$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: YDxzvgW0xSA4R5FCNE6myC3KqSXG1jgkbUvE6maP+9M= Subject key identifier: 03:D3:C1:20:0C:DD:CD:BE:83:07:94:9B:9B:4E:ED:40:E0:5C:FF:98 Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1F3B Signing time: Sun 24 Aug 2025 16:44:00 +0000 Manifest this update: Sun 24 Aug 2025 16:44:00 +0000 Manifest next update: Sun 31 Aug 2025 16:44:00 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: +RiOHQhcHXRCfWq3cBYDpbR7YPmhKlv5BVPaMm9Xfeo=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: Aug 24 16:44:00 2025 GMT Not After : Aug 31 16:44:00 2025 GMT Subject: CN=68ab4150-1b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c5:35:9a:62:89:75:25:69:5b:72:d6:83:6a: 04:24:88:53:a2:20:6f:21:87:f3:e0:97:2d:3c:a9: dd:d0:d7:ec:22:19:d9:2d:85:35:4a:15:07:82:59: 4b:ea:c7:8b:0f:23:fa:12:86:65:c2:bd:6f:6e:ad: 4c:29:2e:5d:38:84:e3:a8:8b:23:c8:12:03:34:25: 0f:8f:85:c2:d1:6a:41:66:55:d7:fb:fc:83:4b:c8: ad:58:32:b7:96:93:47:53:d7:cb:1a:07:e1:8f:e9: 23:a8:e7:4e:95:c6:a1:2a:b3:ca:ff:fd:5c:c5:65: cb:a5:90:de:cb:0d:24:4e:d8:82:b4:c1:a5:96:59: 0d:15:f1:96:29:76:f7:0c:c7:ff:61:43:89:d2:b7: 7b:e2:c4:fb:5c:c2:bb:f6:4a:d3:af:a6:51:95:09: 14:14:27:7e:80:57:54:14:53:7b:6f:e1:ae:84:47: a0:79:d6:f5:95:f0:fd:a1:47:e0:7b:83:a7:a7:75: 28:da:71:44:3d:3e:93:e1:05:20:18:d1:51:39:77: 56:b2:ac:5f:04:d3:ab:6f:59:3c:ca:4f:7d:05:49: 8a:d3:32:6e:a4:00:d4:59:cd:6e:49:ac:a4:84:6c: ac:81:da:d8:24:52:41:48:04:80:de:de:5a:fe:de: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D3:C1:20:0C:DD:CD:BE:83:07:94:9B:9B:4E:ED:40:E0:5C:FF:98 X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:cf:92:f1:fd:eb:44:0c:67:b1:93:4f:55:db:bd:5b:c9:41: 5d:59:17:23:0a:af:89:67:10:c8:4d:1d:7b:53:23:2f:8a:2e: 95:6d:20:b2:bc:e7:be:a8:82:1c:03:b2:10:84:43:eb:53:17: 2d:60:f1:9d:62:0b:92:de:27:56:9b:16:03:96:86:8e:07:50: 57:ab:ee:9c:4d:c8:38:17:55:d1:95:12:35:ab:a4:38:a6:32: 96:ec:93:ab:dc:27:96:f7:49:7f:95:2a:69:31:1e:2e:40:c1: f4:6e:6f:bd:e2:cb:ef:a2:94:38:0d:e6:2d:fe:dc:9a:0d:1a: 79:3e:0c:88:4b:31:cd:b3:3a:91:ae:aa:f3:5c:30:95:7b:ed: bf:bc:dd:3e:6a:4d:31:a0:a0:d3:f2:db:94:6a:08:6b:8c:74: e9:9f:7f:f9:ff:b5:81:d4:af:30:c9:5c:38:c1:e8:4f:b9:48: c7:6b:4b:11:d2:88:4d:01:4b:9b:be:80:bb:49:90:7c:78:36: ca:1d:79:fb:b7:a7:a1:ee:52:7e:ae:6d:f1:85:0a:fb:08:60: f0:ef:3e:30:7e:db:74:69:f7:55:8e:dd:d9:60:51:26:6c:36: fc:ad:7d:09:68:7c:c8:c9:0a:c8:bc:ab:3f:e6:b9:2c:1d:10: a0:8b:fa:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUwODI0MTY0NDAwWhcNMjUwODMxMTY0NDAwWjAYMRYwFAYD VQQDEw02OGFiNDE1MC0xYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+sU1mmKJdSVpW3LWg2oEJIhToiBvIYfz4JctPKnd0NfsIhnZLYU1ShUHgllL 6seLDyP6EoZlwr1vbq1MKS5dOITjqIsjyBIDNCUPj4XC0WpBZlXX+/yDS8itWDK3 lpNHU9fLGgfhj+kjqOdOlcahKrPK//1cxWXLpZDeyw0kTtiCtMGlllkNFfGWKXb3 DMf/YUOJ0rd74sT7XMK79krTr6ZRlQkUFCd+gFdUFFN7b+GuhEegedb1lfD9oUfg e4Onp3Uo2nFEPT6T4QUgGNFROXdWsqxfBNOrb1k8yk99BUmK0zJupADUWc1uSayk hGysgdrYJFJBSASA3t5a/t6WbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPTwSAM 3c2+gweUm5tO7UDgXP+YMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfz5Lx/etEDGexk09V271byUFdWRcjCq+JZxDITR17UyMvii6VbSCy vOe+qIIcA7IQhEPrUxctYPGdYguS3idWmxYDloaOB1BXq+6cTcg4F1XRlRI1q6Q4 pjKW7JOr3CeW90l/lSppMR4uQMH0bm+94svvopQ4DeYt/tyaDRp5PgyISzHNszqR rqrzXDCVe+2/vN0+ak0xoKDT8tuUaghrjHTpn3/5/7WB1K8wyVw4wehPuUjHa0sR 0ohNAUubvoC7SZB8eDbKHXn7t6eh7lJ+rm3xhQr7CGDw7z4wftt0afdVjt3ZYFEm bDb8rX0JaHzIyQrIvKs/5rksHRCgi/rk -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:32 2025 by rpki-client