$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: QHL77IaYSdvo603sw3bODMwjfqftFq1n5q+9XrRJj7c= Subject key identifier: 0B:8F:17:EB:14:ED:D0:77:C7:C6:0D:03:74:8F:11:6D:D4:95:92:77 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 13C6 Signing time: Fri 22 Aug 2025 19:41:49 +0000 Manifest this update: Fri 22 Aug 2025 19:41:48 +0000 Manifest next update: Fri 29 Aug 2025 19:41:48 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: Kc1WvRqaNMruwZIEkwj5S1WXj0W6xLWaH1kPgGSaOXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Aug 22 19:41:48 2025 GMT Not After : Aug 29 19:41:48 2025 GMT Subject: CN=68a8c7fd-8a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:56:73:95:6d:6c:f3:88:7e:82:e0:98:19: 08:da:c0:9e:04:2c:c4:32:b0:4a:3d:8b:eb:73:32: f2:60:1c:01:a0:ea:26:12:88:c6:5f:3e:c1:8b:24: e9:7e:84:56:53:f2:50:61:10:e2:62:4f:39:d2:e7: 25:08:72:6c:10:50:b0:c7:9c:01:71:8e:a4:56:bd: f6:bc:c0:6a:8b:4f:7d:91:1a:a6:49:2d:a9:89:f4: 12:b5:d5:7e:0e:50:dc:39:52:fb:59:70:1d:ca:0d: c0:54:62:13:0a:24:61:03:b5:ac:9b:f0:1b:31:3c: 9c:64:34:12:b2:d1:59:48:d5:db:d1:fc:4b:37:32: 93:7e:17:aa:ba:25:ba:de:06:78:68:4e:19:37:92: 6c:ea:38:27:b7:f6:33:22:41:74:7d:98:49:6c:a8: 44:69:c8:bc:81:c0:ff:28:f1:e2:1b:be:4f:83:76: 01:1f:42:10:9b:e0:a8:97:bf:58:74:ff:5c:56:d4: 8a:bb:b0:f4:a8:57:09:1a:83:55:ed:a2:a5:52:82: f9:87:a3:eb:61:37:94:0e:cf:35:be:d1:a9:7f:f4: c2:79:29:f9:d0:4f:17:dc:62:85:8a:43:8b:8d:8d: 6a:99:0c:17:a7:c4:67:19:95:86:51:16:71:6f:e5: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:17:EB:14:ED:D0:77:C7:C6:0D:03:74:8F:11:6D:D4:95:92:77 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:64:37:7f:65:c4:e0:72:47:0f:aa:91:6c:17:76:99:68: 89:8e:fb:e5:8e:dc:d1:8b:ef:95:02:2e:04:fd:3c:26:e6:03: 48:e0:17:ea:22:f8:73:55:d9:93:c7:c2:5e:94:31:81:bf:c7: 2f:e1:6c:b5:2c:86:51:5d:cf:ef:0c:a2:10:1f:cd:17:01:00: bb:55:d6:72:a5:8d:03:16:26:e0:ed:95:84:57:2c:97:34:74: 6d:79:ff:4b:06:9e:fe:45:cf:ae:d2:73:7a:a5:21:45:b2:40: 41:66:d6:cc:47:dd:c5:a5:84:7c:81:fe:f1:f1:0f:20:cc:06: 46:21:71:83:e3:75:ab:a5:b1:fc:bb:3c:2b:3a:ff:44:48:1c: a7:6c:7a:0f:e9:ed:5a:07:70:10:92:8e:58:3e:04:2a:c9:52: 5c:eb:06:7c:60:02:61:17:eb:aa:e8:a3:7f:75:97:a5:7a:07: 69:57:a5:25:fb:5c:3f:92:8c:b5:fa:d3:2d:42:36:84:0a:e5: e8:c5:ae:d7:23:3e:41:ad:2f:89:78:a7:af:33:b6:9a:af:83: e9:d3:94:88:1e:6c:e7:a1:67:dd:17:5d:81:f0:7c:5e:72:59: 3e:bf:cb:56:d4:18:cb:3f:f6:d9:d8:3c:cc:fb:1b:d7:b3:ad: a0:cd:4b:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwODIyMTk0MTQ4WhcNMjUwODI5MTk0MTQ4WjAYMRYwFAYD VQQDEw02OGE4YzdmZC04YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7FWc5VtbPOIfoLgmBkI2sCeBCzEMrBKPYvrczLyYBwBoOomEojGXz7BiyTp foRWU/JQYRDiYk850uclCHJsEFCwx5wBcY6kVr32vMBqi099kRqmSS2pifQStdV+ DlDcOVL7WXAdyg3AVGITCiRhA7Wsm/AbMTycZDQSstFZSNXb0fxLNzKTfhequiW6 3gZ4aE4ZN5Js6jgnt/YzIkF0fZhJbKhEaci8gcD/KPHiG75Pg3YBH0IQm+Col79Y dP9cVtSKu7D0qFcJGoNV7aKlUoL5h6PrYTeUDs81vtGpf/TCeSn50E8X3GKFikOL jY1qmQwXp8RnGZWGURZxb+UuCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuPF+sU 7dB3x8YNA3SPEW3UlZJ3MB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3qGQ3f2XE4HJHD6qRbBd2mWiJjvvljtzRi++VAi4E/Twm5gNI4Bfq IvhzVdmTx8JelDGBv8cv4Wy1LIZRXc/vDKIQH80XAQC7VdZypY0DFibg7ZWEVyyX NHRtef9LBp7+Rc+u0nN6pSFFskBBZtbMR93FpYR8gf7x8Q8gzAZGIXGD43WrpbH8 uzwrOv9ESBynbHoP6e1aB3AQko5YPgQqyVJc6wZ8YAJhF+uq6KN/dZelegdpV6Ul +1w/koy1+tMtQjaECuXoxa7XIz5BrS+JeKevM7aar4Pp05SIHmznoWfdF12B8Hxe clk+v8tW1BjLP/bZ2DzM+xvXs62gzUuy -----END CERTIFICATE-----Generated at Sun Aug 24 00:18:56 2025 by rpki-client