$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: JGBTPUFZTZvSkvgNkr+a9e96KX4wWXl0yIymmzQHHNI= Subject key identifier: 73:56:81:85:6F:97:63:BF:8E:6B:50:51:27:B1:65:E8:CC:51:94:69 Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 0131 Signing time: Fri 05 Sep 2025 04:57:55 +0000 Manifest this update: Fri 05 Sep 2025 04:57:54 +0000 Manifest next update: Fri 12 Sep 2025 04:57:54 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: P4oBTRYqNTzkA53jLvQdGjNSJZEzltVvIe4Z/vJjJyo=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Sep 5 04:57:54 2025 GMT Not After : Sep 12 04:57:54 2025 GMT Subject: CN=68ba6dd2-f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:5d:bc:f1:04:e1:7c:43:4f:7b:dd:f5:f1: 7c:06:51:68:ad:68:ce:80:88:27:1b:e0:32:cb:7c: 63:4a:d2:67:ea:68:f1:5d:ea:72:16:82:92:47:a2: 43:32:e6:1a:47:c8:27:c7:85:e7:12:f4:16:f1:b6: 58:0a:07:02:94:af:5d:7a:7f:9e:0d:1d:d3:7c:f9: 6a:86:06:a8:be:12:70:bb:38:fa:b7:95:d8:59:c9: ff:ae:cd:08:47:53:02:1d:c5:f1:0a:c1:a3:1f:8d: c9:a2:43:a9:c2:6d:04:21:6f:fe:80:af:16:dc:ec: 59:e7:ca:1e:91:83:55:b9:bb:bb:53:c0:18:19:26: 76:84:fe:82:35:4b:96:de:cd:e2:3e:90:5b:56:49: dc:e7:36:bc:1f:eb:15:58:fd:92:e1:c6:51:34:1b: 99:d4:c2:2c:94:89:04:c3:73:17:7d:85:45:16:58: 9e:11:1d:ec:96:34:12:ae:95:79:bc:9d:6d:5f:54: db:72:87:ed:77:d2:83:be:94:03:fe:d1:49:d4:50: e7:68:7a:96:cc:bd:e3:40:eb:63:59:66:62:68:4b: 8b:af:3d:40:1c:a8:4f:07:d0:fe:b8:0b:50:69:f9: a9:2e:32:2b:e0:cb:59:d4:4f:c6:e8:63:11:16:9d: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:56:81:85:6F:97:63:BF:8E:6B:50:51:27:B1:65:E8:CC:51:94:69 X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:75:7b:f0:ac:01:cc:bb:6c:01:91:6e:49:15:50:78:c4:fa: 2f:90:6c:dd:f8:95:4f:6c:79:f1:a4:18:6d:4b:c3:a0:c2:4e: 91:53:49:45:cb:b5:31:47:3a:87:dd:d2:94:15:a2:d6:3d:75: 10:60:0c:d5:2b:75:0c:db:61:e5:4b:80:d7:d1:23:33:d9:52: 3a:c2:e4:9f:fa:00:1e:bb:69:84:0d:0b:98:1e:6d:65:94:13: 60:4f:65:07:80:dd:7d:b0:f8:8c:97:bc:70:bb:75:d8:98:02: 61:a2:0e:70:97:ff:df:2e:be:b4:36:23:18:ae:06:80:d6:e8: 37:20:1a:44:d2:11:18:a7:a2:54:95:85:ae:0c:37:54:31:0d: 2a:84:29:d0:95:63:cd:20:59:ee:96:db:17:99:01:b6:b0:33: e4:85:ea:4a:77:7a:31:f5:f0:96:69:bf:4f:83:55:5b:30:1d: b6:90:f5:1f:4d:43:46:6b:12:2d:50:71:08:b9:cc:58:06:ff: f1:2d:9e:11:58:7d:25:62:b2:ed:f3:b3:7f:e9:ef:08:c8:47: 0e:83:26:a0:e7:44:da:ce:b0:5b:96:90:f5:c4:fb:53:fc:78: 54:eb:67:9a:8f:61:3e:a6:b2:cb:90:e1:1a:69:01:b0:e8:4c: 7a:c3:d8:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUwOTA1MDQ1NzU0WhcNMjUwOTEyMDQ1NzU0WjAYMRYwFAYD VQQDEw02OGJhNmRkMi1mMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXJdvPEE4XxDT3vd9fF8BlForWjOgIgnG+Ayy3xjStJn6mjxXepyFoKSR6JD MuYaR8gnx4XnEvQW8bZYCgcClK9den+eDR3TfPlqhgaovhJwuzj6t5XYWcn/rs0I R1MCHcXxCsGjH43JokOpwm0EIW/+gK8W3OxZ58oekYNVubu7U8AYGSZ2hP6CNUuW 3s3iPpBbVknc5za8H+sVWP2S4cZRNBuZ1MIslIkEw3MXfYVFFlieER3sljQSrpV5 vJ1tX1Tbcoftd9KDvpQD/tFJ1FDnaHqWzL3jQOtjWWZiaEuLrz1AHKhPB9D+uAtQ afmpLjIr4MtZ1E/G6GMRFp1D8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNWgYVv l2O/jmtQUSexZejMUZRpMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dXvwrAHMu2wBkW5JFVB4xPovkGzd+JVPbHnxpBhtS8Ogwk6RU0lF y7UxRzqH3dKUFaLWPXUQYAzVK3UM22HlS4DX0SMz2VI6wuSf+gAeu2mEDQuYHm1l lBNgT2UHgN19sPiMl7xwu3XYmAJhog5wl//fLr60NiMYrgaA1ug3IBpE0hEYp6JU lYWuDDdUMQ0qhCnQlWPNIFnultsXmQG2sDPkhepKd3ox9fCWab9Pg1VbMB22kPUf TUNGaxItUHEIucxYBv/xLZ4RWH0lYrLt87N/6e8IyEcOgyag50TazrBblpD1xPtT /HhU62eaj2E+prLLkOEaaQGw6Ex6w9go -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:18 2025 by rpki-client