$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: kejtrrz2dZv0A3Pq0TuVTG+R1FZ6WoNCBW5IKDgQ2E0= Subject key identifier: 3D:3A:E6:69:25:F6:A0:7E:D4:E8:6D:F4:D6:BA:0B:23:E5:54:64:5B Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01F1 Signing time: Sun 07 Sep 2025 02:53:43 +0000 Manifest this update: Sun 07 Sep 2025 02:53:43 +0000 Manifest next update: Sun 14 Sep 2025 02:53:43 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: wasgJNjek2/Opw6afXaPC3QrcESmj8ewrkFgex1FiJU=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Sep 7 02:53:43 2025 GMT Not After : Sep 14 02:53:43 2025 GMT Subject: CN=68bcf3b7-c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:5f:c0:3e:68:01:2d:93:c7:3e:ae:75:3a: 57:6d:16:6e:8b:1a:cf:a0:10:ad:1f:35:6b:47:b5: 5a:33:99:46:62:5d:cf:3c:bd:54:b8:0e:c6:73:bf: 9c:d5:fb:46:8c:38:d6:31:67:f5:6a:61:61:00:a3: 04:db:cd:79:dc:e7:7c:d2:d3:53:21:0b:d9:3d:e8: 0a:ca:0a:47:21:11:03:cc:67:d5:ce:3f:f8:75:43: a8:40:65:59:00:b4:1e:41:9a:d9:97:60:19:c6:62: 1e:dd:79:6c:23:8e:42:fb:a6:e9:0c:cd:d8:0f:60: fb:80:47:4f:46:58:5a:ab:7e:ea:04:b0:d8:38:72: aa:ef:76:53:3f:7c:0d:bb:c9:90:de:8f:54:3e:e8: 87:b7:2e:8d:b7:3f:49:01:2d:ef:6c:a3:e0:f8:92: c6:d2:6a:d3:ad:1e:2d:a2:00:2d:d9:3f:b9:90:5e: fd:0f:b8:7e:58:ae:8a:4e:e9:71:ff:c1:5a:fb:9c: e5:15:37:2b:f1:cb:a9:ff:cd:64:4a:d9:b7:e7:60: c7:cb:9a:8b:98:18:c7:46:a4:4b:41:31:4f:b3:86: 23:32:b8:2f:08:ca:c2:3b:89:8d:5c:94:c0:74:43: 4c:00:d5:dd:e2:d6:62:e4:62:1e:39:4b:88:f7:2f: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:E6:69:25:F6:A0:7E:D4:E8:6D:F4:D6:BA:0B:23:E5:54:64:5B X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ae:e3:1f:12:f8:a8:75:48:e8:a9:5f:cc:33:c6:6c:f9:e8: e7:14:c9:86:f9:35:c1:3c:60:60:fd:28:53:22:b7:2c:91:70: ff:d8:4f:5b:ec:dc:12:75:f7:21:9b:a0:07:9b:7d:30:27:48: 33:42:36:31:1c:f7:e4:5d:38:bb:bc:99:1a:4b:f6:f3:de:59: 14:1d:97:12:b7:a5:9d:be:82:05:5c:b4:2c:b1:67:a9:7e:81: 4e:6d:6c:64:9b:1a:1b:61:35:3b:05:32:84:1a:2d:dd:f2:a8: e6:aa:b2:80:27:70:20:d6:75:d3:8b:e8:59:a6:13:81:13:04: 3b:45:40:11:b4:dc:8d:e0:4f:2a:4b:20:12:00:aa:36:1b:4c: 9d:e8:17:f9:91:f0:21:13:f9:4f:c8:fc:2e:2b:5c:bf:2c:5a: 80:c1:8a:90:c0:ea:38:34:e2:80:16:c1:35:c3:84:65:42:91: c6:67:de:d0:29:14:20:d1:49:5e:72:88:43:d7:a2:ce:24:6a: c4:42:e7:f3:10:d0:a9:75:a2:1f:5e:01:29:60:8c:1b:0d:42: 33:b0:0a:56:72:ac:df:a0:fb:19:ab:f1:5c:7e:77:ec:59:45: b4:10:e0:2a:2f:62:61:59:f8:9a:9f:d6:bb:c7:70:43:7f:ea: 58:96:ac:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwOTA3MDI1MzQzWhcNMjUwOTE0MDI1MzQzWjAYMRYwFAYD VQQDEw02OGJjZjNiNy1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dRfwD5oAS2Txz6udTpXbRZuixrPoBCtHzVrR7VaM5lGYl3PPL1UuA7Gc7+c 1ftGjDjWMWf1amFhAKME28153Od80tNTIQvZPegKygpHIREDzGfVzj/4dUOoQGVZ ALQeQZrZl2AZxmIe3XlsI45C+6bpDM3YD2D7gEdPRlhaq37qBLDYOHKq73ZTP3wN u8mQ3o9UPuiHty6Ntz9JAS3vbKPg+JLG0mrTrR4togAt2T+5kF79D7h+WK6KTulx /8Fa+5zlFTcr8cup/81kStm352DHy5qLmBjHRqRLQTFPs4YjMrgvCMrCO4mNXJTA dENMANXd4tZi5GIeOUuI9y/B+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD065mkl 9qB+1Oht9Na6CyPlVGRbMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpruMfEviodUjoqV/MM8Zs+ejnFMmG+TXBPGBg/ShTIrcskXD/2E9b 7NwSdfchm6AHm30wJ0gzQjYxHPfkXTi7vJkaS/bz3lkUHZcSt6WdvoIFXLQssWep foFObWxkmxobYTU7BTKEGi3d8qjmqrKAJ3Ag1nXTi+hZphOBEwQ7RUARtNyN4E8q SyASAKo2G0yd6Bf5kfAhE/lPyPwuK1y/LFqAwYqQwOo4NOKAFsE1w4RlQpHGZ97Q KRQg0UlecohD16LOJGrEQufzENCpdaIfXgEpYIwbDUIzsApWcqzfoPsZq/Fcfnfs WUW0EOAqL2JhWfian9a7x3BDf+pYlqzh -----END CERTIFICATE-----Generated at Mon Sep 8 10:05:41 2025 by rpki-client