$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: pedzMF/fh2wBLmYbqhvSDFYT6G6YFQkl2lcQi6GNAOk= Subject key identifier: FC:AC:0F:3D:9A:11:96:DA:D4:D8:E8:12:0B:8F:D0:83:4D:92:EE:1F Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AEF Signing time: Mon 08 Sep 2025 19:26:38 +0000 Manifest this update: Mon 08 Sep 2025 19:26:37 +0000 Manifest next update: Mon 15 Sep 2025 19:26:37 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: KTxi5K3034FR0g8dJDNC8RORENgRouFPtjpra8St5Mg=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Sep 8 19:26:37 2025 GMT Not After : Sep 15 19:26:37 2025 GMT Subject: CN=68bf2dee-229d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:e4:af:f7:ba:7f:09:d3:98:4a:0d:27:e6: 9d:8b:44:23:cf:01:99:96:e0:f8:5c:5b:95:e1:b9: 57:72:25:c4:57:9c:33:74:12:78:5c:3a:01:ab:3a: 13:d5:44:bc:2d:9d:a8:82:67:82:af:38:1c:b5:84: 33:0b:f4:96:62:45:76:e7:f8:1a:13:59:e9:9b:ea: f2:72:1a:d1:2c:6b:9d:44:44:7b:a8:58:5d:0c:e3: 5c:8a:84:23:38:03:ab:13:65:c1:7e:1a:80:6d:39: 20:b2:fb:f6:d3:b5:c0:0c:2f:21:2d:b9:3b:27:21: 07:ac:87:18:a0:99:2a:24:ce:2d:d8:56:20:24:92: 59:ab:6b:87:72:d6:76:4f:f7:33:18:b2:09:89:15: b0:0b:3c:39:cc:12:68:22:98:59:77:f2:e5:56:1a: 02:ec:8c:26:fe:4c:cf:84:25:1b:1b:cc:84:06:50: 93:e7:a1:17:52:10:dd:e9:85:86:1e:af:30:31:3f: 90:db:ea:0f:24:3f:98:0a:b1:11:d5:40:25:28:5d: 40:e5:55:73:f4:51:f1:56:01:4e:c2:15:ec:ca:26: e8:df:f1:b5:bc:8a:e3:92:9b:cc:51:9d:bd:83:19: de:40:34:dd:6b:4b:b9:1b:53:33:c2:9a:01:f0:af: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AC:0F:3D:9A:11:96:DA:D4:D8:E8:12:0B:8F:D0:83:4D:92:EE:1F X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f0:b0:2f:49:37:bb:24:11:a4:ec:7f:f0:b8:1f:04:cb:de: 14:80:20:36:8d:ea:ec:4f:bd:24:d6:fc:c3:c3:4c:11:6d:ee: e0:f1:ba:76:37:4b:2a:b8:5e:99:74:32:ad:7f:ac:2b:92:cd: 9d:d6:2e:38:0e:c6:5c:b6:a7:40:a0:d9:5e:d1:db:29:f6:4a: bf:57:a2:3c:a6:04:fe:30:a1:d6:d2:e6:f2:33:36:63:8a:c2: d8:07:d6:0a:2f:42:13:bf:54:32:e1:ad:e7:35:d7:b2:48:3a: a4:cc:68:36:af:6d:ae:da:9a:d7:ad:a4:97:c8:17:ea:6e:4c: ec:7e:a1:8a:1e:1a:08:26:b0:be:97:d1:e7:16:40:f2:ac:09: 95:87:17:a4:dd:be:a3:bc:dd:7b:9e:94:3f:86:74:ba:4f:d4: cc:56:ab:3f:66:bd:b3:70:03:43:91:12:05:7e:1b:bf:32:eb: c4:4d:1b:f4:01:99:87:ff:7e:79:22:2e:53:c3:0b:28:23:24: fe:c4:f5:6b:1e:75:1b:06:72:ab:e9:fe:09:ec:32:a0:ab:19: 85:37:1a:05:38:fe:28:db:6e:ca:34:c2:97:c5:56:e9:49:69: 33:2a:d1:9f:a4:65:7f:9b:07:a9:05:22:8d:59:a8:8d:fb:cb: de:80:ba:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwOTA4MTkyNjM3WhcNMjUwOTE1MTkyNjM3WjAYMRYwFAYD VQQDEw02OGJmMmRlZS0yMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I3kr/e6fwnTmEoNJ+adi0QjzwGZluD4XFuV4blXciXEV5wzdBJ4XDoBqzoT 1US8LZ2ogmeCrzgctYQzC/SWYkV25/gaE1npm+rychrRLGudRER7qFhdDONcioQj OAOrE2XBfhqAbTkgsvv207XADC8hLbk7JyEHrIcYoJkqJM4t2FYgJJJZq2uHctZ2 T/czGLIJiRWwCzw5zBJoIphZd/LlVhoC7Iwm/kzPhCUbG8yEBlCT56EXUhDd6YWG Hq8wMT+Q2+oPJD+YCrER1UAlKF1A5VVz9FHxVgFOwhXsyibo3/G1vIrjkpvMUZ29 gxneQDTda0u5G1MzwpoB8K+lqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPysDz2a EZba1NjoEguP0INNku4fMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh8LAvSTe7JBGk7H/wuB8Ey94UgCA2jersT70k1vzDw0wRbe7g8bp2 N0squF6ZdDKtf6wrks2d1i44DsZctqdAoNle0dsp9kq/V6I8pgT+MKHW0ubyMzZj isLYB9YKL0ITv1Qy4a3nNdeySDqkzGg2r22u2prXraSXyBfqbkzsfqGKHhoIJrC+ l9HnFkDyrAmVhxek3b6jvN17npQ/hnS6T9TMVqs/Zr2zcANDkRIFfhu/MuvETRv0 AZmH/355Ii5TwwsoIyT+xPVrHnUbBnKr6f4J7DKgqxmFNxoFOP4o227KNMKXxVbp SWkzKtGfpGV/mwepBSKNWaiN+8vegLqK -----END CERTIFICATE-----Generated at Wed Sep 10 03:02:18 2025 by rpki-client