$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: jyL/1ebWfXazz5I8iGk2oFKBT+VeJUv8i1DnMTm5c8k= Subject key identifier: 50:99:46:54:A8:FD:6A:7F:06:45:6E:28:8D:C5:13:10:9F:E8:B1:BE Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 0881 Signing time: Fri 22 Aug 2025 20:58:21 +0000 Manifest this update: Fri 22 Aug 2025 20:58:20 +0000 Manifest next update: Fri 29 Aug 2025 20:58:20 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: RPteWDYW8bJpaFE98ASk3245DTKfaATjk2LX8+4XJDQ=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: 669892085D5D11F0AAE8C847C4F9AE02.roa (hash: YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=) 6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Aug 22 20:58:20 2025 GMT Not After : Aug 29 20:58:20 2025 GMT Subject: CN=68a8d9ed-224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:6d:5d:dd:6e:8c:7b:a6:cb:e5:5b:de:ca: d8:40:e3:84:72:e8:cd:87:d7:96:fb:86:89:9a:3f: ad:57:7a:0f:07:5b:d5:f4:e1:f6:f8:45:73:a4:ea: 54:f6:04:e8:56:36:39:0f:be:4c:8d:fe:98:a5:56: d3:a6:b1:1b:e6:4b:94:14:13:d8:04:90:56:27:7c: 7e:ab:6e:ea:b0:4f:a8:b5:89:2a:2c:7c:8f:ab:6b: b5:bf:e7:d0:3a:da:5b:7f:06:0c:eb:e4:53:36:39: 7b:88:e5:28:7d:bc:04:04:c6:84:ed:58:96:ab:11: b6:ad:f6:92:15:c8:36:cc:5d:f6:d2:9e:5d:0d:5b: d5:9f:03:9e:09:74:42:71:df:e0:54:97:4f:93:80: 70:81:0b:dc:29:4f:e7:e3:d5:41:8f:f1:ea:8e:2c: f8:b2:ae:9e:89:dc:44:1e:7d:5d:6f:56:a2:0d:65: 68:9f:aa:ab:80:b1:72:9d:29:d5:d9:f8:b7:85:5e: c2:e3:b5:17:f8:18:15:bf:5c:ba:b3:df:dd:15:0e: 0a:26:d5:b1:49:2d:a4:e5:a0:e5:24:6c:56:db:a2: 94:6d:40:48:f9:75:5f:dc:ba:ef:70:82:50:e0:d0: e6:c2:db:80:b8:3b:59:34:11:5b:d5:2c:3d:9d:40: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:99:46:54:A8:FD:6A:7F:06:45:6E:28:8D:C5:13:10:9F:E8:B1:BE X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:8c:6d:6a:7b:1e:c7:7e:37:03:c9:a0:f9:46:0c:6b:f8: f8:0c:9f:4e:96:ca:bd:11:5a:90:8b:a0:95:cf:82:05:61:90: b5:d8:b1:59:c6:d7:96:98:48:9e:52:9b:28:64:8f:5d:2f:31: cd:59:e8:a0:a2:64:26:26:15:08:b7:02:36:d5:de:44:c1:df: 7f:50:ad:83:5f:2a:80:0d:10:fc:39:31:90:8d:29:ff:45:2b: 8a:a6:33:d3:3b:2f:49:96:e9:bc:38:ae:2c:20:07:df:4f:79: 95:4d:03:77:3e:c9:af:aa:f8:fa:1c:5a:e6:b3:b1:f6:aa:bb: bb:b4:45:f3:00:cb:f5:7f:de:5d:d9:65:b0:55:14:e8:74:12: 48:53:38:bc:ba:bf:88:18:2d:5a:47:58:15:a8:10:c4:b9:de: 08:89:9d:0e:ff:85:be:48:63:da:46:a3:dd:a4:b4:77:33:54: 15:9d:0c:7d:54:e2:27:58:9f:cb:fe:85:bd:0b:be:f8:ff:af: 2d:6f:ed:13:7d:9d:10:0f:d8:25:e9:02:f5:5e:63:dd:74:7f: 45:78:e5:1a:d4:ec:06:23:d0:b9:2d:0d:fa:73:ed:ca:58:29: 77:1d:72:88:4d:0f:83:ce:86:d7:68:65:04:6a:d5:83:25:16: 3c:20:63:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUwODIyMjA1ODIwWhcNMjUwODI5MjA1ODIwWjAYMRYwFAYD VQQDEw02OGE4ZDllZC0yMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzptXd1ujHumy+Vb3srYQOOEcujNh9eW+4aJmj+tV3oPB1vV9OH2+EVzpOpU 9gToVjY5D75Mjf6YpVbTprEb5kuUFBPYBJBWJ3x+q27qsE+otYkqLHyPq2u1v+fQ OtpbfwYM6+RTNjl7iOUofbwEBMaE7ViWqxG2rfaSFcg2zF320p5dDVvVnwOeCXRC cd/gVJdPk4BwgQvcKU/n49VBj/Hqjiz4sq6eidxEHn1db1aiDWVon6qrgLFynSnV 2fi3hV7C47UX+BgVv1y6s9/dFQ4KJtWxSS2k5aDlJGxW26KUbUBI+XVf3LrvcIJQ 4NDmwtuAuDtZNBFb1Sw9nUAMDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCZRlSo /Wp/BkVuKI3FExCf6LG+MB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAps4xtansex343A8mg+UYMa/j4DJ9Olsq9EVqQi6CVz4IFYZC12LFZ xteWmEieUpsoZI9dLzHNWeigomQmJhUItwI21d5Ewd9/UK2DXyqADRD8OTGQjSn/ RSuKpjPTOy9Jlum8OK4sIAffT3mVTQN3Psmvqvj6HFrms7H2qru7tEXzAMv1f95d 2WWwVRTodBJIUzi8ur+IGC1aR1gVqBDEud4IiZ0O/4W+SGPaRqPdpLR3M1QVnQx9 VOInWJ/L/oW9C774/68tb+0TfZ0QD9gl6QL1XmPddH9FeOUa1OwGI9C5LQ36c+3K WCl3HXKITQ+DzobXaGUEatWDJRY8IGPL -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:08 2025 by rpki-client