$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: 4WH5S3QZRnSEMmli34X+awbGQXSMixzgG7Mt8tLM9pg= Subject key identifier: 1B:58:FE:AA:E4:37:06:A4:42:E0:E7:1B:15:4C:A7:BB:75:78:6C:49 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02DF Signing time: Tue 09 Sep 2025 01:34:26 +0000 Manifest this update: Tue 09 Sep 2025 01:34:26 +0000 Manifest next update: Tue 16 Sep 2025 01:34:26 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: aYThaiN7qGNDlVLT3veP69awUenfo40+I2jaioogGkE=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: i91dJKVTb6GLG1R30/IzaT1OTBlo0JQsHaeOVz47T3o=) 3: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: sh0P7r2XibS/gx2Xt0Uiy2ulD+jkzyj/uW0sx5+8aeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Sep 9 01:34:26 2025 GMT Not After : Sep 16 01:34:26 2025 GMT Subject: CN=68bf8422-0798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:67:9a:90:c9:c1:0f:cd:0f:60:29:9a:fe: 7f:88:34:c4:93:51:6c:35:ea:9f:87:88:d7:c6:92: 40:2c:e7:61:88:e2:85:61:bb:b7:ce:1c:9f:82:32: 6b:d5:c8:12:88:6e:69:1c:34:44:e1:96:81:98:a5: 71:d9:e4:d8:23:8d:6d:cd:ca:62:4d:6f:2e:c9:9c: b7:69:b9:89:a6:03:40:30:90:b4:db:5e:fb:a1:20: 0e:ac:a9:44:81:86:51:ae:6a:ba:de:01:d5:a9:29: ef:dc:f7:8c:3b:13:cf:ed:c2:51:e1:84:b0:dc:6c: 7c:77:73:23:bb:a2:06:f9:dc:ba:99:73:d4:80:f3: f7:a8:1b:0c:9b:79:09:06:dc:72:0a:c0:1b:87:03: 3e:d6:aa:a6:15:a7:5a:80:a7:f6:1d:c7:71:66:73: 7c:92:2e:f8:d9:b2:65:75:aa:21:2d:e8:4c:e3:80: 89:c0:8f:0e:47:04:5f:01:c7:69:82:98:a6:b3:47: 59:04:13:77:0d:1e:68:29:82:75:ba:71:6d:9b:f9: 45:f0:76:7d:60:28:29:c6:b9:2c:0f:8e:e0:9c:b5: 76:55:98:c9:f3:f4:cf:2a:f1:38:12:4e:6f:7a:63: 85:d8:34:48:97:71:24:df:79:4d:49:ec:91:fd:20: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:58:FE:AA:E4:37:06:A4:42:E0:E7:1B:15:4C:A7:BB:75:78:6C:49 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7f:56:e8:64:c0:34:b0:2b:01:64:59:73:20:fb:d3:51:98: 97:8f:d9:a2:55:06:de:f5:86:60:c3:2f:26:49:e5:e9:68:92: c3:02:34:3b:f1:b8:e4:2c:16:8a:62:30:f6:f1:19:90:90:d2: bf:7e:89:96:30:73:1e:18:54:6b:02:d5:ee:df:09:fe:0b:39: 33:01:09:2f:f7:96:88:4b:6f:7b:f4:d1:20:3a:54:90:60:2d: ba:47:9b:fe:ec:01:d7:28:21:78:9b:b0:88:b9:c4:63:13:59: cf:38:5f:77:78:0d:2d:f8:76:2b:75:08:84:65:9a:da:0e:26: fc:a2:98:8e:e0:9f:4c:0d:cb:10:3c:bc:7b:69:6b:dc:61:26: 95:7c:44:02:c8:ee:9c:88:fb:a9:fd:75:e6:6b:f6:b7:e3:5d: 69:0d:57:a9:0e:bd:e5:23:ff:12:54:8e:7f:03:12:bb:a2:03: 73:e7:e5:18:64:10:dc:08:04:31:2b:d3:5d:10:8c:3a:5f:4e: 12:69:da:29:ed:27:e3:e0:6e:b2:e7:d1:f3:e3:4e:dc:74:91: 29:1c:44:c5:d1:ae:01:de:77:eb:a4:da:6a:d0:2d:0d:93:ff: 93:f9:c9:34:77:ec:c1:25:f4:ed:9f:33:65:f1:4b:b4:7c:c0: ff:d5:f5:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwOTA5MDEzNDI2WhcNMjUwOTE2MDEzNDI2WjAYMRYwFAYD VQQDEw02OGJmODQyMi0wNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgBnmpDJwQ/ND2Apmv5/iDTEk1FsNeqfh4jXxpJALOdhiOKFYbu3zhyfgjJr 1cgSiG5pHDRE4ZaBmKVx2eTYI41tzcpiTW8uyZy3abmJpgNAMJC02177oSAOrKlE gYZRrmq63gHVqSnv3PeMOxPP7cJR4YSw3Gx8d3Mju6IG+dy6mXPUgPP3qBsMm3kJ BtxyCsAbhwM+1qqmFadagKf2HcdxZnN8ki742bJldaohLehM44CJwI8ORwRfAcdp gpims0dZBBN3DR5oKYJ1unFtm/lF8HZ9YCgpxrksD47gnLV2VZjJ8/TPKvE4Ek5v emOF2DRIl3Ek33lNSeyR/SB9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtY/qrk NwakQuDnGxVMp7t1eGxJMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbf1boZMA0sCsBZFlzIPvTUZiXj9miVQbe9YZgwy8mSeXpaJLDAjQ7 8bjkLBaKYjD28RmQkNK/fomWMHMeGFRrAtXu3wn+CzkzAQkv95aIS2979NEgOlSQ YC26R5v+7AHXKCF4m7CIucRjE1nPOF93eA0t+HYrdQiEZZraDib8opiO4J9MDcsQ PLx7aWvcYSaVfEQCyO6ciPup/XXma/a3411pDVepDr3lI/8SVI5/AxK7ogNz5+UY ZBDcCAQxK9NdEIw6X04Sadop7Sfj4G6y59Hz407cdJEpHETF0a4B3nfrpNpq0C0N k/+T+ck0d+zBJfTtnzNl8Uu0fMD/1fWO -----END CERTIFICATE-----Generated at Wed Sep 10 07:01:06 2025 by rpki-client