$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: en7bHb8Fq1k7uBOuEBi1+udzhB4r541mJzUfBpyD6Gc= Subject key identifier: DC:2B:D8:0B:F7:AA:44:FB:FA:E4:12:D8:D1:C7:9C:F6:5F:8E:00:69 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 1002 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FF5 Signing time: Thu 18 Sep 2025 17:38:30 +0000 Manifest this update: Thu 18 Sep 2025 17:38:30 +0000 Manifest next update: Thu 25 Sep 2025 17:38:30 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: K5ULlRegSYWiq9zmAb2fAkwF87CpU5CGxaYWae0HGp8=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: frN4lZuv4ZlRLTeZDqpWstvGTNjkjq8jINytoj03BxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4098 (0x1002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Sep 18 17:38:30 2025 GMT Not After : Sep 25 17:38:30 2025 GMT Subject: CN=68cc4396-31e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:22:53:ed:75:7b:f8:49:8a:ed:bf:d5:b0: 11:ec:ec:77:bc:2c:4a:2d:da:f5:4e:ab:9d:95:f1: ff:50:30:f3:c7:82:80:6d:8c:59:ef:94:d6:d5:0d: 46:2c:a4:93:97:16:79:c3:42:1f:d4:32:f2:99:c4: 61:5b:06:20:45:eb:ed:67:10:1f:e0:e0:9a:d9:da: 2f:01:03:cf:a9:49:72:57:15:c3:db:1e:08:69:2a: 68:7e:e0:89:ad:c5:6f:1c:ee:cc:74:a6:82:d2:25: 92:de:4f:0f:b9:50:26:e7:6f:70:7e:d2:55:d2:ee: a9:2c:7c:bb:72:84:1a:af:46:08:4a:bf:ec:08:ea: e0:d6:d6:c4:60:c9:e1:f5:f1:22:30:e9:83:a3:12: 8a:f8:22:8c:b3:e6:95:2c:6a:fc:3f:da:b5:de:0f: b4:bd:b8:83:4d:55:8f:ee:17:ad:77:45:6a:31:2d: 2f:f4:75:d1:35:ab:35:5e:a9:b3:b8:7a:e0:b7:b7: 5e:11:6b:3c:dc:21:bf:20:7e:c0:d8:a9:ea:a5:83: c6:85:f5:d8:b5:19:e2:b5:b5:4d:3a:9e:53:23:59: 92:09:ee:71:d8:e5:b1:ce:26:b1:e9:41:5d:71:1f: 6f:7d:e1:94:05:91:de:6c:df:c5:53:eb:15:02:6b: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:D8:0B:F7:AA:44:FB:FA:E4:12:D8:D1:C7:9C:F6:5F:8E:00:69 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fc:79:3a:b5:f2:58:33:d2:80:d5:e1:26:d1:8d:fe:cc:c9: e8:32:72:c8:dd:b7:0f:a2:5e:65:90:af:27:89:38:f6:9d:82: 0b:b2:1b:c9:fc:24:c6:df:bf:90:72:6c:c1:fd:34:15:ed:1c: 0e:b6:be:3e:9b:ff:c5:d0:2e:09:b0:70:e9:67:d9:70:23:26: 9d:86:22:af:9d:ae:ce:96:db:f3:49:28:bf:96:93:3b:cc:76: 42:0e:98:ac:ca:01:40:ae:66:6d:aa:f9:c0:4c:4b:d1:5d:33: be:a4:0e:1c:5d:fb:c9:17:e4:af:ca:a4:7b:43:dc:64:64:53: e3:fd:98:63:fe:62:ac:4d:5e:f7:5a:0e:28:c3:3f:c2:b0:70: 92:8b:95:f3:da:5c:4c:47:12:20:82:0c:c8:22:b9:cf:ce:b7: bc:e5:96:76:74:45:3d:87:3e:84:d1:4e:6a:3e:b8:4c:de:db: 3a:f7:84:17:b4:7f:bc:3a:5b:9b:1a:09:a5:fe:ea:f4:d9:fc: 3f:bf:fd:85:f1:0e:37:a5:4b:af:3b:f1:de:be:79:de:4f:d1: 12:40:0a:45:4c:97:c6:13:42:3e:1c:ec:ba:85:ff:63:fd:b6: 71:f8:a0:44:c5:b9:86:78:4d:63:70:2c:38:fc:7a:d5:c5:f7: 7c:14:cf:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwOTE4MTczODMwWhcNMjUwOTI1MTczODMwWjAYMRYwFAYD VQQDEw02OGNjNDM5Ni0zMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviciU+11e/hJiu2/1bAR7Ox3vCxKLdr1TqudlfH/UDDzx4KAbYxZ75TW1Q1G LKSTlxZ5w0If1DLymcRhWwYgRevtZxAf4OCa2dovAQPPqUlyVxXD2x4IaSpofuCJ rcVvHO7MdKaC0iWS3k8PuVAm529wftJV0u6pLHy7coQar0YISr/sCOrg1tbEYMnh 9fEiMOmDoxKK+CKMs+aVLGr8P9q13g+0vbiDTVWP7hetd0VqMS0v9HXRNas1Xqmz uHrgt7deEWs83CG/IH7A2KnqpYPGhfXYtRnitbVNOp5TI1mSCe5x2OWxziax6UFd cR9vfeGUBZHebN/FU+sVAmuFRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwr2Av3 qkT7+uQS2NHHnPZfjgBpMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu/Hk6tfJYM9KA1eEm0Y3+zMnoMnLI3bcPol5lkK8niTj2nYILshvJ /CTG37+QcmzB/TQV7RwOtr4+m//F0C4JsHDpZ9lwIyadhiKvna7OltvzSSi/lpM7 zHZCDpisygFArmZtqvnATEvRXTO+pA4cXfvJF+SvyqR7Q9xkZFPj/Zhj/mKsTV73 Wg4owz/CsHCSi5Xz2lxMRxIgggzIIrnPzre85ZZ2dEU9hz6E0U5qPrhM3ts694QX tH+8OlubGgml/ur02fw/v/2F8Q43pUuvO/HevnneT9ESQApFTJfGE0I+HOy6hf9j /bZx+KBExbmGeE1jcCw4/HrVxfd8FM+V -----END CERTIFICATE-----Generated at Fri Sep 19 07:10:11 2025 by rpki-client