$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: OUT5j5nVPRh2AqhVvYlGvr7d8GEkjKZLlRJ6/13WGtQ= Subject key identifier: D2:AA:12:F8:9C:8F:54:FA:88:38:27:8A:CE:90:B9:C9:96:B8:93:CE Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01F1 Signing time: Sun 07 Sep 2025 02:52:27 +0000 Manifest this update: Sun 07 Sep 2025 02:52:27 +0000 Manifest next update: Sun 14 Sep 2025 02:52:27 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: PrwSlTY7OVqJxBQegn79/NyeU0HtS9k3PCDgGYnAiAU=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Sep 7 02:52:27 2025 GMT Not After : Sep 14 02:52:27 2025 GMT Subject: CN=68bcf36b-4083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:3f:c9:35:a4:e4:3d:ef:53:10:99:b9:05: 0f:d5:d2:3d:50:9e:3a:3b:e3:5a:fa:87:9b:f5:27: 4d:74:e5:5f:ae:30:02:b8:58:c1:5f:c6:06:e2:0f: 9c:78:c8:f6:34:c1:56:8b:41:f7:f5:96:18:4c:38: e7:5d:de:0c:d4:12:4c:33:29:27:50:6d:03:52:43: a1:cd:9b:14:06:c7:f8:7f:2e:b8:fc:cc:bf:52:a7: 02:e8:e4:f6:33:6a:da:33:59:73:f5:2c:e9:57:52: 28:78:68:51:7d:84:4e:8f:0d:ab:32:19:c5:ae:6c: 31:c4:b6:4a:64:50:c2:3a:5a:79:fd:54:e4:04:9f: ae:06:8a:73:f9:13:f7:0b:10:ba:de:62:5f:f5:c6: ae:e8:67:58:79:bd:05:64:78:0a:fa:dc:65:a4:81: d6:5f:a7:7a:d3:ae:7c:2f:65:79:22:c9:dc:d4:fd: c7:7f:18:e1:b5:2d:4d:35:e3:58:e2:d4:38:a8:55: 71:f6:f3:60:16:75:76:8e:60:10:be:5b:22:0f:27: 0b:1c:16:26:82:64:a6:87:66:cd:41:e0:26:0f:48: d0:58:4b:fc:d9:70:bb:1b:5d:43:8e:f4:5d:2e:b9: 40:4a:17:6d:67:d3:a3:99:1a:94:ab:82:bc:e1:c7: b1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:12:F8:9C:8F:54:FA:88:38:27:8A:CE:90:B9:C9:96:B8:93:CE X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:da:56:71:51:d2:91:20:88:f8:fc:3a:8b:cd:e2:05:e0:c4: 58:cb:23:16:9e:91:51:12:66:1c:4c:0e:ef:b7:4c:f3:73:ac: e4:12:22:16:0f:f6:6a:40:8e:2e:fe:ab:4d:85:2a:c1:e8:f3: af:8e:d9:1a:be:1f:d4:ce:2f:fe:75:4c:71:ce:79:8a:eb:ef: 1c:94:fa:a3:88:95:11:66:13:0a:98:05:6e:a8:b2:68:b5:30: 80:5b:39:b6:85:a0:92:23:33:1b:17:ad:7c:de:35:4d:e0:81: 5f:bf:b4:43:7d:6b:78:a2:ff:82:e5:17:be:16:86:dd:80:ff: 82:78:03:16:31:34:a5:5f:98:9b:62:60:ff:fd:2e:de:38:f7: 3a:c9:34:d6:67:cc:ec:6f:58:65:da:0e:1f:f3:fd:c4:b1:1f: 2c:64:01:21:a9:0b:86:64:6c:62:40:f7:fc:8e:b3:6b:1a:16: d5:17:70:14:0e:ab:66:14:6f:7a:57:d3:71:2c:77:21:fa:ce: f1:73:9d:d4:ad:d3:b0:0b:82:6b:31:a0:69:8f:b0:5b:86:38: d8:fe:93:13:e1:df:c4:13:81:4e:3e:9f:67:06:55:4c:03:4e: 59:a6:29:50:ff:6d:c7:62:2b:b7:45:bc:09:21:a5:44:be:71: 20:54:d7:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwOTA3MDI1MjI3WhcNMjUwOTE0MDI1MjI3WjAYMRYwFAYD VQQDEw02OGJjZjM2Yi00MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujI/yTWk5D3vUxCZuQUP1dI9UJ46O+Na+oeb9SdNdOVfrjACuFjBX8YG4g+c eMj2NMFWi0H39ZYYTDjnXd4M1BJMMyknUG0DUkOhzZsUBsf4fy64/My/UqcC6OT2 M2raM1lz9SzpV1IoeGhRfYROjw2rMhnFrmwxxLZKZFDCOlp5/VTkBJ+uBopz+RP3 CxC63mJf9cau6GdYeb0FZHgK+txlpIHWX6d60658L2V5Isnc1P3HfxjhtS1NNeNY 4tQ4qFVx9vNgFnV2jmAQvlsiDycLHBYmgmSmh2bNQeAmD0jQWEv82XC7G11DjvRd LrlAShdtZ9OjmRqUq4K84cexPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKqEvic j1T6iDgnis6QucmWuJPOMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc2lZxUdKRIIj4/DqLzeIF4MRYyyMWnpFREmYcTA7vt0zzc6zkEiIW D/ZqQI4u/qtNhSrB6POvjtkavh/Uzi/+dUxxznmK6+8clPqjiJURZhMKmAVuqLJo tTCAWzm2haCSIzMbF6183jVN4IFfv7RDfWt4ov+C5Re+FobdgP+CeAMWMTSlX5ib YmD//S7eOPc6yTTWZ8zsb1hl2g4f8/3EsR8sZAEhqQuGZGxiQPf8jrNrGhbVF3AU DqtmFG96V9NxLHch+s7xc53UrdOwC4JrMaBpj7BbhjjY/pMT4d/EE4FOPp9nBlVM A05ZpilQ/23HYiu3RbwJIaVEvnEgVNco -----END CERTIFICATE-----Generated at Mon Sep 8 02:38:36 2025 by rpki-client