$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: +ij4PyrCgWsSdrHKLFT3RySGy/ljiOwxUR22xTXfJQs= Subject key identifier: 28:37:88:D5:01:26:ED:E7:C0:BA:2A:1F:89:4A:CE:64:FF:27:F7:5D Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 046D Signing time: Sat 23 Aug 2025 00:24:59 +0000 Manifest this update: Sat 23 Aug 2025 00:24:59 +0000 Manifest next update: Sat 30 Aug 2025 00:24:58 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: 5F9qALyzPfKfqtrNb9/dhe8pfyrXzdNuW481qbh8H0E=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Aug 23 00:24:59 2025 GMT Not After : Aug 30 00:24:58 2025 GMT Subject: CN=68a90a5b-7f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:2c:c8:c6:db:5f:75:9d:4c:d7:79:59:6e: f8:16:ef:7a:d8:f1:1e:38:c4:46:08:c7:84:91:5f: 5b:9b:c5:f7:e1:01:6e:3a:5a:6d:46:0c:da:94:ec: 5e:b0:c0:a8:ef:79:27:03:fd:23:cf:f9:1d:31:f5: eb:fc:31:dd:50:6f:c2:98:eb:97:e5:28:6d:e6:a4: 26:7d:26:56:ae:98:c9:c2:16:56:6d:56:70:22:04: 9a:82:cc:71:ef:6d:67:a5:65:3a:fb:17:8b:cc:87: 38:51:e4:9e:a3:94:25:58:e4:e0:cc:f6:49:78:d0: 05:d6:94:85:b8:1d:94:5d:2d:d8:89:a7:6b:80:8b: 70:f1:ef:c6:2f:7c:4a:2d:3a:00:39:fb:07:e5:fd: 4c:43:3d:dc:23:a7:2c:f1:f5:21:10:10:22:b9:7b: 13:8f:d2:7a:4b:74:77:83:33:ff:2c:d4:c8:5b:f8: 16:c1:d7:47:4d:8c:40:b8:40:e3:91:18:3d:53:eb: 53:36:99:3d:48:27:2f:05:82:6c:cb:c5:9b:50:ef: c8:db:91:cb:c1:f2:2f:af:6c:0b:3d:6e:c7:2b:8e: 24:a4:39:40:49:12:68:59:f4:bc:ca:a9:6b:51:76: 76:a2:75:46:f4:cc:5b:59:0e:92:9e:6b:28:1e:ef: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:88:D5:01:26:ED:E7:C0:BA:2A:1F:89:4A:CE:64:FF:27:F7:5D X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a4:16:26:9c:52:9a:f9:64:a0:a4:3f:17:55:01:e4:45:0d: 46:77:db:87:42:c2:8c:76:fd:1f:20:4b:9e:a5:97:4f:89:f2: a0:16:ee:9a:34:9c:0e:e4:bd:ee:f2:aa:c2:44:37:c6:c8:f1: 77:72:2e:d8:1d:13:a9:14:73:0f:96:2d:99:83:a8:f1:14:13: ba:ec:de:9f:33:4b:52:36:fc:b4:49:d9:f3:bf:7c:17:6b:e5: 29:36:2e:fc:cc:97:bb:4a:60:3a:cd:96:48:c5:3d:15:96:22: 98:22:29:57:97:82:64:0d:ba:98:ee:60:28:b6:f2:37:40:16: 70:05:e1:f3:78:0b:f6:5e:83:b3:dc:fa:fa:04:a8:70:0b:a7: 0f:ac:6a:f8:b4:21:2a:c3:0c:a7:45:56:80:26:fd:30:6e:70: 6f:97:bf:ca:2d:7d:47:27:1c:20:e9:ca:12:b5:aa:8f:f6:cc: 66:7f:5c:7a:be:a7:08:1f:e2:19:2b:51:1c:b0:9f:1c:cc:53: bf:a8:2d:0c:cd:47:59:95:d1:25:cc:07:4f:e3:71:2d:61:33: e3:4d:60:0c:26:6e:df:85:43:92:84:7a:cc:49:1a:92:a0:31: 95:ae:17:35:2f:b0:e3:30:f4:c2:5c:b4:0a:5a:b4:e0:33:49: 8a:16:bf:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwODIzMDAyNDU5WhcNMjUwODMwMDAyNDU4WjAYMRYwFAYD VQQDEw02OGE5MGE1Yi03ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlUsyMbbX3WdTNd5WW74Fu962PEeOMRGCMeEkV9bm8X34QFuOlptRgzalOxe sMCo73knA/0jz/kdMfXr/DHdUG/CmOuX5Sht5qQmfSZWrpjJwhZWbVZwIgSagsxx 721npWU6+xeLzIc4UeSeo5QlWOTgzPZJeNAF1pSFuB2UXS3YiadrgItw8e/GL3xK LToAOfsH5f1MQz3cI6cs8fUhEBAiuXsTj9J6S3R3gzP/LNTIW/gWwddHTYxAuEDj kRg9U+tTNpk9SCcvBYJsy8WbUO/I25HLwfIvr2wLPW7HK44kpDlASRJoWfS8yqlr UXZ2onVG9MxbWQ6SnmsoHu8BlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg3iNUB Ju3nwLoqH4lKzmT/J/ddMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqpBYmnFKa+WSgpD8XVQHkRQ1Gd9uHQsKMdv0fIEuepZdPifKgFu6a NJwO5L3u8qrCRDfGyPF3ci7YHROpFHMPli2Zg6jxFBO67N6fM0tSNvy0Sdnzv3wX a+UpNi78zJe7SmA6zZZIxT0VliKYIilXl4JkDbqY7mAotvI3QBZwBeHzeAv2XoOz 3Pr6BKhwC6cPrGr4tCEqwwynRVaAJv0wbnBvl7/KLX1HJxwg6coStaqP9sxmf1x6 vqcIH+IZK1EcsJ8czFO/qC0MzUdZldElzAdP43EtYTPjTWAMJm7fhUOShHrMSRqS oDGVrhc1L7DjMPTCXLQKWrTgM0mKFr+G -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:53 2025 by rpki-client