$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft File: FTyY0zE8xk7bmuFaujtUPkgEWZA.mft (raw, json) Hash identifier: PWKBisSJ/wt+jvxtMRVKNVFlg8Spr3I6DZvqFKtJUe8= Subject key identifier: F4:5B:0E:B0:BC:37:50:F1:DF:AF:D6:4B:37:45:23:C6:38:79:15:A5 Authority key identifier: 15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90 Certificate issuer: /CN=A9167FBA/serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft Manifest number: 5B Signing time: Tue 09 Sep 2025 07:18:55 +0000 Manifest this update: Tue 09 Sep 2025 07:18:55 +0000 Manifest next update: Tue 16 Sep 2025 07:18:55 +0000 Files and hashes: 1: FTyY0zE8xk7bmuFaujtUPkgEWZA.crl (hash: Z3iH4h6grUwm9uTlZ89gAnQ80YRkuy6TakSvYesNgkk=) 2: F552E6BA05A111F082D17325C4F9AE02.roa (hash: IboM73984syJmuqfIfDKvmHL/HfnKXEhHqhYyaPXIGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FBA, serialNumber=153C98D3313CC64EDB9AE15ABA3B543E48045990 Validity Not Before: Sep 9 07:18:55 2025 GMT Not After : Sep 16 07:18:55 2025 GMT Subject: CN=68bfd4df-a367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:81:30:87:aa:a9:bd:5e:67:29:36:68:33: 02:4a:2f:86:48:79:86:0e:f5:b0:2c:46:2b:9e:1d: 04:41:87:c2:b6:9d:7b:f0:1c:b8:76:4d:22:38:1a: ce:b2:42:22:a2:05:12:9a:aa:92:35:a1:78:cf:44: 5b:0f:6f:6c:6f:ea:db:50:8d:1f:35:af:fc:db:96: a1:0d:21:7b:2f:cb:9b:bd:26:ed:a0:da:6a:1d:70: de:fe:ef:a7:37:b6:52:dc:ed:85:19:d1:b3:31:ab: 29:0a:22:3f:64:2b:6a:bf:8c:7a:77:1d:5c:c4:93: 8e:be:35:45:d5:2f:f8:3d:31:b0:ee:6f:9c:d3:6e: e1:b7:c6:c1:fc:6f:3d:35:37:c1:aa:bf:0b:20:ed: 71:e1:cb:0a:b0:ba:08:13:1b:20:0e:ec:9a:dc:8f: 8a:71:2e:c0:a9:6a:e4:2c:ee:45:5e:0b:23:63:a9: 9d:32:89:97:bb:e0:c0:b8:e5:07:68:36:84:16:95: 6a:8c:d1:5b:e9:07:13:51:c4:fe:2f:57:06:ad:94: 54:a4:5e:30:11:9b:36:df:ec:0c:ca:62:fa:be:57: 27:45:b5:a9:6d:3d:34:a1:ce:57:c6:5f:eb:11:06: b6:3d:91:a8:9c:6c:f1:21:50:a6:0c:3e:8f:e3:97: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5B:0E:B0:BC:37:50:F1:DF:AF:D6:4B:37:45:23:C6:38:79:15:A5 X509v3 Authority Key Identifier: keyid:15:3C:98:D3:31:3C:C6:4E:DB:9A:E1:5A:BA:3B:54:3E:48:04:59:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTyY0zE8xk7bmuFaujtUPkgEWZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/4B6E00FC048F11F0872E8547C4F9AE02/FTyY0zE8xk7bmuFaujtUPkgEWZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:cb:50:8b:a6:bb:e7:bc:2d:b9:93:ca:f8:63:7b:f1:52:2d: a6:b8:9c:9a:e2:53:f8:16:2d:85:a8:3e:5e:24:bd:11:9f:26: 98:6e:e9:d1:22:1c:83:ae:6d:df:2f:de:fd:3e:4b:aa:e1:a3: 07:c6:ec:7d:c8:1f:dc:54:69:fd:a2:c4:b0:1c:d2:1a:d9:51: 9c:a6:52:39:7c:bf:3a:9a:74:df:7f:19:5c:fc:2c:7d:c9:28: 18:95:af:d4:80:3b:ab:03:a6:ff:fa:a4:ed:24:10:ad:53:12: b9:2a:07:f6:ac:1f:79:ea:dc:9a:6a:4e:06:6a:29:ec:93:18: 74:e5:c3:37:44:34:e5:5b:d5:de:7d:fb:c4:b3:1c:b7:c9:2e: ee:c8:5c:66:76:46:7b:c2:e9:5a:27:b8:67:84:00:fb:0b:a8: 90:ab:6e:7a:c5:2b:f7:a2:53:ae:bb:66:43:bc:45:fd:52:aa: 69:8c:be:e8:8f:9f:e9:3c:1a:71:ce:7d:28:1c:de:90:3c:29: d0:d8:63:e0:8f:73:12:a3:d6:af:5f:36:93:77:b7:6b:38:da: e5:4f:72:4d:83:77:e0:98:17:ce:e5:1b:a7:6b:ba:5d:b3:3f: 24:e1:39:8c:ff:8b:c8:8e:f1:3d:69:ba:f5:05:47:a9:1b:d7: 82:16:15:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0ZCQTExMC8GA1UEBRMoMTUzQzk4RDMzMTNDQzY0RURCOUFFMTVBQkEzQjU0M0U0 ODA0NTk5MDAeFw0yNTA5MDkwNzE4NTVaFw0yNTA5MTYwNzE4NTVaMBgxFjAUBgNV BAMTDTY4YmZkNGRmLWEzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZz4Ewh6qpvV5nKTZoMwJKL4ZIeYYO9bAsRiueHQRBh8K2nXvwHLh2TSI4Gs6y QiKiBRKaqpI1oXjPRFsPb2xv6ttQjR81r/zblqENIXsvy5u9Ju2g2modcN7+76c3 tlLc7YUZ0bMxqykKIj9kK2q/jHp3HVzEk46+NUXVL/g9MbDub5zTbuG3xsH8bz01 N8Gqvwsg7XHhywqwuggTGyAO7Jrcj4pxLsCpauQs7kVeCyNjqZ0yiZe74MC45Qdo NoQWlWqM0VvpBxNRxP4vVwatlFSkXjARmzbf7AzKYvq+VydFtaltPTShzlfGX+sR BrY9kaicbPEhUKYMPo/jl4VVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9FsOsLw3 UPHfr9ZLN0Ujxjh5FaUwHwYDVR0jBBgwFoAUFTyY0zE8xk7bmuFaujtUPkgEWZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3RkJBLzRCNkUwMEZDMDQ4 RjExRjA4NzJFODU0N0M0RjlBRTAyL0ZUeVkwekU4eGs3Ym11RmF1anRVUGtnRVda QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlR5WTB6RTh4azdibXVGYXVqdFVQa2dFV1pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 RkJBLzRCNkUwMEZDMDQ4RjExRjA4NzJFODU0N0M0RjlBRTAyL0ZUeVkwekU4eGs3 Ym11RmF1anRVUGtnRVdaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXLUIumu+e8LbmTyvhje/FSLaa4nJriU/gWLYWoPl4kvRGfJphu6dEi HIOubd8v3v0+S6rhowfG7H3IH9xUaf2ixLAc0hrZUZymUjl8vzqadN9/GVz8LH3J KBiVr9SAO6sDpv/6pO0kEK1TErkqB/asH3nq3JpqTgZqKeyTGHTlwzdENOVb1d59 +8SzHLfJLu7IXGZ2RnvC6VonuGeEAPsLqJCrbnrFK/eiU667ZkO8Rf1SqmmMvuiP n+k8GnHOfSgc3pA8KdDYY+CPcxKj1q9fNpN3t2s42uVPck2Dd+CYF87lG6drul2z PyThOYz/i8iO8T1puvUFR6kb14IWFRg= -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:48 2025 by rpki-client