$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: krXkbzROBfaXxm3tWC9iUP0cpKKezwX29ZITx1tUhWw= Subject key identifier: 2B:AF:EE:1A:B4:F3:C0:38:E2:38:B0:64:AB:36:D3:FA:65:14:FB:2B Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 0526 Signing time: Sat 28 Jun 2025 23:08:13 +0000 Manifest this update: Sat 28 Jun 2025 23:08:13 +0000 Manifest next update: Sat 05 Jul 2025 23:08:13 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: HBOxQL4MQbYpEk30HqjfJ4l+IXDbu1Rxi25SErFFuI8=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Jun 28 23:08:13 2025 GMT Not After : Jul 5 23:08:13 2025 GMT Subject: CN=686075dd-1861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:c9:72:8b:38:6b:d0:b0:c1:32:3f:ab:2f: 98:ea:75:eb:12:a2:c7:ab:ab:87:24:2e:28:d5:34: 2e:50:20:3f:d9:c3:2d:b1:88:b5:a2:a8:22:97:24: 6b:5b:ce:d4:46:f4:3a:b5:e0:55:a8:08:7e:1e:82: b9:49:84:b4:61:16:4f:40:16:6a:8a:60:ac:10:3f: 3a:14:08:8d:78:da:60:2e:2d:18:33:b7:8b:2d:9c: 55:35:23:19:9c:8b:27:94:a5:d3:e3:24:68:0f:22: 8c:61:f8:1b:41:93:ee:15:e5:1a:a7:be:40:c7:17: c8:ef:32:97:44:fb:ab:61:e2:4c:68:18:34:50:51: 80:a2:31:55:f2:25:48:50:33:77:59:06:61:02:ac: 2a:6b:c8:c6:ef:52:b5:b6:8b:eb:c5:0e:40:ef:cc: 9a:3a:a0:fb:94:fb:f7:0a:62:21:3f:4d:d5:11:35: 0f:67:75:b0:e0:23:f3:d0:d4:51:ab:9d:d3:61:1b: 84:50:18:7b:e7:1e:f6:dd:6d:05:f8:5e:18:27:5f: fb:2a:52:f4:36:7b:bd:6c:82:21:6d:02:15:e9:be: fa:d0:3c:a0:b1:6a:53:72:71:23:6f:21:5e:66:7d: 16:ff:7e:b7:54:d7:ad:af:18:32:ce:71:c3:72:ea: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AF:EE:1A:B4:F3:C0:38:E2:38:B0:64:AB:36:D3:FA:65:14:FB:2B X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:02:16:79:65:6c:ca:04:1d:c8:3a:bf:51:d9:7e:60:7e:68: f6:6a:29:d0:a0:ab:76:a9:92:9a:91:bd:be:6c:e5:80:57:1d: db:73:6d:b4:7d:71:12:a2:ec:d5:c8:63:91:04:4d:60:6b:bf: 5e:03:2d:13:b0:7d:ce:7a:59:0a:06:bd:66:42:43:ce:6d:68: 16:db:7f:04:bb:0b:4d:59:f7:27:f6:2e:1b:a1:45:03:dc:7e: 49:ee:c3:18:66:f9:20:5c:34:84:eb:20:46:21:c4:e8:f2:22: 84:66:48:08:f4:05:6c:62:98:57:c3:97:42:c3:72:95:86:1f: 00:a9:5f:67:14:8c:6f:83:ba:45:b9:3e:61:51:15:fc:41:58: 76:f7:63:5d:e9:0c:79:a5:90:f5:82:d7:0c:85:47:ff:5e:63: bf:b4:79:cc:da:0e:f6:ae:f4:a2:63:bc:88:ec:8e:8b:a1:f3: b1:6c:59:5d:8a:b5:88:73:aa:18:16:77:1a:15:a2:6c:0b:99: 4c:21:51:1d:50:f6:a7:2d:9e:6d:d9:c1:b6:ba:7c:73:8d:ef: 45:c3:d3:c3:8a:c4:00:ea:56:53:16:ad:7c:df:9b:24:b4:71: dc:03:8e:a4:b3:46:44:af:f2:90:85:f7:7f:b8:77:5f:e3:af: fa:5f:8e:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwNjI4MjMwODEzWhcNMjUwNzA1MjMwODEzWjAYMRYwFAYD VQQDEw02ODYwNzVkZC0xODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTrJcos4a9CwwTI/qy+Y6nXrEqLHq6uHJC4o1TQuUCA/2cMtsYi1oqgilyRr W87URvQ6teBVqAh+HoK5SYS0YRZPQBZqimCsED86FAiNeNpgLi0YM7eLLZxVNSMZ nIsnlKXT4yRoDyKMYfgbQZPuFeUap75AxxfI7zKXRPurYeJMaBg0UFGAojFV8iVI UDN3WQZhAqwqa8jG71K1tovrxQ5A78yaOqD7lPv3CmIhP03VETUPZ3Ww4CPz0NRR q53TYRuEUBh75x723W0F+F4YJ1/7KlL0Nnu9bIIhbQIV6b760DygsWpTcnEjbyFe Zn0W/363VNetrxgyznHDcuondwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuv7hq0 88A44jiwZKs20/plFPsrMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8AhZ5ZWzKBB3IOr9R2X5gfmj2ainQoKt2qZKakb2+bOWAVx3bc220 fXESouzVyGORBE1ga79eAy0TsH3OelkKBr1mQkPObWgW238EuwtNWfcn9i4boUUD 3H5J7sMYZvkgXDSE6yBGIcTo8iKEZkgI9AVsYphXw5dCw3KVhh8AqV9nFIxvg7pF uT5hURX8QVh292Nd6Qx5pZD1gtcMhUf/XmO/tHnM2g72rvSiY7yI7I6LofOxbFld irWIc6oYFncaFaJsC5lMIVEdUPanLZ5t2cG2unxzje9Fw9PDisQA6lZTFq1835sk tHHcA46ks0ZEr/KQhfd/uHdf46/6X46n -----END CERTIFICATE-----Generated at Mon Jun 30 23:00:13 2025 by rpki-client