$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: tL+rqt/6e2SGTH/ZHTNiVrlpc2sVq/Sd7hraLEENSyk= Subject key identifier: AB:BA:E6:BC:70:CD:84:EA:EF:74:D4:F2:9D:41:4F:3C:1F:CA:3D:87 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C90 Signing time: Sun 24 Aug 2025 18:16:53 +0000 Manifest this update: Sun 24 Aug 2025 18:16:53 +0000 Manifest next update: Sun 31 Aug 2025 18:16:53 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: sfMaN3m0mb+rs2+Z7DQ/FQ5dklvoVJL/xRZ19s80bF4=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Aug 24 18:16:53 2025 GMT Not After : Aug 31 18:16:53 2025 GMT Subject: CN=68ab5715-2e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:0d:32:14:a2:28:04:11:1c:ee:c7:67:75: b7:d0:97:52:ff:70:92:be:4a:06:64:94:1b:0a:1e: 16:7f:c4:dc:a9:1c:38:e4:31:eb:5b:52:28:ca:83: 62:15:df:97:45:9f:01:93:28:ce:ed:78:a1:9c:1c: 61:ee:5c:9d:16:b4:c7:d6:2c:5d:d5:b6:f2:57:40: e9:c6:83:31:61:0d:44:ba:fa:e1:7b:5d:53:61:cb: d4:07:b3:34:f7:8b:71:ef:d1:7a:65:99:9f:0a:ca: 0d:0f:84:dc:58:f9:3b:23:18:f4:8f:af:10:81:84: 3d:7d:84:69:ca:0f:3d:d1:15:7f:aa:f9:87:89:f5: 63:ae:be:d1:6b:0e:f1:c4:9d:fa:96:04:ed:3c:26: bd:c8:cb:e5:76:06:a1:16:1f:d8:7a:ad:44:71:ae: eb:58:bc:3f:b0:cf:85:3d:37:ec:51:05:7f:54:77: 49:58:78:2f:1a:ee:d9:ed:07:34:49:ff:c4:c6:41: 6c:e8:0e:79:21:5a:71:e5:28:d3:04:89:34:2e:3f: bc:84:71:11:25:f1:f6:43:a8:c4:16:e7:2b:03:0a: 0c:b8:7a:60:b2:25:51:51:c0:a6:73:13:e9:82:18: 95:04:fa:1a:36:12:3b:36:df:02:97:6d:48:b6:db: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BA:E6:BC:70:CD:84:EA:EF:74:D4:F2:9D:41:4F:3C:1F:CA:3D:87 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:74:84:a7:96:60:3b:b7:32:11:1a:03:8f:a1:a8:e0:4d:bc: e2:f7:3b:ea:fc:ee:44:a5:f4:2f:fb:2e:f3:99:5a:b4:d2:14: 71:cc:f9:88:c3:52:f9:e8:b1:de:93:21:0c:9c:39:7d:7e:fb: 1b:03:4f:ea:f3:e9:51:e4:40:8d:6e:a3:a5:a8:2d:1c:cd:cb: 3b:ad:39:f8:9e:98:24:09:f5:7e:a2:50:90:0a:75:83:df:a2: 9e:38:8e:11:e7:5c:9c:6b:50:06:ff:82:77:5f:69:3f:da:e1: 89:91:2b:42:17:77:37:91:d4:04:ad:da:cc:9b:d2:d1:a6:f8: d8:29:00:56:74:49:13:9a:72:af:f7:6b:3c:33:40:86:e5:09: ee:4b:0e:67:71:38:39:45:ec:97:f5:fd:6a:0a:dc:d5:29:a2: 7f:09:9a:ed:fa:2e:cc:57:2b:c0:04:0e:14:dd:40:49:a4:47: 33:94:0a:55:78:92:5a:f1:dd:a8:fa:5f:b9:65:a0:1d:8d:0b: c0:bf:f9:68:e5:18:14:d9:dc:af:89:d8:cc:b2:52:be:85:2c: 46:ba:ad:98:f6:df:7c:17:2e:d0:41:50:5f:0d:22:7e:dd:96: a2:f2:8b:05:dc:52:06:17:72:c1:bb:83:82:0c:0b:bb:a9:d7: 35:e7:7c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwODI0MTgxNjUzWhcNMjUwODMxMTgxNjUzWjAYMRYwFAYD VQQDEw02OGFiNTcxNS0yZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5cNMhSiKAQRHO7HZ3W30JdS/3CSvkoGZJQbCh4Wf8TcqRw45DHrW1IoyoNi Fd+XRZ8BkyjO7XihnBxh7lydFrTH1ixd1bbyV0DpxoMxYQ1Euvrhe11TYcvUB7M0 94tx79F6ZZmfCsoND4TcWPk7Ixj0j68QgYQ9fYRpyg890RV/qvmHifVjrr7Raw7x xJ36lgTtPCa9yMvldgahFh/Yeq1Eca7rWLw/sM+FPTfsUQV/VHdJWHgvGu7Z7Qc0 Sf/ExkFs6A55IVpx5SjTBIk0Lj+8hHERJfH2Q6jEFucrAwoMuHpgsiVRUcCmcxPp ghiVBPoaNhI7Nt8Cl21IttshcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu65rxw zYTq73TU8p1BTzwfyj2HMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdISnlmA7tzIRGgOPoajgTbzi9zvq/O5EpfQv+y7zmVq00hRxzPmI w1L56LHekyEMnDl9fvsbA0/q8+lR5ECNbqOlqC0czcs7rTn4npgkCfV+olCQCnWD 36KeOI4R51yca1AG/4J3X2k/2uGJkStCF3c3kdQErdrMm9LRpvjYKQBWdEkTmnKv 92s8M0CG5QnuSw5ncTg5ReyX9f1qCtzVKaJ/CZrt+i7MVyvABA4U3UBJpEczlApV eJJa8d2o+l+5ZaAdjQvAv/lo5RgU2dyvidjMslK+hSxGuq2Y9t98Fy7QQVBfDSJ+ 3Zai8osF3FIGF3LBu4OCDAu7qdc153w3 -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:13 2025 by rpki-client