$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: LyhsIeHNRoMhRQP38dpby+5F3cDjxbcpLuFAmNkgqvE= Subject key identifier: 83:CF:88:D1:2A:0B:7D:42:65:45:DD:5C:93:34:E4:3C:C8:4E:23:A6 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BF0 Signing time: Fri 22 Aug 2025 18:55:44 +0000 Manifest this update: Fri 22 Aug 2025 18:55:43 +0000 Manifest next update: Fri 29 Aug 2025 18:55:43 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: ZltfbGaUgM9gA0L2CRJJF8RVgsquau+RbqHEexd+ok4=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Aug 22 18:55:43 2025 GMT Not After : Aug 29 18:55:43 2025 GMT Subject: CN=68a8bd2f-09f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:50:c5:66:6b:67:9d:40:44:5f:dc:62:cf: 0a:f7:da:1b:33:70:49:99:1d:ae:a1:4d:37:90:25: 40:fc:eb:3c:4f:fc:ea:b0:be:24:e0:84:ac:83:24: 6d:44:53:c2:44:6d:63:d4:1c:12:79:af:92:38:d6: 4a:74:83:9d:da:39:29:43:b7:52:59:89:e0:95:8a: 00:f7:27:be:e2:e3:09:53:52:88:25:06:83:14:39: c4:cc:34:a1:69:a7:be:f3:de:c5:8a:3c:80:23:be: 26:92:79:ea:7b:f5:d4:14:5f:13:be:0d:60:da:9c: 55:5b:d6:f3:c3:fc:62:cc:45:58:3d:2a:3f:3e:c2: 9a:31:69:7a:6e:0d:3b:d5:0f:02:fb:10:ca:3b:78: 56:9a:14:02:08:65:41:1d:e1:ba:54:84:fa:64:78: cf:b7:bf:a6:af:04:20:ad:a1:19:1b:3d:ed:2f:d1: 18:e7:41:06:cc:8c:31:b5:32:78:a2:3b:ef:c8:60: b6:38:b1:94:34:e1:d5:fc:82:d5:ba:af:ef:cf:40: 1e:02:c7:81:b2:ce:11:c7:89:ec:a6:54:90:ae:39: 52:03:b1:4b:95:fa:25:e9:09:e3:8f:e9:12:c5:c1: 40:1c:c2:f7:1e:73:30:31:65:73:d4:43:ed:e1:c2: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:88:D1:2A:0B:7D:42:65:45:DD:5C:93:34:E4:3C:C8:4E:23:A6 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b2:9b:eb:f0:30:1f:97:b7:9b:c5:b7:53:da:04:86:3d:35: e4:b0:e8:3f:f6:b2:3a:6c:b6:e7:8c:fa:bd:eb:7d:3a:03:92: d2:74:b8:8f:26:d3:a4:d4:57:58:cb:6a:14:89:e0:5f:19:cc: 68:59:f3:d9:20:14:cc:80:f0:45:dc:32:8c:5f:90:22:d9:57: d0:3c:0a:2a:86:b8:3c:1a:b3:0b:3c:a3:d6:c4:95:48:44:50: c5:3a:b3:a8:f0:8f:db:24:b5:37:3d:9c:6d:fa:d1:29:5a:c2: 4a:45:51:33:25:5a:d4:67:10:80:ef:2a:bb:d9:95:15:20:28: 8f:84:90:3d:98:9c:e9:fe:64:d7:ae:49:51:b1:59:76:bd:cf: d5:c9:55:72:5d:31:b7:cb:56:61:88:c8:c1:45:8b:60:2f:cc: d9:5d:36:45:09:01:7e:75:da:87:cd:49:2f:16:c9:ef:81:87: 44:fc:d0:32:c8:4f:e7:85:31:40:07:cd:d3:c9:c1:4f:0b:56: 46:e2:ce:67:b8:b8:d3:d2:76:f0:47:a9:80:4b:c3:d6:d6:46: 8d:d9:72:70:99:57:91:88:2c:a4:1a:80:c8:2c:5a:44:6b:f6: ca:ec:5c:84:26:42:f4:03:52:0b:86:08:32:43:36:d6:27:30: e3:ab:36:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwODIyMTg1NTQzWhcNMjUwODI5MTg1NTQzWjAYMRYwFAYD VQQDEw02OGE4YmQyZi0wOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVdQxWZrZ51ARF/cYs8K99obM3BJmR2uoU03kCVA/Os8T/zqsL4k4ISsgyRt RFPCRG1j1BwSea+SONZKdIOd2jkpQ7dSWYnglYoA9ye+4uMJU1KIJQaDFDnEzDSh aae+897FijyAI74mknnqe/XUFF8Tvg1g2pxVW9bzw/xizEVYPSo/PsKaMWl6bg07 1Q8C+xDKO3hWmhQCCGVBHeG6VIT6ZHjPt7+mrwQgraEZGz3tL9EY50EGzIwxtTJ4 ojvvyGC2OLGUNOHV/ILVuq/vz0AeAseBss4Rx4nsplSQrjlSA7FLlfol6Qnjj+kS xcFAHML3HnMwMWVz1EPt4cKxZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPPiNEq C31CZUXdXJM05DzITiOmMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCespvr8DAfl7ebxbdT2gSGPTXksOg/9rI6bLbnjPq96306A5LSdLiP JtOk1FdYy2oUieBfGcxoWfPZIBTMgPBF3DKMX5Ai2VfQPAoqhrg8GrMLPKPWxJVI RFDFOrOo8I/bJLU3PZxt+tEpWsJKRVEzJVrUZxCA7yq72ZUVICiPhJA9mJzp/mTX rklRsVl2vc/VyVVyXTG3y1ZhiMjBRYtgL8zZXTZFCQF+ddqHzUkvFsnvgYdE/NAy yE/nhTFAB83TycFPC1ZG4s5nuLjT0nbwR6mAS8PW1kaN2XJwmVeRiCykGoDILFpE a/bK7FyEJkL0A1ILhggyQzbWJzDjqzaw -----END CERTIFICATE-----Generated at Sat Aug 23 16:21:55 2025 by rpki-client