$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json) Hash identifier: 684sB5y9N6UNboqt8KDOtjnRhFxRt7RxTqS7MW2JwSw= Subject key identifier: 1E:A1:43:26:FF:5E:39:A3:9C:2D:1E:D0:43:6E:B5:A6:FD:DD:74:65 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 1386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft Manifest number: 135D Signing time: Sun 24 Aug 2025 16:59:06 +0000 Manifest this update: Sun 24 Aug 2025 16:59:06 +0000 Manifest next update: Sun 31 Aug 2025 16:59:06 +0000 Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: s02AHDgmVi8Pw2cyjEvPlUk5SBaRAJsAgxXCbj2y9HY=) 2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=) 3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=) 4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=) 5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4998 (0x1386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Aug 24 16:59:06 2025 GMT Not After : Aug 31 16:59:06 2025 GMT Subject: CN=68ab44da-748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:60:81:62:f0:dc:5f:66:4a:4a:ea:90:7b:41: 8b:85:2f:3e:3f:de:34:57:93:d9:46:3f:83:1e:73: db:d9:f1:2a:f6:67:98:66:5b:a8:be:45:e2:0a:14: 74:6c:28:7e:67:32:14:43:26:19:ea:1b:95:1f:a1: fa:1a:65:9a:6c:a1:84:d7:22:fd:de:99:c0:9d:73: 1d:30:7c:9f:ce:db:ad:fc:87:b5:0a:7c:9d:30:36: 3e:c9:b7:57:64:2b:7b:7a:44:66:f4:7f:ca:d1:98: 82:29:07:8d:26:9b:c5:41:a9:59:d9:9e:10:35:c0: 20:5e:1f:1b:97:0e:b2:54:92:24:78:f9:81:ec:55: 12:ee:b3:2f:ef:1e:8d:db:79:00:72:f2:0d:64:cc: 3f:7f:85:b5:b3:8c:72:e5:2e:d6:39:b2:11:bb:e8: bb:da:44:68:e7:cf:47:35:4f:50:b4:f7:d4:70:45: 34:2b:7f:50:87:f3:00:ce:cc:1b:91:fd:4d:ff:f2: 8a:1a:f2:c9:89:7d:22:ca:a9:bc:fb:8d:0f:63:df: 41:57:ef:2c:39:3e:a7:65:95:0c:8c:a3:38:4f:15: 63:21:5d:5e:eb:03:0b:0f:4e:99:cc:af:b3:0b:2a: 23:a4:8b:62:00:7f:49:1a:c0:b2:61:67:f2:2a:a0: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A1:43:26:FF:5E:39:A3:9C:2D:1E:D0:43:6E:B5:A6:FD:DD:74:65 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2a:9c:41:d8:4c:40:33:36:e2:1d:8d:2f:d5:2f:1b:c0:95: fa:da:e7:30:61:06:80:5d:d7:4c:f0:53:80:5d:2d:ca:d8:a5: 34:18:b3:dc:7d:31:72:e0:3d:08:7d:93:f6:5e:ec:3a:33:b3: fe:38:4b:46:ab:ab:02:f9:76:71:bb:12:fd:45:c9:f4:4c:2e: 23:09:f9:20:4c:7b:8a:82:0b:60:b1:29:f9:cb:37:80:dd:f4: f5:b0:af:7a:35:f4:48:1a:d6:c8:09:b5:1a:82:60:43:83:02: 03:30:4b:7b:9a:14:57:6a:66:c3:67:58:5c:60:a1:92:21:31: 70:23:07:68:f9:c9:f3:43:c4:57:72:9a:ec:64:f7:50:91:16: 73:94:21:db:ad:ac:d5:16:21:7d:fa:1d:ee:fc:42:64:4e:03: 37:cf:48:c3:ff:00:44:82:77:e2:7c:d6:26:87:32:18:d5:03: 2e:93:8d:82:e7:7d:ff:62:be:36:e7:71:43:a5:2e:1f:75:05: 5e:0e:08:f0:20:0f:32:7f:3c:3d:d5:8a:5a:6c:39:fa:51:00: 96:ea:d9:7b:74:25:a9:5b:7d:73:ea:6a:dd:a3:83:48:43:30: 13:09:94:ce:10:87:b0:82:bd:4f:eb:55:02:70:10:37:b7:1e: 65:98:c6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjUwODI0MTY1OTA2WhcNMjUwODMxMTY1OTA2WjAYMRYwFAYD VQQDEw02OGFiNDRkYS03NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82CBYvDcX2ZKSuqQe0GLhS8+P940V5PZRj+DHnPb2fEq9meYZluovkXiChR0 bCh+ZzIUQyYZ6huVH6H6GmWabKGE1yL93pnAnXMdMHyfztut/Ie1CnydMDY+ybdX ZCt7ekRm9H/K0ZiCKQeNJpvFQalZ2Z4QNcAgXh8blw6yVJIkePmB7FUS7rMv7x6N 23kAcvINZMw/f4W1s4xy5S7WObIRu+i72kRo589HNU9QtPfUcEU0K39Qh/MAzswb kf1N//KKGvLJiX0iyqm8+40PY99BV+8sOT6nZZUMjKM4TxVjIV1e6wMLD06ZzK+z CyojpItiAH9JGsCyYWfyKqBudQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6hQyb/ XjmjnC0e0ENutab93XRlMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8KpxB2ExAMzbiHY0v1S8bwJX62ucwYQaAXddM8FOAXS3K2KU0GLPc fTFy4D0IfZP2Xuw6M7P+OEtGq6sC+XZxuxL9Rcn0TC4jCfkgTHuKggtgsSn5yzeA 3fT1sK96NfRIGtbICbUagmBDgwIDMEt7mhRXambDZ1hcYKGSITFwIwdo+cnzQ8RX cprsZPdQkRZzlCHbrazVFiF9+h3u/EJkTgM3z0jD/wBEgnfifNYmhzIY1QMuk42C 533/Yr4253FDpS4fdQVeDgjwIA8yfzw91YpabDn6UQCW6tl7dCWpW31z6mrdo4NI QzATCZTOEIewgr1P61UCcBA3tx5lmMbH -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:28 2025 by rpki-client