$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json) Hash identifier: YfPgnRESY3GajiWUEPkiWhCN6Ewiq9URh27olgYPHHg= Subject key identifier: CC:E3:2A:D9:42:43:F1:31:5D:5C:F0:FE:5D:D4:44:2A:D6:2F:69:1C Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft Manifest number: 0412 Signing time: Tue 09 Sep 2025 00:30:01 +0000 Manifest this update: Tue 09 Sep 2025 00:30:01 +0000 Manifest next update: Tue 16 Sep 2025 00:30:01 +0000 Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: 9Bqf6192hSFzIOzdv5wA00iAGUvfmnZWQCOxTYK7FBM=) 2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: x+4V7MgRD99pCQ1H4NPILV8k6b/KjY/7SvzSzH6UBOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Validity Not Before: Sep 9 00:30:01 2025 GMT Not After : Sep 16 00:30:01 2025 GMT Subject: CN=68bf7509-5c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:3a:b9:3b:b9:d3:a5:ac:c4:1d:5e:9f:3b: c8:5d:35:f5:6b:7d:89:89:32:87:53:1d:e8:41:19: d1:4c:8a:52:1e:fd:d9:78:7a:8c:eb:78:53:33:4d: 84:70:4f:81:be:0d:40:f3:f3:4f:d5:b9:62:2f:39: 0a:dd:55:1b:9c:2b:d3:3d:ab:97:c3:bb:6c:2f:52: 6b:fe:0d:6d:85:81:73:b4:e2:d5:ee:6e:6c:c3:5b: 22:3c:77:43:2c:99:4d:fc:b8:5e:21:f2:3e:c1:37: 69:69:89:c6:b4:61:c9:0a:4b:42:78:4d:32:f0:2a: 47:e2:f3:bd:12:5f:67:63:ef:f8:c1:dc:46:71:32: d2:89:cb:8d:09:bd:ac:da:30:3e:57:ac:8b:0b:3c: 27:35:26:20:b7:2a:1d:bc:fd:68:5f:d0:47:5e:b4: 54:ee:fd:31:e9:50:ed:82:2e:15:b7:68:8d:90:11: bb:89:c1:63:60:35:c8:65:a3:c3:6d:b8:14:70:c8: 10:be:d1:6e:1b:d4:53:30:ce:61:d3:02:d5:08:49: 34:1f:07:8f:da:10:83:35:ee:17:73:61:91:5d:6f: ac:df:d6:7b:3d:50:e9:4e:d3:6c:ac:ac:b1:e0:db: aa:10:b0:9c:c1:b0:d8:5b:b4:d7:03:b8:74:88:28: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:2A:D9:42:43:F1:31:5D:5C:F0:FE:5D:D4:44:2A:D6:2F:69:1C X509v3 Authority Key Identifier: keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:06:cd:ca:d6:1e:e5:bb:99:4f:96:dd:38:40:5e:bb:c9:0a: 5b:62:d4:10:ab:91:6a:68:ec:67:bd:10:8d:f8:09:5f:e7:1b: 7e:96:2a:91:35:07:c6:9d:af:08:e0:14:4f:25:3b:98:df:53: cd:61:13:d8:26:dc:75:13:23:9e:c7:7b:3e:85:58:e0:fd:22: 87:91:b8:5c:e0:f3:77:4e:91:7c:85:2a:ec:a3:00:7b:fe:79: d8:e4:b3:1a:f3:af:e4:27:b0:26:dc:7b:19:9a:12:87:41:da: b5:1f:58:e3:7e:38:92:2e:c1:ed:c1:68:f5:cc:0e:a1:6f:cf: be:d3:8d:b5:84:9f:a8:1a:d2:3b:b5:cd:61:0c:ae:4f:17:90: 43:cf:e2:ef:99:d0:ce:50:8b:26:19:07:27:3e:32:73:e4:79: db:d9:d4:d9:39:3b:19:4d:7d:00:4f:25:45:29:b8:9c:d3:ec: b7:cc:5c:c4:46:73:ea:74:4c:cb:c3:f0:32:3c:7d:2e:8b:7a: bc:5a:66:8a:d8:b0:ff:c9:31:0d:cc:95:5d:80:e2:58:dc:86: 7e:30:9a:75:bd:20:c7:e3:5f:2c:d3:6b:07:b2:8a:a1:da:af: 79:c5:bf:ff:90:54:4e:74:c4:07:1e:b4:ed:48:a3:d1:a3:c3: 7f:f2:a0:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4 NTREMzZEQzIwHhcNMjUwOTA5MDAzMDAxWhcNMjUwOTE2MDAzMDAxWjAYMRYwFAYD VQQDEw02OGJmNzUwOS01YzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH86uTu506WsxB1enzvIXTX1a32JiTKHUx3oQRnRTIpSHv3ZeHqM63hTM02E cE+Bvg1A8/NP1bliLzkK3VUbnCvTPauXw7tsL1Jr/g1thYFztOLV7m5sw1siPHdD LJlN/LheIfI+wTdpaYnGtGHJCktCeE0y8CpH4vO9El9nY+/4wdxGcTLSicuNCb2s 2jA+V6yLCzwnNSYgtyodvP1oX9BHXrRU7v0x6VDtgi4Vt2iNkBG7icFjYDXIZaPD bbgUcMgQvtFuG9RTMM5h0wLVCEk0HweP2hCDNe4Xc2GRXW+s39Z7PVDpTtNsrKyx 4NuqELCcwbDYW7TXA7h0iCh94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzjKtlC Q/ExXVzw/l3URCrWL2kcMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHBs3K1h7lu5lPlt04QF67yQpbYtQQq5FqaOxnvRCN+Alf5xt+liqR NQfGna8I4BRPJTuY31PNYRPYJtx1EyOex3s+hVjg/SKHkbhc4PN3TpF8hSrsowB7 /nnY5LMa86/kJ7Am3HsZmhKHQdq1H1jjfjiSLsHtwWj1zA6hb8++0421hJ+oGtI7 tc1hDK5PF5BDz+LvmdDOUIsmGQcnPjJz5Hnb2dTZOTsZTX0ATyVFKbic0+y3zFzE RnPqdEzLw/AyPH0ui3q8WmaK2LD/yTENzJVdgOJY3IZ+MJp1vSDH418s02sHsoqh 2q95xb//kFROdMQHHrTtSKPRo8N/8qAi -----END CERTIFICATE-----Generated at Wed Sep 10 10:12:28 2025 by rpki-client