$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft File: FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft (raw, json) Hash identifier: Fhejo0GpMNf4Wqzue54P/5RTFyQSIAkrL8KzC39eJV0= Subject key identifier: 53:0C:BD:38:1A:C4:7A:24:7F:51:07:48:C2:74:73:9E:85:8D:66:06 Authority key identifier: 15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 Certificate issuer: /CN=A91187C1/serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft Manifest number: 20 Signing time: Sat 23 Aug 2025 08:07:25 +0000 Manifest this update: Sat 23 Aug 2025 08:07:24 +0000 Manifest next update: Sat 30 Aug 2025 08:07:24 +0000 Files and hashes: 1: FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl (hash: e9LVo9jkRYnoogr1CYaDog7TnJG2Lv/x0de2G03EtKQ=) 2: 5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa (hash: MMnEHOZL+3B6H53csw4VsH9Mp6n0HLOocUR5xuPHf5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Validity Not Before: Aug 23 08:07:24 2025 GMT Not After : Aug 30 08:07:24 2025 GMT Subject: CN=68a976bd-bb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:c8:0e:e8:b1:c1:3c:0c:41:28:3b:bd:35: 2c:0f:f9:ba:fd:12:4b:21:dd:77:21:fe:c4:b2:38: 92:f6:bf:92:c1:4f:cd:73:47:1a:e2:53:5d:16:55: 5f:eb:31:c9:9b:7e:0e:c3:d7:bd:43:ad:ae:60:d8: 05:68:3a:17:d5:df:c2:77:f2:44:17:6a:41:b8:36: 96:2b:a9:36:a9:07:ba:43:44:f4:f0:29:e1:84:d1: 79:8a:3c:c2:39:ac:36:98:ba:99:60:96:d5:78:4e: 3a:a7:b1:40:0d:4a:c0:b4:70:c1:c2:9e:89:2c:21: 3b:5b:70:c7:fb:e0:85:e9:aa:20:d9:63:33:f8:56: ad:71:35:70:72:46:f4:e7:cb:f1:3b:44:5a:93:c3: a2:3b:f1:a6:b2:d4:24:64:93:7a:4d:00:09:66:f9: 62:f4:e5:ca:b3:6d:33:92:a9:af:9e:f5:a8:38:d2: 43:bd:f5:3c:3e:23:07:04:39:2d:65:31:5b:28:07: d3:9c:b3:56:0b:c9:c9:bd:56:5e:bb:af:65:05:f2: 44:2f:bf:07:4a:c9:ec:85:b2:4c:14:1d:af:90:9d: 39:c3:e2:7a:d4:67:d7:b7:9d:21:5c:d0:65:13:26: 5f:08:38:61:8a:56:bd:ab:b1:06:a8:7c:b6:d3:74: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0C:BD:38:1A:C4:7A:24:7F:51:07:48:C2:74:73:9E:85:8D:66:06 X509v3 Authority Key Identifier: keyid:15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3a:d9:00:5b:1c:c1:de:d8:03:e3:ba:8a:41:b6:88:6e:d7: 01:6d:e4:b6:b8:d9:3c:82:34:21:33:ab:ec:87:59:1f:54:6d: 42:f9:59:b9:2a:a9:89:e1:72:19:13:d6:e9:f8:56:f0:a5:ec: 68:c7:b6:df:45:95:7a:e1:09:fc:3e:31:fc:1e:8e:41:e5:a1: dc:a4:26:2e:fc:e5:26:45:36:55:ec:03:94:43:5d:77:8c:46: 27:f8:cf:89:74:78:a3:0c:2f:b5:0e:04:2a:7e:58:35:4b:5c: 90:75:cf:6f:12:a2:a0:53:01:77:6a:06:cb:e0:9a:df:77:6a: c9:e1:00:f3:fa:e8:73:a5:df:d5:e8:d6:b3:23:61:2e:cc:a7: 94:3c:2f:80:b1:9d:cd:bd:6e:a8:59:55:35:02:1c:33:35:1a: 8d:ed:07:c6:a7:0b:a8:18:17:72:52:5e:be:9d:c4:dd:92:e9: 4f:c2:93:37:e9:2d:d9:1c:ed:ed:25:f5:0b:97:4e:b2:0f:35: f2:fb:04:9b:29:b0:8b:80:ac:10:b4:94:b8:96:75:06:08:1e: 1a:93:06:2b:76:12:3e:77:cd:3e:4e:76:70:25:0b:51:4d:16: 29:f1:a8:66:46:35:e4:0a:72:76:60:df:df:ee:64:d7:85:dc: 5c:2e:f9:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODdDMTExMC8GA1UEBRMoMTU1QUQ2MjgxRTA1NTBDQjRGREQ2MUQyRjExNzY5QzI2 ODRBNzAwMTAeFw0yNTA4MjMwODA3MjRaFw0yNTA4MzAwODA3MjRaMBgxFjAUBgNV BAMTDTY4YTk3NmJkLWJiNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh6cgO6LHBPAxBKDu9NSwP+br9Eksh3Xch/sSyOJL2v5LBT81zRxriU10WVV/r Mcmbfg7D171Dra5g2AVoOhfV38J38kQXakG4NpYrqTapB7pDRPTwKeGE0XmKPMI5 rDaYuplgltV4TjqnsUANSsC0cMHCnoksITtbcMf74IXpqiDZYzP4Vq1xNXByRvTn y/E7RFqTw6I78aay1CRkk3pNAAlm+WL05cqzbTOSqa+e9ag40kO99Tw+IwcEOS1l MVsoB9Ocs1YLycm9Vl67r2UF8kQvvwdKyeyFskwUHa+QnTnD4nrUZ9e3nSFc0GUT Jl8IOGGKVr2rsQaofLbTdHWzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUwy9OBrE eiR/UQdIwnRznoWNZgYwHwYDVR0jBBgwFoAUFVrWKB4FUMtP3WHS8RdpwmhKcAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0MxLzJGNjkyMzNDNTcw QTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10UDNXSFM4UmRwd21oS2NB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlZyV0tCNEZVTXRQM1dIUzhSZHB3bWhLY0FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 N0MxLzJGNjkyMzNDNTcwQTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10 UDNXSFM4UmRwd21oS2NBRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALY62QBbHMHe2APjuopBtohu1wFt5La42TyCNCEzq+yHWR9UbUL5Wbkq qYnhchkT1un4VvCl7GjHtt9FlXrhCfw+MfwejkHlodykJi785SZFNlXsA5RDXXeM Rif4z4l0eKMML7UOBCp+WDVLXJB1z28SoqBTAXdqBsvgmt93asnhAPP66HOl39Xo 1rMjYS7Mp5Q8L4Cxnc29bqhZVTUCHDM1Go3tB8anC6gYF3JSXr6dxN2S6U/Ckzfp Ldkc7e0l9QuXTrIPNfL7BJspsIuArBC0lLiWdQYIHhqTBit2Ej53zT5OdnAlC1FN FinxqGZGNeQKcnZg39/uZNeF3Fwu+Z8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:49 2025 by rpki-client