$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: ai2mcYxXbQbVRS7wDqVLZhatOP0uHpqQjPdBS0S2zAE= Subject key identifier: A0:C5:66:BC:1B:BA:0C:B6:93:65:21:76:BA:D2:F6:95:15:4C:EC:C6 Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 060D Signing time: Fri 22 Aug 2025 23:02:36 +0000 Manifest this update: Fri 22 Aug 2025 23:02:35 +0000 Manifest next update: Fri 29 Aug 2025 23:02:35 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: i4/X9VcEhizeJ9rNP5LEYVYjO3uNXQqm587mTkTXBxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: Aug 22 23:02:35 2025 GMT Not After : Aug 29 23:02:35 2025 GMT Subject: CN=68a8f70c-e02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:47:95:60:ea:1a:c7:f7:13:5c:10:52:84: 01:e3:b6:08:44:6a:fb:3d:8b:7d:55:f3:fd:9e:bf: 3e:02:1e:0e:47:c9:8a:b4:4d:ef:1e:50:2a:86:b3: c5:ac:5c:1c:88:31:66:f6:2e:7c:6b:30:5e:74:13: 5e:03:a0:96:4f:98:d9:c3:5c:0a:93:e5:b7:db:6f: d0:e5:0d:0e:2d:4a:33:4e:3b:4a:72:a6:c6:ea:34: 49:10:ee:a1:04:16:4a:a5:95:f9:09:cb:18:74:2a: 87:15:a8:01:a4:82:12:37:03:42:66:14:d7:c4:5b: 0f:db:78:28:df:bf:42:8c:59:87:c6:cb:24:1d:84: 68:ee:ec:5c:9d:8d:26:8e:f1:83:8d:2d:7f:81:ca: dd:5d:3b:06:08:e8:8a:56:05:f5:92:91:c9:4c:73: 2e:dc:62:19:96:52:25:07:c0:b4:bf:80:75:6a:fa: 5d:b0:57:5a:be:7a:78:c7:bb:f7:43:c5:85:1b:d0: 52:68:1d:e2:3d:62:e7:61:ff:17:48:0c:53:1f:4b: fa:0e:d6:a9:1c:3d:aa:b6:28:21:b0:45:9a:44:4b: 63:5d:01:bb:a4:ca:80:53:90:28:e7:db:fc:9f:5e: 58:72:bb:33:b8:86:ae:72:c0:d5:69:b5:71:c3:c1: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C5:66:BC:1B:BA:0C:B6:93:65:21:76:BA:D2:F6:95:15:4C:EC:C6 X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a3:93:4e:7b:03:cd:83:c3:dc:52:de:6a:a1:77:00:10:02: bd:0c:0e:f6:86:2e:92:91:4f:a3:6d:a3:88:32:22:0b:8e:99: 92:ac:d7:70:4c:f5:30:b9:7d:dc:8e:d1:b0:2f:92:6d:3a:39: 57:26:55:42:2b:55:6c:2b:0c:6f:21:36:aa:6b:42:fe:76:6f: fe:ce:58:68:ef:ad:33:0a:d4:8c:b7:bc:82:08:9b:0b:23:e3: ed:44:78:b6:8c:1a:21:2e:56:53:5b:c4:aa:a6:41:e3:59:8f: 5e:f2:dd:1e:11:dd:11:31:0a:e3:2e:07:3b:64:20:27:79:00: 46:28:18:45:0e:55:0e:1f:6d:62:c2:d2:31:34:1f:29:51:3c: 7b:25:25:eb:34:4e:7a:6d:a8:25:ed:74:42:93:6e:11:6c:dc: 33:ef:8f:2a:a9:82:7f:75:c0:5d:e7:fd:28:50:04:27:7a:56: 21:5d:01:17:ba:84:61:38:99:49:37:05:74:d2:01:a4:c2:2f: f9:ba:bb:4c:52:ec:3e:81:cb:ec:8d:45:88:df:6c:04:df:6d: e4:a9:29:5e:a8:31:89:91:f8:74:f8:b2:36:c9:2a:a9:38:e9: 5b:3e:1c:17:92:86:6e:1c:e5:80:ce:37:a1:f8:fd:58:65:d2: d0:0b:8e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjUwODIyMjMwMjM1WhcNMjUwODI5MjMwMjM1WjAYMRYwFAYD VQQDEw02OGE4ZjcwYy1lMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwxHlWDqGsf3E1wQUoQB47YIRGr7PYt9VfP9nr8+Ah4OR8mKtE3vHlAqhrPF rFwciDFm9i58azBedBNeA6CWT5jZw1wKk+W322/Q5Q0OLUozTjtKcqbG6jRJEO6h BBZKpZX5CcsYdCqHFagBpIISNwNCZhTXxFsP23go379CjFmHxsskHYRo7uxcnY0m jvGDjS1/gcrdXTsGCOiKVgX1kpHJTHMu3GIZllIlB8C0v4B1avpdsFdavnp4x7v3 Q8WFG9BSaB3iPWLnYf8XSAxTH0v6DtapHD2qtighsEWaREtjXQG7pMqAU5Ao59v8 n15YcrszuIaucsDVabVxw8HpKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDFZrwb ugy2k2UhdrrS9pUVTOzGMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXo5NOewPNg8PcUt5qoXcAEAK9DA72hi6SkU+jbaOIMiILjpmSrNdw TPUwuX3cjtGwL5JtOjlXJlVCK1VsKwxvITaqa0L+dm/+zlho760zCtSMt7yCCJsL I+PtRHi2jBohLlZTW8SqpkHjWY9e8t0eEd0RMQrjLgc7ZCAneQBGKBhFDlUOH21i wtIxNB8pUTx7JSXrNE56bagl7XRCk24RbNwz748qqYJ/dcBd5/0oUAQnelYhXQEX uoRhOJlJNwV00gGkwi/5urtMUuw+gcvsjUWI32wE323kqSleqDGJkfh0+LI2ySqp OOlbPhwXkoZuHOWAzjeh+P1YZdLQC47M -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:28 2025 by rpki-client