$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: +eFfyqNBl+edytcXsIjuGwCddFqgGyX9Odjh0ZpsP4g= Subject key identifier: 3A:7E:10:CA:6E:86:21:1A:1B:ED:8E:1C:81:A2:F4:50:DB:C0:F5:A6 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 011B Signing time: Tue 09 Sep 2025 04:52:27 +0000 Manifest this update: Tue 09 Sep 2025 04:52:26 +0000 Manifest next update: Tue 16 Sep 2025 04:52:26 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: GvWM3Cd4PpwMyyakzL0UObI1TMNaTL1z869xHdia86w=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Sep 9 04:52:26 2025 GMT Not After : Sep 16 04:52:26 2025 GMT Subject: CN=68bfb28b-8aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:9d:f5:7c:e3:fe:ab:08:24:8e:f9:69:77: 02:1e:33:ed:da:36:9e:af:69:0c:6e:ef:cc:17:a2: 55:4d:bf:44:9f:af:7b:ac:27:ab:f6:d1:e6:3c:a7: c1:67:a7:27:69:bc:1d:9e:78:2a:64:e0:3e:88:ec: 3c:5d:6b:85:15:03:9b:cf:a8:ab:85:76:3b:f4:e2: 93:b9:b0:14:4a:16:de:47:7d:76:98:8f:62:40:1a: 36:53:32:34:ff:98:49:50:75:47:35:03:f3:a0:55: 5c:7a:31:2b:9d:07:f4:29:4d:df:73:38:6c:ef:e1: 48:bc:db:1e:71:09:8c:6b:04:3c:52:1d:af:d2:5f: 69:38:16:ce:d6:0b:b0:41:0f:15:8c:bb:86:cd:c6: 43:2b:ed:9c:51:e1:6e:6a:0e:e7:b6:b9:f4:5f:0f: b7:85:5c:1d:a0:fa:dc:c0:31:01:9a:55:23:91:46: a1:5e:e6:95:5d:ad:ab:c5:c6:be:99:f3:6c:e7:d6: 9e:d3:f0:03:7d:9c:3a:95:32:b5:00:d0:a8:47:a6: 6a:73:91:11:d2:50:e5:1c:08:c0:d2:6f:9d:c0:f2: 71:7d:23:60:80:61:f5:a3:fa:f0:3b:67:ac:32:64: 54:94:ee:95:e9:c4:90:d8:1e:1e:21:b6:87:32:96: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7E:10:CA:6E:86:21:1A:1B:ED:8E:1C:81:A2:F4:50:DB:C0:F5:A6 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:60:ff:8c:d1:80:54:81:49:34:58:59:02:20:74:e8:97: 1e:82:cc:00:2f:c9:bc:02:9c:49:10:0a:a4:45:bd:c5:77:d4: 38:86:fb:19:0e:3a:f7:22:c6:95:b3:18:58:2b:b5:15:9d:4c: b2:ef:7c:ba:b3:49:28:b5:43:87:c9:9c:66:04:ba:40:97:4f: 7a:ef:01:a2:cf:f2:1a:be:ec:5b:4f:49:17:57:23:f6:f1:8e: ce:5d:36:29:6c:6d:b7:c7:21:1b:8d:58:9d:d3:59:e2:e9:d4: 7e:7e:46:8f:bb:89:7a:a2:90:8c:77:ef:fb:df:22:97:fc:a6: 1e:a3:51:80:49:6f:01:f1:7e:07:f1:8d:78:e3:cc:d3:b8:77: f8:3c:4c:68:d4:60:ad:0f:cc:4f:83:36:2e:74:04:c5:98:ac: f6:e9:f4:e3:81:00:24:da:44:a8:f9:a5:64:8e:e8:66:4d:40: a9:a8:f3:db:58:1e:bf:51:fc:aa:37:b6:e7:22:80:03:89:9f: fb:f2:38:99:7f:7c:a3:ad:93:10:61:42:a6:72:d1:ad:3c:69: c3:94:43:4a:bc:dc:ec:c9:91:f9:f6:22:e5:3f:b9:a4:fd:64: ea:d0:1f:93:cf:2b:48:c5:22:19:4f:3a:dc:ac:9a:40:9a:3a: a8:8b:10:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUwOTA5MDQ1MjI2WhcNMjUwOTE2MDQ1MjI2WjAYMRYwFAYD VQQDEw02OGJmYjI4Yi04YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hSd9Xzj/qsIJI75aXcCHjPt2jaer2kMbu/MF6JVTb9En697rCer9tHmPKfB Z6cnabwdnngqZOA+iOw8XWuFFQObz6irhXY79OKTubAUShbeR312mI9iQBo2UzI0 /5hJUHVHNQPzoFVcejErnQf0KU3fczhs7+FIvNsecQmMawQ8Uh2v0l9pOBbO1guw QQ8VjLuGzcZDK+2cUeFuag7ntrn0Xw+3hVwdoPrcwDEBmlUjkUahXuaVXa2rxca+ mfNs59ae0/ADfZw6lTK1ANCoR6Zqc5ER0lDlHAjA0m+dwPJxfSNggGH1o/rwO2es MmRUlO6V6cSQ2B4eIbaHMpYv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp+EMpu hiEaG+2OHIGi9FDbwPWmMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEVWD/jNGAVIFJNFhZAiB06JcegswAL8m8ApxJEAqkRb3Fd9Q4hvsZ Djr3IsaVsxhYK7UVnUyy73y6s0kotUOHyZxmBLpAl0967wGiz/IavuxbT0kXVyP2 8Y7OXTYpbG23xyEbjVid01ni6dR+fkaPu4l6opCMd+/73yKX/KYeo1GASW8B8X4H 8Y1448zTuHf4PExo1GCtD8xPgzYudATFmKz26fTjgQAk2kSo+aVkjuhmTUCpqPPb WB6/UfyqN7bnIoADiZ/78jiZf3yjrZMQYUKmctGtPGnDlENKvNzsyZH59iLlP7mk /WTq0B+TzytIxSIZTzrcrJpAmjqoixDM -----END CERTIFICATE-----Generated at Tue Sep 9 07:55:16 2025 by rpki-client