$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: Wu/TStH/m3qMf1BfnKO0uDE5pVcRMSOPz7W3zcpahOU= Subject key identifier: 0C:86:43:4C:71:EF:AA:82:3E:40:22:0C:76:E1:CF:5F:E5:C9:3A:11 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:15:16 +0000 Manifest this update: Sat 23 Aug 2025 08:15:16 +0000 Manifest next update: Sat 30 Aug 2025 08:15:16 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: YN13aEFWmVxWMm+5d6L8GNSXUNc8HFwZx40/65kDZ1k=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Aug 23 08:15:16 2025 GMT Not After : Aug 30 08:15:16 2025 GMT Subject: CN=68a97894-515b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:36:86:e1:78:af:4c:88:a2:98:c5:df:21: d0:c6:ca:7d:f0:e5:6b:8d:0c:46:f9:d2:91:39:b3: 07:28:b9:92:63:d4:d3:9c:f1:0c:b2:40:98:2f:96: 56:68:0a:86:13:56:f1:29:22:a5:af:5d:d0:cb:45: 98:04:14:c1:07:17:06:ab:c5:b9:ca:38:73:97:93: 1e:7e:a7:e3:47:ae:64:d9:a3:79:d0:3d:e0:07:69: 2f:ca:fe:90:78:1c:b6:f3:f4:4f:02:96:4b:aa:0c: 53:5f:ab:24:62:34:73:2d:94:98:c8:52:9b:fd:29: b5:91:47:1e:16:66:5b:4a:d6:00:71:1b:8e:36:0e: e6:f4:c0:5b:98:e4:3e:82:57:90:66:f3:15:90:e3: ba:09:83:be:6c:a7:50:f4:c6:12:2b:84:bf:02:09: 6d:7f:28:4b:c0:d3:74:33:e0:06:a5:3a:a7:32:bc: d3:1a:cf:71:c4:1f:e7:81:f4:88:16:63:83:97:8d: 53:95:5b:e1:1a:6d:7d:9d:15:08:44:a0:5e:15:18: 34:37:5d:3f:57:0d:d9:34:5b:74:f5:85:d9:7c:1b: 6d:08:26:b7:03:97:7d:3a:ee:5c:91:48:91:a9:f9: dd:55:48:23:9a:0e:88:72:ce:6d:06:56:68:b3:17: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:86:43:4C:71:EF:AA:82:3E:40:22:0C:76:E1:CF:5F:E5:C9:3A:11 X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4a:91:f1:b5:32:b8:dd:ef:ba:08:88:89:28:a2:fd:e0:56: 4f:0b:54:c9:b7:72:4a:cb:1e:50:41:ec:f8:3e:8c:55:b9:6e: 78:b2:6d:06:72:d6:e2:96:93:b6:ea:e7:97:25:6d:68:1d:0d: 84:ca:9c:0c:44:1c:d9:d6:95:58:dc:72:5b:20:10:f8:3e:f7: 2d:b9:a7:d5:d1:6b:7f:b1:11:08:18:c4:ea:30:0d:d8:46:07: 66:11:47:96:8d:42:3d:57:3d:8c:78:51:89:c8:d3:6a:b9:5b: 48:5c:e6:af:91:ac:0d:ee:c2:27:a6:a6:81:3b:22:0f:84:a9: 7c:f6:17:13:3a:c0:c5:c1:a4:cf:ec:6a:a3:ac:d5:64:82:de: 7e:a0:d1:1c:2e:54:d9:ee:e3:83:63:ae:cb:7b:b8:91:b7:9e: 48:7e:84:dd:e1:89:3d:8e:38:22:9c:11:11:24:be:3b:61:96: b8:e4:2e:31:50:f8:16:e1:49:31:4e:5f:7b:4a:53:99:4e:7d: ec:81:52:e1:82:53:42:a7:90:ef:b9:d0:31:20:33:ca:4c:66: c1:68:10:94:8b:f1:ef:8d:5a:45:f0:cd:ea:6c:9c:18:27:e2: bd:2d:60:5b:85:de:b9:03:cc:b2:20:07:14:35:bd:21:d8:f1: 43:34:c0:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTA4MjMwODE1MTZaFw0yNTA4MzAwODE1MTZaMBgxFjAUBgNV BAMTDTY4YTk3ODk0LTUxNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaETaG4XivTIiimMXfIdDGyn3w5WuNDEb50pE5swcouZJj1NOc8QyyQJgvllZo CoYTVvEpIqWvXdDLRZgEFMEHFwarxbnKOHOXkx5+p+NHrmTZo3nQPeAHaS/K/pB4 HLbz9E8ClkuqDFNfqyRiNHMtlJjIUpv9KbWRRx4WZltK1gBxG442Dub0wFuY5D6C V5Bm8xWQ47oJg75sp1D0xhIrhL8CCW1/KEvA03Qz4AalOqcyvNMaz3HEH+eB9IgW Y4OXjVOVW+EabX2dFQhEoF4VGDQ3XT9XDdk0W3T1hdl8G20IJrcDl3067lyRSJGp +d1VSCOaDohyzm0GVmizF/ozAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDIZDTHHv qoI+QCIMduHPX+XJOhEwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA1KkfG1Mrjd77oIiIkoov3gVk8LVMm3ckrLHlBB7Pg+jFW5bniybQZy 1uKWk7bq55clbWgdDYTKnAxEHNnWlVjcclsgEPg+9y25p9XRa3+xEQgYxOowDdhG B2YRR5aNQj1XPYx4UYnI02q5W0hc5q+RrA3uwiempoE7Ig+EqXz2FxM6wMXBpM/s aqOs1WSC3n6g0RwuVNnu44Njrst7uJG3nkh+hN3hiT2OOCKcEREkvjthlrjkLjFQ +BbhSTFOX3tKU5lOfeyBUuGCU0KnkO+50DEgM8pMZsFoEJSL8e+NWkXwzepsnBgn 4r0tYFuF3rkDzLIgBxQ1vSHY8UM0wNU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:19 2025 by rpki-client