$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: R3PwK8GQlGYlrChTRsGDmDNun9A7PfZKJGzcL2WKCdo= Subject key identifier: BE:82:5B:85:A3:EA:A5:2A:AA:4A:BE:B1:0C:C7:1D:4F:16:4B:1C:52 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3910 Signing time: Fri 22 Aug 2025 14:36:34 +0000 Manifest this update: Fri 22 Aug 2025 14:36:34 +0000 Manifest next update: Fri 29 Aug 2025 14:36:34 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 6sIjjk+LJFqGXwIxSm2kp24O+ppi37jn9p2sd6scAWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Aug 22 14:36:34 2025 GMT Not After : Aug 29 14:36:34 2025 GMT Subject: CN=68a88072-2001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:b1:d3:7c:1a:55:83:9a:c9:e5:8e:ad:d8: f9:23:9c:48:07:d6:ed:c5:da:25:97:78:23:0d:88: d1:af:87:77:df:ec:96:8d:4e:3c:da:82:78:3f:93: a8:1a:6b:68:91:8f:cd:cc:4e:f8:bf:0e:5d:e3:f8: d8:83:a8:ac:bb:2c:47:1a:a4:51:e8:40:31:32:46: 4e:97:9c:60:b2:4e:e7:56:d7:2d:b7:c6:47:7e:5a: 1c:fd:be:05:a2:1d:04:b9:db:d2:6c:2f:bb:5e:a8: 97:9d:33:c1:20:3e:c3:d3:aa:8a:d9:df:d1:90:e4: f7:9c:4e:8a:9a:a6:cb:98:51:ff:7c:bf:10:8e:96: 1c:15:b7:de:4f:d0:59:a4:86:ce:d7:f2:90:65:20: 92:af:90:71:ad:fe:87:62:08:d1:e4:7d:8e:10:31: 08:88:ec:07:0e:b3:fc:d4:49:4c:a9:f9:26:14:30: a3:b3:c3:40:42:e2:6b:2d:61:fa:dd:97:15:ae:83: 0c:f1:87:40:9f:f2:55:27:39:0e:93:7e:4c:aa:d4: 83:c6:93:d1:f0:cb:a9:f0:25:9f:18:28:60:00:09: f3:83:07:78:29:79:00:c9:d4:01:6a:f8:28:8f:24: 51:60:24:8b:ae:60:7b:30:25:47:14:7e:6d:c5:ec: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:82:5B:85:A3:EA:A5:2A:AA:4A:BE:B1:0C:C7:1D:4F:16:4B:1C:52 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:af:da:98:0e:6a:08:24:67:64:21:82:72:a6:69:9c:a8: 54:77:da:6a:9e:a7:7a:d3:01:8d:c6:cc:d1:34:e5:fe:7e:6d: f4:2b:e1:b9:ac:9d:ee:33:12:2c:42:1e:d5:b0:85:e8:db:17: 18:c4:b5:ae:75:ba:34:1d:35:c3:f2:18:64:41:81:1d:30:35: b1:df:68:85:65:7c:21:8c:cb:a0:c3:aa:d8:18:1b:a9:37:71: 5e:3c:a8:f3:a5:38:01:a6:3b:8f:50:12:69:ef:26:4e:a6:10: 18:98:9e:e7:1c:fa:97:26:50:a9:81:aa:a3:2c:50:35:9b:bc: 5c:42:24:f9:a8:eb:d1:68:bf:0b:af:c2:e7:54:16:0e:5f:09: 7b:c6:0b:7e:33:61:11:fb:37:83:ea:e5:d6:57:55:34:5b:f1: e5:b0:c2:84:78:9a:dc:39:3c:15:f6:69:57:13:b0:76:01:61: 05:9f:a3:2f:66:ca:a2:1a:c0:74:f1:83:e6:03:61:3c:36:34: 85:63:a5:08:cd:65:2e:84:15:7d:76:a6:00:85:91:a7:6a:2d: 77:47:a9:53:4d:e3:f5:85:e5:72:4b:20:0c:b6:a4:15:c1:e4: ce:39:69:62:a6:33:3a:57:f7:7e:f1:d8:06:e8:47:4b:2d:87: 78:c7:4e:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwODIyMTQzNjM0WhcNMjUwODI5MTQzNjM0WjAYMRYwFAYD VQQDEw02OGE4ODA3Mi0yMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZmx03waVYOayeWOrdj5I5xIB9btxdoll3gjDYjRr4d33+yWjU482oJ4P5Oo GmtokY/NzE74vw5d4/jYg6isuyxHGqRR6EAxMkZOl5xgsk7nVtctt8ZHfloc/b4F oh0EudvSbC+7XqiXnTPBID7D06qK2d/RkOT3nE6KmqbLmFH/fL8QjpYcFbfeT9BZ pIbO1/KQZSCSr5Bxrf6HYgjR5H2OEDEIiOwHDrP81ElMqfkmFDCjs8NAQuJrLWH6 3ZcVroMM8YdAn/JVJzkOk35MqtSDxpPR8Mup8CWfGChgAAnzgwd4KXkAydQBavgo jyRRYCSLrmB7MCVHFH5txeypmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6CW4Wj 6qUqqkq+sQzHHU8WSxxSMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyLq/amA5qCCRnZCGCcqZpnKhUd9pqnqd60wGNxszRNOX+fm30K+G5 rJ3uMxIsQh7VsIXo2xcYxLWudbo0HTXD8hhkQYEdMDWx32iFZXwhjMugw6rYGBup N3FePKjzpTgBpjuPUBJp7yZOphAYmJ7nHPqXJlCpgaqjLFA1m7xcQiT5qOvRaL8L r8LnVBYOXwl7xgt+M2ER+zeD6uXWV1U0W/HlsMKEeJrcOTwV9mlXE7B2AWEFn6Mv ZsqiGsB08YPmA2E8NjSFY6UIzWUuhBV9dqYAhZGnai13R6lTTeP1heVySyAMtqQV weTOOWlipjM6V/d+8dgG6EdLLYd4x07N -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:10 2025 by rpki-client