$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: Rbtsu8UTwG9fir88uZ/5u9R/RPZH9L3fOd3AlfJZ268= Subject key identifier: 82:D7:8C:AB:F1:78:2F:01:DC:B9:4B:21:FB:7C:A8:3E:80:88:E2:D1 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 14C1 Signing time: Fri 08 Aug 2025 18:44:31 +0000 Manifest this update: Fri 08 Aug 2025 18:44:31 +0000 Manifest next update: Fri 15 Aug 2025 18:44:31 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: u+uSSZQFnbI+r4BmfB4vFZ8GsMzaaC0KUtMFQ0HIF18=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Aug 8 18:44:31 2025 GMT Not After : Aug 15 18:44:31 2025 GMT Subject: CN=6896458f-f279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:42:59:5c:27:d7:16:61:a1:95:00:21:3b:35: 35:eb:dc:c0:19:c0:db:75:72:4a:e6:ab:08:78:5f: 62:82:11:8c:7c:8c:86:14:4a:5a:6c:9d:45:e0:ee: 50:24:df:11:60:22:4d:03:6a:74:0f:bc:e4:82:c8: 4c:f2:bf:3c:f5:5d:62:ba:0e:18:8a:68:ee:2e:dc: 73:a3:f2:96:6c:8a:e6:f8:30:35:65:91:7c:97:46: 9d:d6:e7:3e:ff:fd:e7:81:c2:c5:ae:3e:ef:b4:87: 50:c6:9d:f2:97:80:a7:5a:b7:d2:e9:04:70:06:aa: 98:36:94:73:e9:7c:89:44:ae:c5:a2:7a:0d:2e:81: 4f:f0:86:3d:f7:9e:9e:0f:ba:9e:55:cc:fd:33:92: 19:be:d4:2d:3f:00:c7:4c:aa:33:17:ed:a3:2b:06: 17:95:47:9a:f1:de:29:31:45:81:85:73:a6:64:77: 17:55:23:47:37:13:8a:4d:5a:06:8a:83:35:84:39: b2:60:6a:a0:0e:43:c0:ef:e4:e2:36:1e:b7:32:08: 05:4f:18:b8:c3:2e:0f:db:49:85:f8:3b:e5:aa:88: f3:2f:d0:6f:45:fd:f2:23:39:a0:85:4a:b9:8c:4e: 12:7e:8d:86:af:6d:a0:a9:d3:3b:85:58:52:fd:58: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:8C:AB:F1:78:2F:01:DC:B9:4B:21:FB:7C:A8:3E:80:88:E2:D1 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:24:31:1f:d9:31:c5:bb:c5:13:06:85:a6:3d:08:77:7e: 3e:91:95:bb:42:17:59:c4:2f:13:ce:16:00:c8:3f:c3:55:0f: 1f:b9:6e:7c:31:07:66:c1:5b:ac:eb:6c:26:32:07:eb:cc:70: 62:9a:84:fa:8a:52:c8:dc:c9:ec:c2:a1:4d:65:e7:9f:67:5c: 45:89:da:ab:63:d7:86:ac:2c:ae:08:1d:c7:a6:90:6b:f4:90: 1b:71:01:19:ae:1b:67:04:35:cc:26:98:f2:9e:19:bc:a8:5c: 6e:ca:23:77:e9:10:02:84:c8:09:fd:79:e2:66:cd:16:e0:80: 3f:38:62:cc:5a:a6:9a:8c:14:1c:5d:97:76:2d:7c:32:71:78: 2f:a6:7f:00:5e:80:a2:06:a1:d3:b9:a6:30:7c:91:6e:6f:9e: 50:2c:aa:ea:26:28:5b:67:5b:4e:2a:9b:a1:54:28:9a:02:2f: b8:f8:d1:c4:f6:b0:af:7c:e6:a0:df:7e:96:b2:05:fe:2c:6d: 81:38:51:50:9d:4d:81:d3:2a:5b:4c:00:56:8a:93:0c:06:0d: 8a:0b:b2:04:f1:a8:8d:fe:d9:a2:5e:28:c5:24:2a:44:a7:e3: e2:db:cf:d6:b8:61:69:ce:6e:13:1b:30:11:bc:07:05:ab:3a: f6:9c:e7:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwODA4MTg0NDMxWhcNMjUwODE1MTg0NDMxWjAYMRYwFAYD VQQDEw02ODk2NDU4Zi1mMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kJZXCfXFmGhlQAhOzU169zAGcDbdXJK5qsIeF9ighGMfIyGFEpabJ1F4O5Q JN8RYCJNA2p0D7zkgshM8r889V1iug4YimjuLtxzo/KWbIrm+DA1ZZF8l0ad1uc+ //3ngcLFrj7vtIdQxp3yl4CnWrfS6QRwBqqYNpRz6XyJRK7FonoNLoFP8IY9956e D7qeVcz9M5IZvtQtPwDHTKozF+2jKwYXlUea8d4pMUWBhXOmZHcXVSNHNxOKTVoG ioM1hDmyYGqgDkPA7+TiNh63MggFTxi4wy4P20mF+DvlqojzL9BvRf3yIzmghUq5 jE4Sfo2Gr22gqdM7hVhS/Vj46QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILXjKvx eC8B3LlLIft8qD6AiOLRMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOrSQxH9kxxbvFEwaFpj0Id34+kZW7QhdZxC8TzhYAyD/DVQ8fuW58 MQdmwVus62wmMgfrzHBimoT6ilLI3MnswqFNZeefZ1xFidqrY9eGrCyuCB3HppBr 9JAbcQEZrhtnBDXMJpjynhm8qFxuyiN36RAChMgJ/XniZs0W4IA/OGLMWqaajBQc XZd2LXwycXgvpn8AXoCiBqHTuaYwfJFub55QLKrqJihbZ1tOKpuhVCiaAi+4+NHE 9rCvfOag336WsgX+LG2BOFFQnU2B0ypbTABWipMMBg2KC7IE8aiN/tmiXijFJCpE p+Pi28/WuGFpzm4TGzARvAcFqzr2nOf0 -----END CERTIFICATE-----Generated at Sun Aug 10 18:28:54 2025 by rpki-client