$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: IzHyKNYUzQ9HUa4s5KwBac5ChbWRh7NK8NFrfQZq7wA= Subject key identifier: 7A:B4:B0:37:72:04:27:3D:37:15:52:FB:DF:7B:1C:9B:AA:E1:2D:5D Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B00 Signing time: Fri 22 Aug 2025 19:30:14 +0000 Manifest this update: Fri 22 Aug 2025 19:30:13 +0000 Manifest next update: Fri 29 Aug 2025 19:30:13 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: /KtrpKLO5miUR3eiUVJzlMzY/wPhFoAGEc5g4qoNWR4=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: 00EOF2SkNQY+g2uOrsmFG2EVfhOEMG8CZO8LKFYTUdc=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: dEm7YFdNWANhJUfzjg+ynaragglAI/Eb9fLpOHhvlS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Aug 22 19:30:13 2025 GMT Not After : Aug 29 19:30:13 2025 GMT Subject: CN=68a8c545-6f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:5b:e5:2c:35:72:80:a8:9d:20:fa:01:ef: 91:72:26:b1:2d:06:6d:39:4e:ce:2f:57:3f:32:87: 01:bb:3b:94:02:93:21:af:4e:23:ae:11:97:b8:f4: 5f:29:61:e7:03:5c:eb:64:53:bf:63:d9:1d:44:ce: f3:5d:23:be:34:a8:bf:36:e5:37:37:5b:eb:a1:e4: 02:c4:fe:82:f4:bc:8d:25:9f:d4:97:ca:74:41:34: cd:88:d5:12:7c:b4:c9:74:b6:42:c2:00:bc:9a:19: d4:3e:fc:af:ea:35:6a:4d:0e:35:2d:eb:06:44:6f: fe:5a:15:22:a1:0e:62:c8:b1:f6:51:43:8e:7b:85: 68:e6:0b:c3:3c:be:0b:20:f9:e8:68:7a:fb:57:ba: 9f:6a:ce:42:fe:89:8f:64:4f:97:8f:e4:2e:12:49: d6:b7:01:21:b1:c3:05:de:23:22:08:cf:0e:21:7d: 20:61:20:f1:eb:bd:2a:d1:c3:74:3d:48:ea:96:15: 58:74:8e:26:b8:1d:45:1a:9b:27:7b:88:ec:bc:cd: db:2d:c2:af:38:74:c2:59:7b:2b:02:94:4e:df:4f: 35:fd:78:4d:8c:09:11:48:f6:23:5f:05:58:da:91: 7d:15:7a:65:2a:f4:b8:97:d6:e9:c5:7c:50:6d:19: ba:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:B0:37:72:04:27:3D:37:15:52:FB:DF:7B:1C:9B:AA:E1:2D:5D X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:27:49:25:f0:18:a4:d0:9b:96:a7:52:a1:83:b3:29:3d:10: f7:fe:f7:b4:21:ae:d2:84:da:68:bb:56:d5:31:4e:3e:92:40: 3b:68:8b:4c:8d:81:cf:33:9a:c1:75:df:3f:64:46:fc:9a:44: 10:85:86:a7:43:1a:e7:e0:51:c8:bb:cc:0a:23:90:e8:1a:6c: de:4e:8f:db:b1:78:ff:39:1e:c4:57:f3:dc:b4:7a:2c:18:96: ed:1e:36:75:79:87:32:6c:6b:78:28:31:58:1f:56:08:58:cb: 0e:45:8b:2d:2f:46:b5:56:66:c8:e6:af:c8:b6:f2:bb:25:1b: 78:40:e2:14:25:4e:1d:80:9b:4f:46:38:1b:24:c8:0f:17:4b: 36:ea:04:36:53:df:a2:56:b3:5a:37:f9:c8:91:cc:2b:c5:57: 26:93:92:52:26:c2:4d:28:b8:7c:e9:74:c2:65:96:c2:94:06: 13:9c:2c:b0:9e:df:7a:ad:6b:85:b8:3d:75:83:a0:21:75:11: 85:a2:ff:d6:1d:df:06:4a:9d:a4:9a:54:e3:a6:b4:bd:74:6f: 07:a4:7f:31:e1:7a:87:22:3f:93:9b:94:60:81:52:fb:25:88: 93:38:cf:15:c3:2e:83:4f:ef:04:05:15:dc:7e:e8:92:76:9a: f5:6f:e3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwODIyMTkzMDEzWhcNMjUwODI5MTkzMDEzWjAYMRYwFAYD VQQDEw02OGE4YzU0NS02ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XJb5Sw1coConSD6Ae+RciaxLQZtOU7OL1c/MocBuzuUApMhr04jrhGXuPRf KWHnA1zrZFO/Y9kdRM7zXSO+NKi/NuU3N1vroeQCxP6C9LyNJZ/Ul8p0QTTNiNUS fLTJdLZCwgC8mhnUPvyv6jVqTQ41LesGRG/+WhUioQ5iyLH2UUOOe4Vo5gvDPL4L IPnoaHr7V7qfas5C/omPZE+Xj+QuEknWtwEhscMF3iMiCM8OIX0gYSDx670q0cN0 PUjqlhVYdI4muB1FGpsne4jsvM3bLcKvOHTCWXsrApRO3081/XhNjAkRSPYjXwVY 2pF9FXplKvS4l9bpxXxQbRm6XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq0sDdy BCc9NxVS+997HJuq4S1dMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+J0kl8Bik0JuWp1Khg7MpPRD3/ve0Ia7ShNpou1bVMU4+kkA7aItM jYHPM5rBdd8/ZEb8mkQQhYanQxrn4FHIu8wKI5DoGmzeTo/bsXj/OR7EV/PctHos GJbtHjZ1eYcybGt4KDFYH1YIWMsORYstL0a1VmbI5q/ItvK7JRt4QOIUJU4dgJtP RjgbJMgPF0s26gQ2U9+iVrNaN/nIkcwrxVcmk5JSJsJNKLh86XTCZZbClAYTnCyw nt96rWuFuD11g6AhdRGFov/WHd8GSp2kmlTjprS9dG8HpH8x4XqHIj+Tm5RggVL7 JYiTOM8Vwy6DT+8EBRXcfuiSdpr1b+Py -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:51 2025 by rpki-client