$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft File: FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft (raw, json) Hash identifier: x2+TZIoNB1y/qJoCrwbqLPlAbRUZEr5otT/hVvDhIkA= Subject key identifier: 48:59:87:85:4B:C0:2B:33:BD:82:1B:53:7F:3E:C8:F7:66:5E:02:DB Authority key identifier: 15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 Certificate issuer: /CN=A91187C1/serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft Manifest number: 19 Signing time: Sat 09 Aug 2025 08:29:40 +0000 Manifest this update: Sat 09 Aug 2025 08:29:40 +0000 Manifest next update: Sat 16 Aug 2025 08:29:40 +0000 Files and hashes: 1: FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl (hash: aPNSNAMtCy2+5mybXz46gYk6cFbbNkaijnCeV4hz11g=) 2: 5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa (hash: MMnEHOZL+3B6H53csw4VsH9Mp6n0HLOocUR5xuPHf5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Validity Not Before: Aug 9 08:29:40 2025 GMT Not After : Aug 16 08:29:40 2025 GMT Subject: CN=689706f4-41eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:61:3a:4a:e8:f9:b2:53:e1:30:1b:25:4a: 69:6b:28:d3:79:b7:c5:cc:a3:9a:3f:48:6e:6e:84: cb:19:f7:26:7b:c6:6c:4c:93:09:05:97:3d:f8:c4: c0:ca:75:65:54:cc:3c:00:73:d3:ca:bb:3b:fd:06: c9:f7:3d:7c:be:13:d2:fa:e6:e9:c0:b4:6e:7c:78: 8c:26:49:f0:f2:86:4f:08:a0:86:9d:6f:90:6a:d1: da:60:be:e0:19:28:20:fc:b3:fe:e1:b8:54:9b:04: 59:b3:92:7a:b3:ca:99:db:d1:1b:4e:0b:08:d2:89: 6b:ac:b6:c1:c6:70:25:ad:a7:22:e8:76:3d:55:cb: ab:c9:35:80:1c:ac:f1:e0:e9:5f:45:eb:03:2a:9d: 51:f4:c2:a2:61:38:8b:c2:96:93:88:5a:1d:2d:f5: 5b:3d:11:38:10:71:15:cf:33:7b:fb:b6:61:46:09: 07:fc:15:8f:04:f9:b2:7e:3c:87:a1:31:13:d4:53: 4a:aa:c1:59:73:46:56:7e:e1:5f:b3:62:64:5c:07: 7f:b6:39:0c:c0:e0:27:c9:bf:e3:1f:74:91:4c:98: 97:6c:58:b3:a3:1e:29:f8:b3:73:16:02:d8:ab:c1: b7:28:55:04:30:cd:a0:cb:c7:ee:2b:f4:d6:05:46: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:87:85:4B:C0:2B:33:BD:82:1B:53:7F:3E:C8:F7:66:5E:02:DB X509v3 Authority Key Identifier: keyid:15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:1f:de:c1:fe:a0:a1:8c:c2:03:1f:6b:cb:48:24:15:2f:4a: cc:2c:b6:17:c9:49:37:00:ba:56:c2:b2:94:b3:a0:8b:8e:e3: f9:29:a1:77:44:0d:92:56:63:29:5d:f9:e8:d1:79:46:09:98: 88:07:4a:4c:1d:20:19:2f:15:9d:4f:df:c2:a7:f5:d4:af:17: b4:82:14:a8:2e:95:01:51:74:ba:14:ab:c6:db:66:e7:27:57: 8f:d7:2b:7a:34:7c:44:3f:90:7a:9d:9c:b3:70:4a:32:fe:e1: 88:86:ba:54:eb:2f:40:4c:52:2d:fa:3b:0b:25:37:1a:01:f4: 89:4d:4c:9f:4b:a9:a5:fd:4e:4a:fa:c9:28:fd:23:d9:8d:0d: d7:5b:ff:1e:f2:ff:52:02:fa:2f:7f:6b:70:d2:d5:58:56:ee: c0:39:a6:01:4e:c6:68:cb:08:8d:60:5e:d4:69:74:26:1e:60: e1:b3:91:1d:8c:09:c4:f8:0c:89:cc:40:30:4b:68:c6:c5:1d: ed:af:88:32:d2:75:df:ae:94:29:f4:00:0e:d4:11:b4:87:40: da:85:09:97:b5:22:e6:b9:ca:a8:24:bb:2a:e8:4d:9c:14:89: 19:a8:1e:f4:68:d9:08:8f:59:e9:0a:21:74:f6:03:97:ae:23: d2:5a:f1:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODdDMTExMC8GA1UEBRMoMTU1QUQ2MjgxRTA1NTBDQjRGREQ2MUQyRjExNzY5QzI2 ODRBNzAwMTAeFw0yNTA4MDkwODI5NDBaFw0yNTA4MTYwODI5NDBaMBgxFjAUBgNV BAMTDTY4OTcwNmY0LTQxZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuGWE6Suj5slPhMBslSmlrKNN5t8XMo5o/SG5uhMsZ9yZ7xmxMkwkFlz34xMDK dWVUzDwAc9PKuzv9Bsn3PXy+E9L65unAtG58eIwmSfDyhk8IoIadb5Bq0dpgvuAZ KCD8s/7huFSbBFmzknqzypnb0RtOCwjSiWustsHGcCWtpyLodj1Vy6vJNYAcrPHg 6V9F6wMqnVH0wqJhOIvClpOIWh0t9Vs9ETgQcRXPM3v7tmFGCQf8FY8E+bJ+PIeh MRPUU0qqwVlzRlZ+4V+zYmRcB3+2OQzA4CfJv+MfdJFMmJdsWLOjHin4s3MWAtir wbcoVQQwzaDLx+4r9NYFRhXzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSFmHhUvA KzO9ghtTfz7I92ZeAtswHwYDVR0jBBgwFoAUFVrWKB4FUMtP3WHS8RdpwmhKcAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0MxLzJGNjkyMzNDNTcw QTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10UDNXSFM4UmRwd21oS2NB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlZyV0tCNEZVTXRQM1dIUzhSZHB3bWhLY0FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 N0MxLzJGNjkyMzNDNTcwQTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10 UDNXSFM4UmRwd21oS2NBRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALIf3sH+oKGMwgMfa8tIJBUvSswsthfJSTcAulbCspSzoIuO4/kpoXdE DZJWYyld+ejReUYJmIgHSkwdIBkvFZ1P38Kn9dSvF7SCFKgulQFRdLoUq8bbZucn V4/XK3o0fEQ/kHqdnLNwSjL+4YiGulTrL0BMUi36OwslNxoB9IlNTJ9LqaX9Tkr6 ySj9I9mNDddb/x7y/1IC+i9/a3DS1VhW7sA5pgFOxmjLCI1gXtRpdCYeYOGzkR2M CcT4DInMQDBLaMbFHe2viDLSdd+ulCn0AA7UEbSHQNqFCZe1Iua5yqgkuyroTZwU iRmoHvRo2QiPWekKIXT2A5euI9Ja8XI= -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:36 2025 by rpki-client