$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: qb540oePGkU6iRfJDT+jlmz2xLXacsqKW5VypZx0lYo= Subject key identifier: A1:A5:BD:AC:6E:11:D6:61:5D:BD:49:A3:CD:59:A3:25:F0:C2:1B:27 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 118D Signing time: Sat 06 Sep 2025 17:19:44 +0000 Manifest this update: Sat 06 Sep 2025 17:19:44 +0000 Manifest next update: Sat 13 Sep 2025 17:19:44 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: oZ2//22E+iCJrXmcGvAHzq0+tPDc6fV0v7vOSBXvWV8=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4500 (0x1194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Sep 6 17:19:44 2025 GMT Not After : Sep 13 17:19:44 2025 GMT Subject: CN=68bc6d30-7ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:a1:8e:46:e3:df:5b:a5:55:de:3d:1f:28: 39:11:ab:a9:2d:52:63:a3:61:d3:0c:0a:fc:b8:5f: 89:82:91:1e:82:e6:fc:8f:ff:c9:8d:90:17:ff:f9: de:64:54:82:75:d8:82:9f:fd:6d:fe:9b:57:cc:d6: de:fe:fd:59:0c:f6:60:4b:0f:62:df:3e:c4:04:92: 99:af:6d:c2:05:7d:21:f6:5b:e4:82:ec:25:9f:5e: b1:fa:8c:ff:a7:8d:39:ef:af:6d:73:2f:ed:25:1a: 63:38:90:15:d2:c9:9e:cf:c4:73:6a:5c:ee:25:59: a2:3c:2d:d9:e8:94:71:d8:63:0c:e3:0c:11:a1:97: cd:f0:9b:ec:a9:43:af:ef:17:ce:2f:03:41:c6:58: 6a:86:8f:2a:a9:68:c8:9b:d3:e7:c2:34:2e:5c:3a: c5:81:17:e5:b6:de:d9:d2:7d:32:51:0b:9d:dc:a5: b1:ba:5c:77:35:79:37:8f:22:b4:d7:15:dc:28:23: 2c:03:3c:e2:3e:bb:03:69:a0:52:23:35:20:8a:17: fc:a5:7c:20:c4:48:cf:93:1e:1b:e6:dd:30:f5:fd: 6d:d8:42:34:1e:c5:8c:6f:9e:a5:2d:2b:d8:61:97: 8a:41:fc:a2:3e:94:2b:d2:a2:59:86:bf:7c:7d:ac: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A5:BD:AC:6E:11:D6:61:5D:BD:49:A3:CD:59:A3:25:F0:C2:1B:27 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d1:9f:bf:8d:1c:d3:1d:9a:58:ce:f8:c0:8c:a2:3e:1b:3e: 9e:f5:e9:b2:66:39:88:a4:46:79:0c:cc:1a:ef:cb:6f:05:02: ce:ea:8c:5c:d8:6e:87:2a:f1:80:02:4a:13:f1:fd:93:3c:ba: 22:7b:98:61:ba:f1:7a:de:c1:ff:9e:23:d8:92:16:04:73:cc: d0:26:59:80:60:0e:3a:9b:68:2e:dd:4a:9e:25:bc:da:35:2a: 8b:f6:b0:4d:a6:24:2c:fa:d3:9b:bd:9f:0a:d1:2d:b8:2f:f8: d8:7a:20:c4:46:1c:8e:14:a8:f2:d7:e9:05:df:db:6f:10:63: 1e:b3:2d:c7:30:da:0f:c6:39:d1:fc:ae:60:1a:77:c2:f4:dd: 8b:26:f8:14:f8:c7:6f:e8:36:ad:26:bf:3f:84:ed:c2:f6:00: f7:51:b5:d0:29:06:b9:42:fd:7b:38:46:61:37:e7:79:96:99: 0d:77:b5:61:50:05:79:c5:5c:fe:d5:82:f2:73:67:80:87:0a: c4:d8:91:fa:72:11:63:e9:09:11:dd:01:e2:de:0d:e8:0b:51: 6b:18:19:61:10:e1:ff:7e:92:c8:4b:48:60:80:f9:43:3f:19: c9:d6:fa:8b:a3:92:47:34:33:3e:73:93:79:99:90:7b:48:ab: 6d:5e:17:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwOTA2MTcxOTQ0WhcNMjUwOTEzMTcxOTQ0WjAYMRYwFAYD VQQDEw02OGJjNmQzMC03ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPGhjkbj31ulVd49Hyg5EaupLVJjo2HTDAr8uF+JgpEegub8j//JjZAX//ne ZFSCddiCn/1t/ptXzNbe/v1ZDPZgSw9i3z7EBJKZr23CBX0h9lvkguwln16x+oz/ p405769tcy/tJRpjOJAV0smez8RzalzuJVmiPC3Z6JRx2GMM4wwRoZfN8JvsqUOv 7xfOLwNBxlhqho8qqWjIm9PnwjQuXDrFgRfltt7Z0n0yUQud3KWxulx3NXk3jyK0 1xXcKCMsAzziPrsDaaBSIzUgihf8pXwgxEjPkx4b5t0w9f1t2EI0HsWMb56lLSvY YZeKQfyiPpQr0qJZhr98fazZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGlvaxu EdZhXb1Jo81ZoyXwwhsnMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn0Z+/jRzTHZpYzvjAjKI+Gz6e9emyZjmIpEZ5DMwa78tvBQLO6oxc 2G6HKvGAAkoT8f2TPLoie5hhuvF63sH/niPYkhYEc8zQJlmAYA46m2gu3UqeJbza NSqL9rBNpiQs+tObvZ8K0S24L/jYeiDERhyOFKjy1+kF39tvEGMesy3HMNoPxjnR /K5gGnfC9N2LJvgU+Mdv6DatJr8/hO3C9gD3UbXQKQa5Qv17OEZhN+d5lpkNd7Vh UAV5xVz+1YLyc2eAhwrE2JH6chFj6QkR3QHi3g3oC1FrGBlhEOH/fpLIS0hggPlD PxnJ1vqLo5JHNDM+c5N5mZB7SKttXhdC -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:13 2025 by rpki-client