$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: v19Y1lqB6NrN2beLk3+XwtWyHjhbWR0hEmWkXJ/qKt4= Subject key identifier: 31:1C:64:1D:B6:7A:9C:DA:25:B9:E2:2B:1A:78:2A:5C:DF:36:AF:A6 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02AF Signing time: Sat 23 Aug 2025 01:44:12 +0000 Manifest this update: Sat 23 Aug 2025 01:44:11 +0000 Manifest next update: Sat 30 Aug 2025 01:44:11 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: 5wKW+8XtIwu7Ku87SDAi67OHQfmKnEbJoCej/DT4uKs=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Aug 23 01:44:11 2025 GMT Not After : Aug 30 01:44:11 2025 GMT Subject: CN=68a91cec-5229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:cf:ea:74:1a:54:8f:52:88:43:19:34:ef: 26:2b:71:07:fb:f6:2d:fe:68:83:f9:73:ce:b2:6d: 7d:f4:4f:18:37:92:9e:2d:8f:dd:1e:2f:4e:24:a2: 41:06:e3:e4:60:fe:13:9b:97:0a:c4:5d:24:50:26: ab:91:5b:4e:18:cf:e8:b6:53:47:e8:76:76:4a:fe: 0c:98:9a:04:70:ba:ac:ee:ab:f4:ce:36:21:f0:f3: 83:9f:51:5a:62:05:e6:b2:95:50:df:e4:66:96:88: 9a:06:21:7e:a6:f1:bc:c3:b0:be:7f:09:7b:3e:5c: de:d3:0b:3e:7b:df:bb:80:ae:cc:60:96:96:62:fb: e6:b4:48:7e:8c:62:6b:61:a8:df:e3:f4:c1:d3:a7: 28:bd:1c:27:a2:1e:fe:f5:02:e3:5c:0f:d9:01:18: 19:84:18:88:4b:53:87:52:08:f1:c7:9d:33:1d:0d: 2f:79:6a:a2:0c:43:f9:3f:bc:33:16:72:4c:ae:15: 3f:e8:e5:ab:05:70:36:eb:ab:1a:0d:0d:8a:c3:0b: b9:44:be:43:f2:b4:54:fd:a9:bf:db:bc:9d:c8:0f: ac:1e:ee:09:03:b1:87:49:8f:2a:6a:c3:3c:58:2b: 69:e0:9f:92:82:e4:1c:36:ff:76:34:7a:ac:a4:31: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:64:1D:B6:7A:9C:DA:25:B9:E2:2B:1A:78:2A:5C:DF:36:AF:A6 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b5:54:12:02:79:4a:23:0e:bb:a4:fc:90:67:cb:23:71:6c: cd:9d:8f:c0:bd:e4:38:38:74:63:a3:3d:3e:05:0a:bb:c6:ee: 5d:54:e8:ce:90:2c:b8:36:ba:4d:87:c5:c7:e5:da:cd:e0:0d: e1:76:34:ee:77:8d:41:ad:e6:8d:b2:a3:5b:ce:d7:28:0c:cc: 80:91:2a:e7:b0:42:30:55:d2:5d:4c:dc:74:e1:47:01:87:b6: 6e:88:cd:6d:70:ac:e9:65:a5:53:39:d2:50:83:cb:2e:80:89: eb:e8:05:e9:b9:54:a5:c1:30:b7:db:6b:44:1f:31:86:bf:07: a7:b4:a2:aa:37:98:2a:26:d1:b6:c8:ec:ec:08:43:c3:d3:91: 9c:09:5f:6d:7b:07:26:d6:0d:a9:5e:d2:66:93:4b:db:b2:68: 6f:d6:57:28:aa:46:10:f0:f3:58:3c:02:82:7f:a2:07:d1:17: e9:7e:4e:bd:3b:d9:d1:32:da:34:83:00:ea:a6:8d:36:5b:02: 19:9f:c0:c1:ca:9a:7d:62:17:71:03:e4:4d:12:17:08:37:7d: 85:02:0a:67:ea:e5:59:8a:f3:11:86:0b:fa:cf:b7:20:f0:af: 50:70:bc:16:a7:ab:6c:84:7d:bd:e7:8c:fe:fa:c6:f5:5b:56: b7:e2:ed:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUwODIzMDE0NDExWhcNMjUwODMwMDE0NDExWjAYMRYwFAYD VQQDEw02OGE5MWNlYy01MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgbP6nQaVI9SiEMZNO8mK3EH+/Yt/miD+XPOsm199E8YN5KeLY/dHi9OJKJB BuPkYP4Tm5cKxF0kUCarkVtOGM/otlNH6HZ2Sv4MmJoEcLqs7qv0zjYh8PODn1Fa YgXmspVQ3+RmloiaBiF+pvG8w7C+fwl7Plze0ws+e9+7gK7MYJaWYvvmtEh+jGJr Yajf4/TB06covRwnoh7+9QLjXA/ZARgZhBiIS1OHUgjxx50zHQ0veWqiDEP5P7wz FnJMrhU/6OWrBXA266saDQ2Kwwu5RL5D8rRU/am/27ydyA+sHu4JA7GHSY8qasM8 WCtp4J+SguQcNv92NHqspDEU3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEcZB22 epzaJbniKxp4KlzfNq+mMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQActVQSAnlKIw67pPyQZ8sjcWzNnY/AveQ4OHRjoz0+BQq7xu5dVOjO kCy4NrpNh8XH5drN4A3hdjTud41BreaNsqNbztcoDMyAkSrnsEIwVdJdTNx04UcB h7ZuiM1tcKzpZaVTOdJQg8sugInr6AXpuVSlwTC322tEHzGGvwentKKqN5gqJtG2 yOzsCEPD05GcCV9tewcm1g2pXtJmk0vbsmhv1lcoqkYQ8PNYPAKCf6IH0Rfpfk69 O9nRMto0gwDqpo02WwIZn8DBypp9YhdxA+RNEhcIN32FAgpn6uVZivMRhgv6z7cg 8K9QcLwWp6tshH2954z++sb1W1a34u2L -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:21 2025 by rpki-client