$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: +38JT3r1CQbtx/gglcPexmM00MWhulH27OKloBPvQdE= Subject key identifier: CA:DA:C7:83:7F:2F:C0:04:0E:DB:94:47:DB:09:F4:21:D8:54:82:11 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 06FE Signing time: Thu 04 Sep 2025 22:12:08 +0000 Manifest this update: Thu 04 Sep 2025 22:12:08 +0000 Manifest next update: Thu 11 Sep 2025 22:12:08 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: L+1XEJjIeA5cr6sbFizurc0wmp5sIgoVpDCUZV5hhaQ=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Sep 4 22:12:08 2025 GMT Not After : Sep 11 22:12:08 2025 GMT Subject: CN=68ba0eb8-7f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:02:96:86:a3:65:48:ec:f3:55:19:8e:b6: 25:01:17:1b:c0:4e:dd:de:2f:1d:a1:67:1f:4c:31: 82:c7:3e:96:9f:bb:29:b2:d2:d2:5c:3d:2a:96:ea: e1:02:5c:ff:f4:4e:25:f1:4c:18:e5:08:be:07:d0: d7:13:cb:0c:c3:7f:85:55:58:5e:db:bb:92:d1:a8: 84:b9:87:b6:9a:8c:cf:b1:11:76:dd:74:29:c6:bc: bc:4e:d8:1c:64:45:02:76:1d:d6:90:92:7e:ee:35: 1b:a9:ad:f4:16:55:93:f0:e8:fb:45:82:97:2a:89: 13:5c:cb:f9:cf:4b:ed:dc:c6:54:11:0b:f4:7f:93: 6e:c7:e8:ee:d5:4f:df:6c:f0:e8:e7:fe:63:a1:04: 59:ad:00:26:9a:a2:91:13:c5:39:ae:a0:21:a7:97: 0e:49:11:12:4b:95:bd:93:f4:19:0b:26:64:72:6e: 48:cf:29:03:ff:6d:c2:22:c1:6f:a4:bb:ae:e0:29: c3:82:37:b2:31:e4:05:43:c6:66:f1:f4:d1:6b:81: 5b:be:9a:ec:fe:c2:4f:85:25:c5:9a:3e:f3:58:07: 76:5a:93:d0:e4:c7:9b:73:c0:37:44:32:0b:0b:3a: b5:5e:c6:92:53:22:de:c5:1f:30:19:6d:68:e3:58: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:C7:83:7F:2F:C0:04:0E:DB:94:47:DB:09:F4:21:D8:54:82:11 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f1:63:4f:8c:2a:f0:7b:13:ba:aa:f1:b6:ab:f4:16:ad:1a: 90:96:74:bb:82:40:59:d9:89:70:2f:66:51:84:42:fe:21:ff: f6:9a:18:82:07:f3:d0:5a:12:b4:e0:97:8a:41:26:ea:6a:bf: 85:79:33:3e:43:0d:fd:19:c9:f3:36:08:84:2e:9c:df:9e:7d: 72:cd:d3:e7:82:6c:b9:aa:79:a9:5c:c7:c2:2a:70:78:78:ad: 97:12:ca:21:99:f9:f2:7c:d0:a0:05:07:65:3e:8b:2a:f6:05: 4e:3e:0e:80:56:14:e5:f9:65:db:e4:04:84:89:5d:ff:f8:0a: 93:a4:39:95:ac:08:24:f0:89:3e:61:75:3f:6f:a1:82:07:52: 68:2f:15:3a:68:af:45:c6:d2:c2:cf:48:1f:e0:8f:71:b4:de: 8c:eb:ca:f8:6b:e7:ef:d0:b6:bf:0a:3d:b9:d2:3b:e3:36:64: a5:8b:ee:d0:23:36:7e:20:d3:bd:eb:e2:df:0e:66:a7:9e:22: 3c:8b:a2:7b:f9:20:d0:86:b0:11:30:b9:ca:60:81:d1:97:d5: b7:b6:ee:5f:85:5a:e6:c3:c5:2f:28:a6:50:b1:e6:e4:77:7b: 32:f4:e7:fb:d5:65:f1:2d:6d:09:85:84:a1:12:a6:64:6a:b6: 8d:7e:32:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUwOTA0MjIxMjA4WhcNMjUwOTExMjIxMjA4WjAYMRYwFAYD VQQDEw02OGJhMGViOC03ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucICloajZUjs81UZjrYlARcbwE7d3i8doWcfTDGCxz6Wn7spstLSXD0qlurh Alz/9E4l8UwY5Qi+B9DXE8sMw3+FVVhe27uS0aiEuYe2mozPsRF23XQpxry8Ttgc ZEUCdh3WkJJ+7jUbqa30FlWT8Oj7RYKXKokTXMv5z0vt3MZUEQv0f5Nux+ju1U/f bPDo5/5joQRZrQAmmqKRE8U5rqAhp5cOSRESS5W9k/QZCyZkcm5IzykD/23CIsFv pLuu4CnDgjeyMeQFQ8Zm8fTRa4Fbvprs/sJPhSXFmj7zWAd2WpPQ5Mebc8A3RDIL Czq1XsaSUyLexR8wGW1o41jc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrax4N/ L8AEDtuUR9sJ9CHYVIIRMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs8WNPjCrwexO6qvG2q/QWrRqQlnS7gkBZ2YlwL2ZRhEL+If/2mhiC B/PQWhK04JeKQSbqar+FeTM+Qw39GcnzNgiELpzfnn1yzdPngmy5qnmpXMfCKnB4 eK2XEsohmfnyfNCgBQdlPosq9gVOPg6AVhTl+WXb5ASEiV3/+AqTpDmVrAgk8Ik+ YXU/b6GCB1JoLxU6aK9FxtLCz0gf4I9xtN6M68r4a+fv0La/Cj250jvjNmSli+7Q IzZ+INO96+LfDmanniI8i6J7+SDQhrARMLnKYIHRl9W3tu5fhVrmw8UvKKZQsebk d3sy9Of71WXxLW0JhYShEqZkaraNfjJW -----END CERTIFICATE-----Generated at Sat Sep 6 16:39:59 2025 by rpki-client