$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: gOiZmvSJUVsNSi56whnFMZvpKS9X0RasF/Q8vKj3OYg= Subject key identifier: 8B:FC:E9:54:89:EC:8A:B0:A2:60:5A:16:30:34:60:92:44:2E:14:6F Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04DE Signing time: Sat 23 Aug 2025 00:05:05 +0000 Manifest this update: Sat 23 Aug 2025 00:05:05 +0000 Manifest next update: Sat 30 Aug 2025 00:05:04 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: BdhhtYVJxHuE3Hfh/Xs9BUNNcg9/lpUbVcfKMMGuhdc=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: prBekR9LUayidaAK9GSYWyVHKMLahKIDTDQ64hhVlAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Aug 23 00:05:05 2025 GMT Not After : Aug 30 00:05:04 2025 GMT Subject: CN=68a905b1-7c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:6a:3d:47:c7:50:27:b8:57:21:3e:a3:65: 32:45:87:e2:ee:0f:00:52:82:b7:87:f2:fa:80:20: bb:ef:49:b9:c8:73:f7:e3:3e:a9:92:18:08:c1:fe: de:32:81:76:84:62:66:85:4a:7b:5d:87:eb:d6:85: de:e1:5c:80:c0:14:be:5d:bf:a2:15:fc:eb:5e:af: 44:ef:c0:c4:73:b1:ad:41:91:3d:ab:36:48:ff:61: be:f7:36:46:b2:5e:30:5d:e3:18:7d:89:57:57:33: 95:53:1d:5d:c9:df:c0:5d:98:70:26:82:b8:56:ba: e9:b8:08:f7:e1:4b:93:ef:28:81:8c:31:91:72:7b: fa:4f:35:d4:82:5f:86:35:af:cc:c9:e2:fc:43:d2: 17:c3:fc:d4:6a:74:01:d6:15:d0:de:2d:52:f7:da: fa:a3:b5:e9:94:ad:d7:22:dd:35:cd:76:59:cc:70: 50:6f:55:4c:7e:d8:6e:83:d2:c9:1e:b8:16:01:b3: 8a:3e:1f:90:af:6a:b9:30:74:86:87:25:89:97:17: 3b:d4:92:93:f2:b3:de:05:cc:9a:39:83:2c:5b:10: f3:9b:17:8e:0f:5d:6b:ab:c9:b4:ef:c3:10:8f:df: 9c:e9:8a:5f:c6:ae:f8:fd:16:98:13:22:29:6f:48: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:E9:54:89:EC:8A:B0:A2:60:5A:16:30:34:60:92:44:2E:14:6F X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:22:77:47:6e:72:3d:01:9c:a7:0d:e1:44:45:c4:09:aa:9f: 2c:82:03:73:e7:7b:09:ee:39:49:0e:75:2d:b4:16:6b:a8:9c: 55:06:6d:d4:52:df:6a:8a:cd:62:f0:46:54:4b:01:fb:e9:ac: 65:a9:15:17:f7:38:ea:e1:82:05:0a:1c:59:4e:07:d1:2f:cf: bb:55:24:1f:6b:39:3c:98:55:8d:03:34:8b:d9:95:c1:6b:19: 93:8e:1b:30:11:09:4c:30:21:1f:40:86:40:73:42:7b:18:64: 19:bb:c2:4b:f7:64:d3:d1:a0:7c:34:0d:8f:2f:eb:aa:11:8b: 72:ce:51:9d:fd:3d:5b:fc:b8:99:58:72:c9:90:ba:27:ab:c8: 9a:b7:2f:5b:21:43:ff:c2:55:53:c6:36:96:62:dd:7f:70:82: 90:5a:1e:6d:5c:cd:81:2c:32:13:bf:9e:67:e5:ea:eb:df:90: c7:6e:92:78:c2:70:ce:59:74:40:c4:1e:39:48:a8:66:14:44: fa:28:c1:8e:cc:3c:11:25:1a:3c:d8:0d:4c:17:69:6f:f6:fb: 3f:a2:54:84:5a:ff:19:17:a0:d4:62:98:9d:52:2f:5b:56:e5: 6a:86:78:22:d0:87:b8:6d:79:67:85:de:45:32:4a:d8:9a:be: 5e:57:9e:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwODIzMDAwNTA1WhcNMjUwODMwMDAwNTA0WjAYMRYwFAYD VQQDEw02OGE5MDViMS03Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxhqPUfHUCe4VyE+o2UyRYfi7g8AUoK3h/L6gCC770m5yHP34z6pkhgIwf7e MoF2hGJmhUp7XYfr1oXe4VyAwBS+Xb+iFfzrXq9E78DEc7GtQZE9qzZI/2G+9zZG sl4wXeMYfYlXVzOVUx1dyd/AXZhwJoK4VrrpuAj34UuT7yiBjDGRcnv6TzXUgl+G Na/MyeL8Q9IXw/zUanQB1hXQ3i1S99r6o7XplK3XIt01zXZZzHBQb1VMfthug9LJ HrgWAbOKPh+Qr2q5MHSGhyWJlxc71JKT8rPeBcyaOYMsWxDzmxeOD11rq8m078MQ j9+c6Ypfxq74/RaYEyIpb0iFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIv86VSJ 7IqwomBaFjA0YJJELhRvMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8IndHbnI9AZynDeFERcQJqp8sggNz53sJ7jlJDnUttBZrqJxVBm3U Ut9qis1i8EZUSwH76axlqRUX9zjq4YIFChxZTgfRL8+7VSQfazk8mFWNAzSL2ZXB axmTjhswEQlMMCEfQIZAc0J7GGQZu8JL92TT0aB8NA2PL+uqEYtyzlGd/T1b/LiZ WHLJkLonq8iaty9bIUP/wlVTxjaWYt1/cIKQWh5tXM2BLDITv55n5err35DHbpJ4 wnDOWXRAxB45SKhmFET6KMGOzDwRJRo82A1MF2lv9vs/olSEWv8ZF6DUYpidUi9b VuVqhngi0Ie4bXlnhd5FMkrYmr5eV57P -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:36 2025 by rpki-client