$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: JevyI+q2882FxXOMMgd4QnFhaQ65Ep7IBStfsLlpgJc= Subject key identifier: 16:C6:2B:55:C0:D2:1B:74:C5:B5:36:FB:AB:D1:AF:7B:26:4A:B6:E6 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:52:20 +0000 Manifest this update: Sat 23 Aug 2025 05:52:19 +0000 Manifest next update: Sat 30 Aug 2025 05:52:19 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: /ohGI91vU6YIO37wj+x3olRbmvJiMo2Q7xWVFfrwh1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Aug 23 05:52:19 2025 GMT Not After : Aug 30 05:52:19 2025 GMT Subject: CN=68a95713-c3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:87:73:25:4b:81:d3:64:67:d8:32:40:14: 22:1f:97:48:93:2c:81:1b:9b:53:f9:46:ba:5a:30: f8:24:83:ef:1b:dc:40:7f:01:7b:1c:3e:4f:0e:58: 90:95:eb:88:85:40:0c:37:fc:90:83:49:9b:eb:17: 1d:cd:1b:54:96:db:af:fa:40:17:ee:6f:f1:89:e6: 52:e6:aa:7e:2a:a2:31:9b:a8:09:d0:d4:95:9b:3e: 8e:77:1b:94:81:41:d3:62:a3:51:44:da:09:3d:ac: f9:03:b6:68:37:c1:8d:2e:d6:a0:c1:bc:81:25:a1: 2d:0f:c3:13:e6:30:8b:ae:b2:ae:2b:57:74:2a:bb: e3:cf:99:73:c2:5d:55:9d:e9:75:a3:8f:54:29:00: e0:a6:3b:b6:c7:7e:d7:00:eb:18:f2:23:c9:6b:61: 90:9f:da:47:dd:ae:a5:bd:74:f9:2b:f1:75:a6:8c: 57:45:4b:4e:ec:aa:b2:0d:0d:2e:c7:7f:3e:ef:03: f3:8b:e3:54:b9:53:ab:9e:76:1c:d1:93:b7:8a:9b: db:6f:f1:ab:09:85:28:4b:84:cb:6f:cc:1f:ff:00: c5:13:fb:72:9c:3e:2f:94:87:c0:4e:92:21:1c:8a: 29:45:0f:58:cc:3c:8d:44:a3:5d:fd:0c:8d:ea:ad: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C6:2B:55:C0:D2:1B:74:C5:B5:36:FB:AB:D1:AF:7B:26:4A:B6:E6 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a1:b0:23:c6:0a:83:b1:bf:ba:d7:13:8d:37:93:e5:ce:ef: 5e:49:d1:88:08:c9:ac:f0:26:09:50:89:1d:c7:4d:2b:d8:20: d2:1c:f2:03:5d:33:96:da:da:3e:6d:d2:ff:9d:15:b1:df:07: 30:27:e7:7f:84:2a:ef:59:5b:64:04:d4:17:31:e2:c5:42:ca: 95:8b:66:7a:8d:90:d7:55:3b:5a:21:50:a6:9d:67:29:f6:a5: e3:ef:97:d0:79:6e:df:3f:3b:c3:03:e6:35:5d:f5:6b:e2:72: 3a:00:13:1e:70:1f:3a:ec:fa:cf:67:24:7e:e2:21:11:83:40: f3:03:cf:7c:66:d0:d2:87:0f:9f:06:7e:f1:40:43:92:67:ae: 9e:ff:9d:69:b2:46:25:aa:c6:08:38:57:4d:41:6f:28:a1:73: c2:d8:16:e4:ff:65:64:73:5a:1b:72:8c:7c:72:bc:2c:3f:50: 7f:b6:2e:fe:d6:90:22:88:8e:8b:c3:95:bb:48:4f:a0:5f:b5: d6:25:a0:11:b6:45:ff:31:e7:64:54:85:ce:b0:33:a2:98:bd: 1c:69:e6:8d:6f:c8:59:62:6d:b9:12:07:bc:76:08:d9:bc:20: 01:84:4a:e4:51:5e:2f:6e:d7:8c:27:2c:cd:39:42:c9:b8:03: 8a:b0:b8:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwODIzMDU1MjE5WhcNMjUwODMwMDU1MjE5WjAYMRYwFAYD VQQDEw02OGE5NTcxMy1jM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSqHcyVLgdNkZ9gyQBQiH5dIkyyBG5tT+Ua6WjD4JIPvG9xAfwF7HD5PDliQ leuIhUAMN/yQg0mb6xcdzRtUltuv+kAX7m/xieZS5qp+KqIxm6gJ0NSVmz6OdxuU gUHTYqNRRNoJPaz5A7ZoN8GNLtagwbyBJaEtD8MT5jCLrrKuK1d0Krvjz5lzwl1V nel1o49UKQDgpju2x37XAOsY8iPJa2GQn9pH3a6lvXT5K/F1poxXRUtO7KqyDQ0u x38+7wPzi+NUuVOrnnYc0ZO3ipvbb/GrCYUoS4TLb8wf/wDFE/tynD4vlIfATpIh HIopRQ9YzDyNRKNd/QyN6q0zGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbGK1XA 0ht0xbU2+6vRr3smSrbmMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6obAjxgqDsb+61xONN5Plzu9eSdGICMms8CYJUIkdx00r2CDSHPID XTOW2to+bdL/nRWx3wcwJ+d/hCrvWVtkBNQXMeLFQsqVi2Z6jZDXVTtaIVCmnWcp 9qXj75fQeW7fPzvDA+Y1XfVr4nI6ABMecB867PrPZyR+4iERg0DzA898ZtDShw+f Bn7xQEOSZ66e/51pskYlqsYIOFdNQW8ooXPC2Bbk/2Vkc1obcox8crwsP1B/ti7+ 1pAiiI6Lw5W7SE+gX7XWJaARtkX/MedkVIXOsDOimL0caeaNb8hZYm25Ege8dgjZ vCABhErkUV4vbteMJyzNOULJuAOKsLiW -----END CERTIFICATE-----Generated at Sun Aug 24 02:32:21 2025 by rpki-client