c7: 5f:8a:c8:16:06:6e:40:0c:bb:4b:ee:6f:3e:85:ca:8d:8d:f0: 53:af:d4:92:b2:73:40:d3:f5:f7:94:a7:86:81:93:70:9f:a4: 17:10:eb:20:20:0b:c2:1c:a7:6d:f8:68:1a:64:c5:82:6b:fe: 71:aa:11:2d:f0:86:a9:8e:33:32:cd:7c:de:61:9a:1a:89:7c: 54:64:8f:0a:83:08:fc:d0:16:f3:da:3b:f2:8d:8f:f7:3d:26: 31:12:76:a1:1e:69:13:24:13:e6:3b:a3:cd:d4:d9:24:da:da: 8d:3e:4e:2a:f8:71:d6:27:38:09:d4:b7:52:09:25:e6:98:7a: 3e:67:6a:96:1f:c6:7e:6c:b9:de:9d:ec:1a:b9:65:6c:10:11: 9f:86:e5:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwOTE3MDQyNjUyWhcNMjUwOTI0MDQyNjUyWjAYMRYwFAYD VQQDEw02OGNhMzg4Yy04N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FniJSacsrULMawuD3xqXOAwSWzWaJM4azvVrFZ1Hq5Lr6OM5TXpOLySUW38 MLQcBfkNM8Iy+4rOT8PqamMgCQWIWumuFGqRWFTM5/S8Ayovlxg8rn1FM7LGw2MC zbLnXBTxSoBusE/xfIzOAKS95XkADRFlBXrJf2tIzJ+Z9Q19AOfj0pKN4tzHMzdk awLC4wiVhBWWWfB0nuLzuL4sDtbRucjM6XmnVP/GVSO4mcxTGdWZ6uCBki2sXmWN v5zx1c2oO6Z+No+J9WQ5etcx8gb0oCz22Q6zC+C6DxG//bvYEtTOQ7l51X/Uz8m+ dR7ybREFGIqmvhimKY/qKC9PJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElx4tuM YkgQu18790welYlAKeifMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0diBajm+ImBOrSXTFCjYaFb8CUVSlIsP9yIurRxvUJqwVJ4F9QBP7 HF1imgJ4XTX+INpIyixqOqeT8/uGHW4WetZ+TcG/mecwsvF4YseECX1dakE/58sC 3Gmewc+LnSjTOe0TrF8BJHAbWcdfisgWBm5ADLtL7m8+hcqNjfBTr9SSsnNA0/X3 lKeGgZNwn6QXEOsgIAvCHKdt+GgaZMWCa/5xqhEt8IapjjMyzXzeYZoaiXxUZI8K gwj80Bbz2jvyjY/3PSYxEnahHmkTJBPmO6PN1Nkk2tqNPk4q+HHWJzgJ1LdSCSXm mHo+Z2qWH8Z+bLnenewauWVsEBGfhuU2 -----END CERTIFICATE-----Generated at Thu Sep 18 21:38:03 2025 by rpki-client