$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft File: fuTdyziTyc2__3a-xeAwLlIZJQE.mft (raw, json) Hash identifier: P220sM0dvwpcMGxdqHlpNeKQTkW9M6EW/5MSGJZ2hE0= Subject key identifier: 61:9D:D4:C7:07:F0:AA:31:BD:69:8B:0E:A6:D8:6A:7D:95:66:1F:7B Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01 Certificate issuer: /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft Manifest number: 0684 Signing time: Wed 20 Aug 2025 22:26:14 +0000 Manifest this update: Wed 20 Aug 2025 22:26:13 +0000 Manifest next update: Wed 27 Aug 2025 22:26:13 +0000 Files and hashes: 1: fuTdyziTyc2__3a-xeAwLlIZJQE.crl (hash: frH10Tt5R9znfM+DMvvSJwAU8rdKyJnVRnm9qT/VNH8=) 2: 50548100855311EBBAE75616C4F9AE02.roa (hash: /SE7Aja2BBR+I+6zyJWrhq+Bo9c2jJI7JkKvXdCSdE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168939, serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501 Validity Not Before: Aug 20 22:26:13 2025 GMT Not After : Aug 27 22:26:13 2025 GMT Subject: CN=68a64b86-3b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:4e:f2:8e:90:e8:d4:af:7e:c2:2f:1c:bd: 5a:9b:6f:d5:93:22:89:bf:c2:e5:7e:22:a3:1f:53: 49:5c:13:47:bb:db:c1:a5:07:63:21:5a:71:bc:64: 73:c4:24:7d:b4:26:5b:d6:31:b1:cd:e1:1d:47:c9: 6e:c4:ea:fe:22:4f:69:69:35:df:06:41:a7:33:3d: ac:f5:3c:d0:bd:69:48:d7:25:e1:ee:92:4b:04:42: 4f:49:43:af:db:19:ff:17:74:76:6d:ba:ee:0a:bf: 51:84:8f:43:35:85:2c:4b:0f:4b:90:f6:44:e0:9a: 0a:b9:8c:47:14:64:be:9a:74:d5:ed:c3:33:a3:91: af:94:f4:31:b8:2b:b9:ad:35:b6:d8:89:e9:71:da: af:13:42:f9:a9:66:10:ba:ab:93:5a:bb:56:77:2b: 2d:16:e6:04:f4:3b:c1:65:51:f9:c4:12:28:bd:e6: e4:fa:bd:04:62:92:52:9d:70:9d:aa:dc:c4:c8:d2: 86:cb:2c:32:46:5e:d6:95:db:dd:70:7e:f8:b6:d4: e4:7f:26:ca:75:21:1a:5e:f1:ec:bd:57:bf:0d:be: 91:41:b7:a7:47:0e:c6:0b:eb:2e:90:39:96:4e:05: 89:9d:ce:92:f6:2b:83:92:f8:72:23:9f:2c:a7:b7: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:D4:C7:07:F0:AA:31:BD:69:8B:0E:A6:D8:6A:7D:95:66:1F:7B X509v3 Authority Key Identifier: keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a3:67:74:5c:29:b4:ba:01:30:a7:d6:f8:e5:a8:61:1e:59: 71:a8:f2:2f:a7:e2:a3:c1:14:4b:df:68:9c:2e:36:05:42:d2: 63:2e:a2:6e:fe:95:bc:cb:17:11:f2:67:42:28:6e:1e:b2:f3: 47:79:14:72:23:07:a7:3f:c7:19:b8:a4:fa:ae:f6:f2:36:0c: 23:b3:7f:54:e1:66:c5:12:69:e6:d2:9d:d5:f1:c9:bb:3f:55: 13:fd:f2:e8:0a:55:d1:56:b0:2f:89:46:89:45:d3:1b:2c:68: bc:6a:32:d6:bc:bf:2f:7b:54:a7:f5:83:52:8a:61:88:50:aa: c2:7b:78:f0:a6:cc:c6:ff:cc:96:19:94:56:35:d0:96:6b:fd: 2b:c6:16:4f:69:0f:2d:c7:0a:9d:fe:c6:0e:dc:69:dc:2a:6b: 77:93:eb:bb:db:eb:c0:32:4e:08:a7:74:d5:22:a5:05:4e:5f: df:1b:cc:b2:e2:94:22:18:cd:12:8f:97:11:6f:fe:24:ec:2f: 32:a9:27:8e:eb:5b:da:df:22:72:1e:a5:48:b0:db:0b:f4:89: c8:7f:66:13:39:84:9f:7a:2d:a1:4a:7a:ac:fc:05:87:3c:56: 5d:bd:0f:7c:92:fd:90:9f:4a:ad:89:2c:4d:84:55:6e:43:68: b9:3c:3a:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MzkxMTAvBgNVBAUTKDdFRTRERENCMzg5M0M5Q0RCRkZGNzZCRUM1RTAzMDJF NTIxOTI1MDEwHhcNMjUwODIwMjIyNjEzWhcNMjUwODI3MjIyNjEzWjAYMRYwFAYD VQQDEw02OGE2NGI4Ni0zYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H9O8o6Q6NSvfsIvHL1am2/VkyKJv8LlfiKjH1NJXBNHu9vBpQdjIVpxvGRz xCR9tCZb1jGxzeEdR8luxOr+Ik9paTXfBkGnMz2s9TzQvWlI1yXh7pJLBEJPSUOv 2xn/F3R2bbruCr9RhI9DNYUsSw9LkPZE4JoKuYxHFGS+mnTV7cMzo5GvlPQxuCu5 rTW22InpcdqvE0L5qWYQuquTWrtWdystFuYE9DvBZVH5xBIovebk+r0EYpJSnXCd qtzEyNKGyywyRl7WldvdcH74ttTkfybKdSEaXvHsvVe/Db6RQbenRw7GC+sukDmW TgWJnc6S9iuDkvhyI58sp7deCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGd1McH 8KoxvWmLDqbYan2VZh97MB8GA1UdIwQYMBaAFH7k3cs4k8nNv/92vsXgMC5SGSUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkzOS9FNjY2RTA4RTg1 MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHljMl9fM2EteGVBd0xsSVpK UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1VGR5emlUeWMyX18zYS14ZUF3TGxJWkpRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkzOS9FNjY2RTA4RTg1MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHlj Ml9fM2EteGVBd0xsSVpKUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyo2d0XCm0ugEwp9b45ahhHllxqPIvp+KjwRRL32icLjYFQtJjLqJu /pW8yxcR8mdCKG4esvNHeRRyIwenP8cZuKT6rvbyNgwjs39U4WbFEmnm0p3V8cm7 P1UT/fLoClXRVrAviUaJRdMbLGi8ajLWvL8ve1Sn9YNSimGIUKrCe3jwpszG/8yW GZRWNdCWa/0rxhZPaQ8txwqd/sYO3GncKmt3k+u72+vAMk4Ip3TVIqUFTl/fG8yy 4pQiGM0Sj5cRb/4k7C8yqSeO61va3yJyHqVIsNsL9InIf2YTOYSfei2hSnqs/AWH PFZdvQ98kv2Qn0qtiSxNhFVuQ2i5PDpC -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:45 2025 by rpki-client