$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: wi1TEdGekxaxgoK5reUKIS7P5XPYTuzo+G7KHEPZFLc= Subject key identifier: F1:8E:9B:FF:1A:2C:3B:0B:21:18:A9:85:60:4F:5F:59:A9:E7:03:42 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C5C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C4F Signing time: Fri 22 Aug 2025 17:41:29 +0000 Manifest this update: Fri 22 Aug 2025 17:41:29 +0000 Manifest next update: Fri 29 Aug 2025 17:41:29 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: EHlPzsXxhaV7AMN0KnGnIcbssSy5wBY/rMxAMh7gwDA=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3164 (0xc5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Aug 22 17:41:29 2025 GMT Not After : Aug 29 17:41:29 2025 GMT Subject: CN=68a8abc9-963d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:50:45:ca:ae:f7:10:e4:72:9b:02:1c:e7: 0c:9e:c7:28:59:db:af:ed:b2:b1:d9:c2:cf:db:9e: a0:61:e7:5c:9a:02:bc:73:f1:0e:5c:d0:d7:d8:34: 42:94:be:c8:e5:c9:15:3a:d9:5d:a2:b3:d1:ec:4b: db:8d:bb:82:f6:db:38:14:3a:b8:56:77:e7:bb:ac: 91:81:4c:e7:f3:94:60:fd:04:f3:77:22:d7:84:12: a4:c5:d7:fb:52:d0:bf:7f:57:3c:52:db:d6:55:a4: 39:4b:58:39:06:3c:84:ee:5d:75:a7:2b:34:f5:12: 53:a7:07:f6:ac:10:9f:54:c2:15:14:6e:1d:c5:3b: 39:9f:d6:8d:80:40:c6:9b:d9:49:b7:14:b9:81:16: df:7f:17:92:b7:59:d5:5f:1d:4e:6d:b1:78:56:bb: ee:e6:53:1a:65:a0:b2:d0:33:cc:8d:87:14:29:60: 89:45:58:af:9f:53:a6:eb:5e:bf:84:52:5a:9e:14: 4e:c3:2c:27:8b:87:6e:d2:09:65:21:1c:b5:9f:b5: 41:58:35:79:34:d8:0e:0f:ba:3c:8a:ae:d1:78:8b: 17:7d:ac:3a:04:e1:b2:7f:e0:16:6e:08:94:b4:bb: ea:62:d5:24:28:c4:45:fd:91:12:4a:3f:06:a0:3e: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:9B:FF:1A:2C:3B:0B:21:18:A9:85:60:4F:5F:59:A9:E7:03:42 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:5c:4f:56:8d:d3:6c:ab:d3:51:33:e6:03:df:bc:b1:c8:86: 00:da:31:c2:4f:bf:d2:cd:37:76:69:16:74:f7:b0:c4:ff:ec: 35:11:9a:85:b4:b6:24:36:4a:92:27:f6:8e:f4:84:d6:b2:63: ab:42:6a:26:c9:1e:12:7d:4c:f1:3b:9f:6e:66:b4:14:eb:33: 42:d1:5c:0c:01:64:77:47:b1:83:36:78:f1:53:1f:3f:f5:67: e1:f5:2c:17:e1:24:18:76:a9:12:12:7f:a9:43:0f:0d:40:8f: c7:0f:b2:24:a9:5a:a3:78:f6:a1:46:7f:b8:cd:63:63:b1:8e: 43:7b:a6:2d:5b:2e:2f:84:6a:5b:a0:d5:af:ec:4b:12:15:fe: a0:b7:a5:9e:bc:d7:5f:0c:36:d1:a2:12:08:00:0b:ed:e0:47: 9e:d8:d5:d4:6b:b7:3a:a7:d3:ae:ec:1d:c6:43:96:df:7e:04: 39:14:b1:31:ef:8d:4d:b9:95:ac:ee:45:93:62:b7:c0:53:7a: c2:b0:9f:84:0b:3c:da:76:c2:62:e3:f2:51:60:92:d3:8d:8e: 07:22:b3:45:67:ac:4e:e7:53:69:79:bf:98:7a:b2:c6:3a:2c: 6b:12:4a:50:47:8c:e0:20:b9:07:c1:10:64:6d:18:aa:3b:95: 1c:56:d6:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwODIyMTc0MTI5WhcNMjUwODI5MTc0MTI5WjAYMRYwFAYD VQQDEw02OGE4YWJjOS05NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXJQRcqu9xDkcpsCHOcMnscoWduv7bKx2cLP256gYedcmgK8c/EOXNDX2DRC lL7I5ckVOtldorPR7EvbjbuC9ts4FDq4Vnfnu6yRgUzn85Rg/QTzdyLXhBKkxdf7 UtC/f1c8UtvWVaQ5S1g5BjyE7l11pys09RJTpwf2rBCfVMIVFG4dxTs5n9aNgEDG m9lJtxS5gRbffxeSt1nVXx1ObbF4Vrvu5lMaZaCy0DPMjYcUKWCJRVivn1Om616/ hFJanhROwywni4du0gllIRy1n7VBWDV5NNgOD7o8iq7ReIsXfaw6BOGyf+AWbgiU tLvqYtUkKMRF/ZESSj8GoD5Z8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGOm/8a LDsLIRiphWBPX1mp5wNCMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBXE9WjdNsq9NRM+YD37yxyIYA2jHCT7/SzTd2aRZ097DE/+w1EZqF tLYkNkqSJ/aO9ITWsmOrQmomyR4SfUzxO59uZrQU6zNC0VwMAWR3R7GDNnjxUx8/ 9Wfh9SwX4SQYdqkSEn+pQw8NQI/HD7IkqVqjePahRn+4zWNjsY5De6YtWy4vhGpb oNWv7EsSFf6gt6WevNdfDDbRohIIAAvt4Eee2NXUa7c6p9Ou7B3GQ5bffgQ5FLEx 741NuZWs7kWTYrfAU3rCsJ+ECzzadsJi4/JRYJLTjY4HIrNFZ6xO51Npeb+YerLG OixrEkpQR4zgILkHwRBkbRiqO5UcVtYS -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:42 2025 by rpki-client