$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: +E3tETwqNxpIWJPugSKlkcEH8TIAFvmii1eHaPjqac0= Subject key identifier: AB:15:42:BC:1D:F8:4B:D4:A6:22:48:94:0B:8A:B0:7A:E5:D1:08:10 Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: EC Signing time: Fri 19 Sep 2025 05:54:46 +0000 Manifest this update: Fri 19 Sep 2025 05:54:46 +0000 Manifest next update: Fri 26 Sep 2025 05:54:45 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: GNf5tN1leydK6GpiDy/WWr9PwSTiIPepqIoeVuMs9Cg=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Sep 19 05:54:46 2025 GMT Not After : Sep 26 05:54:45 2025 GMT Subject: CN=68ccf026-34b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:86:82:0d:c4:08:39:28:aa:6d:5e:ab:e8: 71:ba:c5:ad:e7:a7:c1:a8:40:6c:16:8f:a4:bc:9d: 41:6f:a2:0c:68:03:4c:bb:c3:39:da:ab:3a:a6:2c: 97:bb:f8:f3:9d:4b:cf:b1:25:38:67:8b:7b:db:7e: 36:fb:fb:27:0f:24:a0:62:34:9f:fc:b5:b1:f1:91: 25:5b:5a:ca:e8:6b:4c:9d:c2:48:55:bd:dd:4e:c0: b4:a6:9e:41:88:e3:99:7a:86:ce:c6:16:f1:58:a8: 63:4f:f5:d1:52:49:6c:c6:e7:cf:fb:9d:e5:9a:40: 9a:4c:0f:e9:55:04:86:f7:0f:12:6f:20:57:62:8f: fe:f1:78:fb:6c:3f:ea:55:2e:1a:dc:d3:04:97:2a: 77:d0:a9:91:e3:fe:9b:c5:d9:02:db:07:7c:c9:1d: 7e:98:f7:ee:e3:6f:b7:29:29:ec:64:bb:cb:45:8e: 43:23:45:30:c8:d6:48:93:63:64:c5:87:53:b8:80: 2e:93:93:1a:65:a7:5d:bd:12:16:0e:01:a5:ac:7a: 4a:0f:03:a1:a9:e4:72:d3:a4:f2:53:f0:eb:11:d4: 06:e1:43:bd:0b:91:09:56:15:68:e0:ed:3b:12:c0: 40:23:00:9d:85:d2:db:a1:9d:6b:e7:c2:b5:af:3c: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:42:BC:1D:F8:4B:D4:A6:22:48:94:0B:8A:B0:7A:E5:D1:08:10 X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f9:01:a3:86:5f:55:a3:dc:0f:d4:fb:89:18:25:0b:d9:c8: 34:85:e5:4e:e5:d4:ae:31:95:5f:7a:80:13:b1:58:b5:89:81: ee:18:3b:cf:d9:d4:1b:d3:68:85:f6:0b:38:dd:6c:20:57:ea: 47:53:67:ef:c2:a9:fa:d9:9e:c7:75:31:0c:4d:77:41:44:4f: 01:e3:06:84:8e:6e:5d:8c:d1:79:92:e2:b1:06:5a:2d:c1:7a: c5:c3:d7:a8:02:48:6d:84:f0:a5:2b:07:e1:0b:eb:97:99:bd: 36:45:ed:79:c0:76:d1:67:1e:eb:e4:e0:3b:67:37:38:bd:ab: 09:af:57:7d:2e:70:d4:a4:15:9b:f9:5d:41:d5:d4:5f:56:22: 36:97:38:2b:05:a0:f0:bc:b1:9d:52:90:7b:c3:57:48:d9:c5: 14:41:bf:14:6f:06:de:61:65:28:e7:9c:d7:1c:2f:2f:37:58: 19:35:e7:dd:78:1f:f6:84:76:17:3e:c9:c6:1c:88:f6:b5:7a: 19:1e:c5:93:a8:77:58:14:40:8a:76:fb:8b:d6:2e:cb:5f:14: 3a:27:93:ca:e7:a0:57:0d:bf:22:fd:83:85:c5:2c:c9:8d:c5: 51:3c:28:25:f9:3f:27:d6:40:a1:e2:90:62:44:fd:5b:41:01: 29:d1:43:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUwOTE5MDU1NDQ2WhcNMjUwOTI2MDU1NDQ1WjAYMRYwFAYD VQQDEw02OGNjZjAyNi0zNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3aGgg3ECDkoqm1eq+hxusWt56fBqEBsFo+kvJ1Bb6IMaANMu8M52qs6piyX u/jznUvPsSU4Z4t72342+/snDySgYjSf/LWx8ZElW1rK6GtMncJIVb3dTsC0pp5B iOOZeobOxhbxWKhjT/XRUklsxufP+53lmkCaTA/pVQSG9w8SbyBXYo/+8Xj7bD/q VS4a3NMElyp30KmR4/6bxdkC2wd8yR1+mPfu42+3KSnsZLvLRY5DI0UwyNZIk2Nk xYdTuIAuk5MaZaddvRIWDgGlrHpKDwOhqeRy06TyU/DrEdQG4UO9C5EJVhVo4O07 EsBAIwCdhdLboZ1r58K1rzwjvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsVQrwd +EvUpiJIlAuKsHrl0QgQMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr+QGjhl9Vo9wP1PuJGCUL2cg0heVO5dSuMZVfeoATsVi1iYHuGDvP 2dQb02iF9gs43WwgV+pHU2fvwqn62Z7HdTEMTXdBRE8B4waEjm5djNF5kuKxBlot wXrFw9eoAkhthPClKwfhC+uXmb02Re15wHbRZx7r5OA7Zzc4vasJr1d9LnDUpBWb +V1B1dRfViI2lzgrBaDwvLGdUpB7w1dI2cUUQb8UbwbeYWUo55zXHC8vN1gZNefd eB/2hHYXPsnGHIj2tXoZHsWTqHdYFECKdvuL1i7LXxQ6J5PK56BXDb8i/YOFxSzJ jcVRPCgl+T8n1kCh4pBiRP1bQQEp0UML -----END CERTIFICATE-----Generated at Fri Sep 19 10:20:17 2025 by rpki-client