$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: ETkbihXQt2PQcoOWp8YHSEyU3LKnRO3k478N3H/siiw= Subject key identifier: A3:47:DB:B6:A0:51:12:52:60:19:73:E3:95:9B:74:14:A3:20:48:6D Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 086C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 1489 Signing time: Sat 14 Jun 2025 18:25:25 +0000 Manifest this update: Sat 14 Jun 2025 18:25:24 +0000 Manifest next update: Sat 21 Jun 2025 18:25:24 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: c1LpvTyTIaatVbDuceA8QniJ1i2yCawA1UJfmoz0ZQc=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Jun 14 18:25:24 2025 GMT Not After : Jun 21 18:25:24 2025 GMT Subject: CN=684dbe94-1a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:1a:43:38:12:21:c0:31:7c:f1:28:1c:f3: d2:20:ca:2d:e9:22:60:6f:45:8d:bf:b7:34:18:ba: 1a:11:ce:65:70:50:dc:e5:9b:cc:1d:96:40:46:cb: 01:c4:cf:be:95:14:84:92:32:dd:b9:d0:21:a1:29: 20:5e:8e:e0:25:19:34:1e:d9:8c:33:6a:93:04:73: 64:91:46:88:42:4e:24:09:5a:6b:05:1f:6f:a9:c0: bd:f0:7c:bb:e5:3e:f0:b0:17:6d:05:e7:50:bb:fc: ea:a1:8f:73:34:91:fc:20:81:49:98:2a:e0:7f:5e: f9:75:14:bd:8f:12:1c:f8:f3:f6:1b:87:5d:3f:5b: 5a:9d:b4:53:12:61:02:f3:85:0a:7d:1f:4e:18:f0: 16:0f:15:aa:97:54:fa:e5:c5:47:7d:70:c3:52:4e: 76:9d:39:e1:f3:df:60:ec:e1:a5:f7:d6:58:cd:d4: 78:eb:9c:a9:52:24:bc:3c:04:02:1d:f6:91:a6:e0: a1:c2:3a:25:ac:87:83:5d:28:2d:a8:b9:d4:91:ef: 37:05:4d:84:21:79:f1:60:6e:07:f4:a7:8a:f8:5b: 39:fd:ba:19:a4:73:81:21:ae:e5:3c:6c:32:bd:75: 85:bb:b7:44:70:a0:8f:ed:03:20:e4:52:96:c2:20: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:47:DB:B6:A0:51:12:52:60:19:73:E3:95:9B:74:14:A3:20:48:6D X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2a:c0:f2:15:6c:ad:ae:52:76:e0:57:6d:e1:29:fe:9a:37: 00:e9:86:44:69:20:14:d2:69:87:e5:4e:14:4a:be:a6:30:04: c6:b8:ca:9b:9c:a5:c0:f2:d3:12:ee:dc:4a:a9:dd:28:75:f8: 80:d5:1e:f3:a7:65:b4:4c:51:06:90:8e:8b:ad:42:1f:61:0c: 81:c2:20:1c:c8:ce:50:54:c1:f3:a0:01:a2:ea:e6:03:38:c8: 28:6f:14:fc:14:89:19:42:40:c1:b7:50:69:a7:01:da:c4:67: 7d:90:b4:a3:3a:da:4f:e4:41:41:3f:fe:c4:04:57:57:1c:20: 47:49:74:c7:fc:15:09:3f:1e:5c:50:07:9c:0a:48:bd:75:6f: 38:4b:c7:1e:27:49:a2:be:72:af:9e:c2:b6:9d:21:50:02:d1: 28:eb:04:74:e9:37:03:67:ee:bb:3e:b7:a8:bb:19:87:01:60: 78:a9:44:25:3d:00:5e:86:41:45:04:a5:5f:7d:f1:8f:86:d7: 53:eb:0e:00:36:dc:aa:1e:72:e3:75:0c:c6:52:41:dc:af:b5: ad:ee:5a:22:3d:52:d0:b3:53:57:b8:06:f8:90:7a:de:9b:e3: 0f:7f:16:a8:b8:89:66:f1:fe:4e:a1:25:f6:27:33:c1:ff:1f: fe:f9:2e:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwNjE0MTgyNTI0WhcNMjUwNjIxMTgyNTI0WjAYMRYwFAYD VQQDEw02ODRkYmU5NC0xYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfEaQzgSIcAxfPEoHPPSIMot6SJgb0WNv7c0GLoaEc5lcFDc5ZvMHZZARssB xM++lRSEkjLdudAhoSkgXo7gJRk0HtmMM2qTBHNkkUaIQk4kCVprBR9vqcC98Hy7 5T7wsBdtBedQu/zqoY9zNJH8IIFJmCrgf175dRS9jxIc+PP2G4ddP1tanbRTEmEC 84UKfR9OGPAWDxWql1T65cVHfXDDUk52nTnh899g7OGl99ZYzdR465ypUiS8PAQC HfaRpuChwjolrIeDXSgtqLnUke83BU2EIXnxYG4H9KeK+Fs5/boZpHOBIa7lPGwy vXWFu7dEcKCP7QMg5FKWwiBcGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNH27ag URJSYBlz45WbdBSjIEhtMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuKsDyFWytrlJ24Fdt4Sn+mjcA6YZEaSAU0mmH5U4USr6mMATGuMqb nKXA8tMS7txKqd0odfiA1R7zp2W0TFEGkI6LrUIfYQyBwiAcyM5QVMHzoAGi6uYD OMgobxT8FIkZQkDBt1BppwHaxGd9kLSjOtpP5EFBP/7EBFdXHCBHSXTH/BUJPx5c UAecCki9dW84S8ceJ0mivnKvnsK2nSFQAtEo6wR06TcDZ+67PreouxmHAWB4qUQl PQBehkFFBKVfffGPhtdT6w4ANtyqHnLjdQzGUkHcr7Wt7loiPVLQs1NXuAb4kHre m+MPfxaouIlm8f5OoSX2JzPB/x/++S67 -----END CERTIFICATE-----Generated at Sun Jun 15 10:16:13 2025 by rpki-client