$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: JhPXqxFZaQxriZdmGlnqtfO+E3x8BBFPpxvHtc6c4Bg= Subject key identifier: 15:62:73:30:97:86:9C:1D:3E:8D:82:56:B5:A7:69:0B:4A:33:9A:F7 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F5D Signing time: Fri 22 Aug 2025 17:42:19 +0000 Manifest this update: Fri 22 Aug 2025 17:42:18 +0000 Manifest next update: Fri 29 Aug 2025 17:42:18 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: ZQ2Ot+Vgbu/cSn0pzH+hak2ZnsJ/wQ9fvUHoupG4RBU=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Aug 22 17:42:18 2025 GMT Not After : Aug 29 17:42:18 2025 GMT Subject: CN=68a8abfa-0150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:09:bb:2a:6c:7d:cf:7d:a5:52:25:a9:3e: 53:24:47:34:7a:dd:50:85:48:e8:8c:ff:0f:16:98: 8d:bf:7c:40:24:4b:bf:76:b7:2c:30:f4:c0:c9:16: a0:72:21:61:51:c9:de:5e:ae:3d:34:5b:0f:74:1c: cd:fa:19:9c:ed:7d:f7:e2:58:55:0f:7f:79:f4:22: 0d:b2:4a:c1:5b:64:0e:14:0e:d6:9c:b6:f0:8c:c7: 95:c8:81:5b:19:5a:9c:1f:73:49:07:37:9c:1b:b6: 00:04:6f:dc:13:54:7d:c6:db:68:8c:76:88:cb:20: aa:b1:34:3a:54:21:92:89:75:c9:87:d6:24:14:ab: b0:2c:39:28:3b:7c:77:50:88:66:0d:f7:06:88:0c: d6:0a:54:40:38:b9:dc:b3:6b:1d:1b:ce:ab:54:fb: 05:b2:63:3b:a4:7d:e3:63:f2:3f:21:dd:db:07:64: 66:da:36:2a:6c:9a:0b:e7:44:32:59:0e:79:3c:67: 43:c2:0c:50:56:20:16:47:f0:63:24:0f:e8:de:fd: 15:cb:24:16:67:dd:1a:de:30:81:16:17:3b:ce:91: 8d:73:cd:08:39:3c:22:80:82:22:e0:81:1d:ed:d3: d3:e0:46:bf:c8:9b:02:d8:47:6e:2c:04:9d:bc:cb: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:73:30:97:86:9C:1D:3E:8D:82:56:B5:A7:69:0B:4A:33:9A:F7 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:f1:d3:03:f3:f0:30:3a:a2:11:26:23:49:66:53:c2:8d: 4b:f0:8b:de:14:9f:3f:ce:cf:79:3f:0b:87:c4:df:60:2f:eb: 24:4c:83:16:49:b4:1c:35:d5:42:cb:58:49:db:e4:a2:8a:54: 2f:ca:44:18:f7:15:49:5a:65:3d:91:33:7a:82:f9:cf:ec:bc: ff:48:0f:0b:a7:df:c0:39:8b:d8:d6:6c:a7:03:84:18:e7:2a: 4a:f2:6d:21:6d:3a:7d:83:9a:07:34:b0:40:ea:08:62:39:55: ab:e3:da:76:8e:a1:87:63:36:64:87:6d:a8:c1:7f:12:ba:78: 44:3e:84:e4:71:35:ea:3f:54:00:51:06:96:b0:64:b0:e0:32: 87:b7:89:ce:59:00:e6:fa:e1:d7:33:54:7b:8a:1f:ce:32:58: 04:77:dd:f1:e4:67:61:0a:0d:57:2d:b4:9d:04:44:a9:a5:ed: 91:4e:ec:60:b2:91:fe:ec:82:e0:d1:43:40:50:a6:ca:37:8e: bd:c2:01:74:f7:48:05:f2:7a:59:95:f7:16:d9:6f:25:77:90: ed:7a:26:4d:b4:e3:51:6b:b6:82:e1:0a:11:cf:c1:cc:43:3a: 25:a3:11:a4:10:00:6a:ea:b3:08:8d:98:88:8d:03:31:23:d6: b5:71:19:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwODIyMTc0MjE4WhcNMjUwODI5MTc0MjE4WjAYMRYwFAYD VQQDEw02OGE4YWJmYS0wMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFgJuypsfc99pVIlqT5TJEc0et1QhUjojP8PFpiNv3xAJEu/drcsMPTAyRag ciFhUcneXq49NFsPdBzN+hmc7X334lhVD3959CINskrBW2QOFA7WnLbwjMeVyIFb GVqcH3NJBzecG7YABG/cE1R9xttojHaIyyCqsTQ6VCGSiXXJh9YkFKuwLDkoO3x3 UIhmDfcGiAzWClRAOLncs2sdG86rVPsFsmM7pH3jY/I/Id3bB2Rm2jYqbJoL50Qy WQ55PGdDwgxQViAWR/BjJA/o3v0VyyQWZ90a3jCBFhc7zpGNc80IOTwigIIi4IEd 7dPT4Ea/yJsC2EduLASdvMuEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBViczCX hpwdPo2CVrWnaQtKM5r3MB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZ/HTA/PwMDqiESYjSWZTwo1L8IveFJ8/zs95PwuHxN9gL+skTIMW SbQcNdVCy1hJ2+SiilQvykQY9xVJWmU9kTN6gvnP7Lz/SA8Lp9/AOYvY1mynA4QY 5ypK8m0hbTp9g5oHNLBA6ghiOVWr49p2jqGHYzZkh22owX8SunhEPoTkcTXqP1QA UQaWsGSw4DKHt4nOWQDm+uHXM1R7ih/OMlgEd93x5GdhCg1XLbSdBESppe2RTuxg spH+7ILg0UNAUKbKN469wgF090gF8npZlfcW2W8ld5DteiZNtONRa7aC4QoRz8HM QzoloxGkEABq6rMIjZiIjQMxI9a1cRkn -----END CERTIFICATE-----Generated at Sat Aug 23 17:01:10 2025 by rpki-client