$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: 1TakOHjddRf+7Pnv0H8vc6004m8xDYtisKy1FI/2R9U= Subject key identifier: E9:F1:A8:6D:E6:43:B9:65:DA:92:F6:44:08:EB:D6:CC:E9:27:02:2C Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 13B7 Signing time: Tue 12 Aug 2025 19:49:40 +0000 Manifest this update: Tue 12 Aug 2025 19:49:39 +0000 Manifest next update: Tue 19 Aug 2025 19:49:39 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: sz2EL5fahx8xYg1auJ9ZxLiY/vpuFIdBn1fdDjkOfWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Aug 12 19:49:39 2025 GMT Not After : Aug 19 19:49:39 2025 GMT Subject: CN=689b9ad4-0040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:34:0c:03:ac:c9:4f:ac:c6:a7:5e:d6:fe: 19:e2:cd:54:40:c6:8d:95:ad:d8:35:4f:a7:8e:f5: 01:c0:8f:d3:55:0e:99:74:3f:2d:cc:93:7d:ca:9c: 87:0e:e9:68:9a:43:57:c8:6f:56:db:7f:f7:9f:36: 52:37:ad:58:c2:62:3b:78:df:09:91:4c:2d:f5:31: 05:72:bd:06:9a:bc:c5:fe:ed:79:30:15:c9:00:93: d8:73:66:19:64:44:7c:b9:8a:79:f0:dc:5c:d6:b5: 0a:f9:b8:fe:fe:16:2d:d9:52:db:12:4a:d7:f3:75: b8:2d:c6:63:05:12:d2:36:08:93:ce:93:ea:f4:d6: 6d:bd:67:35:31:54:7c:21:be:5a:72:8b:1d:a1:6e: 1b:fa:0a:81:90:d9:02:09:a2:c1:b3:a8:f4:93:6d: 2a:d1:7a:57:ab:41:2f:99:7d:81:0d:96:23:f2:57: 52:8a:7b:24:41:3c:9d:5a:70:52:57:1e:41:51:af: 8c:2a:af:1e:e0:d0:6c:89:23:65:55:51:93:33:13: d8:a7:47:2c:c2:3c:a2:ba:7a:e4:0e:91:89:8e:98: b5:68:09:d5:ff:5e:85:65:f7:fa:7b:cd:02:c2:c2: f8:29:0c:3d:01:49:12:10:fd:e7:34:f5:f0:f3:f7: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F1:A8:6D:E6:43:B9:65:DA:92:F6:44:08:EB:D6:CC:E9:27:02:2C X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ce:fa:16:a1:f6:ef:0e:7a:d9:f7:4b:b5:b5:80:97:c2:f7: 9c:a0:8b:17:bf:58:04:7c:65:c5:e5:f4:a3:e5:14:82:ba:22: 68:fd:a9:85:29:4c:41:f1:92:74:02:a0:2a:f3:eb:ac:53:da: 01:48:24:00:ec:90:d1:ec:85:54:8e:5c:e1:f7:da:9a:7e:3a: e5:61:97:cc:16:1c:b7:d8:41:bd:80:5d:80:d2:34:6e:06:e9: ac:1d:d5:27:35:8b:9b:90:e9:2b:24:75:4b:95:db:4f:c3:24: 0f:0b:42:90:36:a4:a1:3e:3f:2b:65:1a:f7:f1:9a:52:04:10: f3:07:e2:87:a8:45:91:21:89:a3:90:f4:40:12:a7:5c:9c:25: 51:7d:61:32:5e:59:50:d2:19:f1:b1:66:a2:02:d2:97:59:0f: 74:13:e9:b0:0c:f6:9d:0b:65:96:15:ec:7f:53:43:0f:56:b0: 21:06:0d:41:87:ab:07:44:0c:c3:ff:34:e7:a1:a2:6b:81:d8: 16:07:d5:cd:7c:65:ba:ee:b8:90:2d:b5:26:76:80:70:51:67: 8a:40:37:d8:7b:81:bc:73:1e:4a:55:34:76:e3:79:d0:90:eb: 99:3f:cc:e4:74:eb:ea:fe:f5:eb:9a:7b:3a:64:46:b8:21:21: 0f:02:74:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwODEyMTk0OTM5WhcNMjUwODE5MTk0OTM5WjAYMRYwFAYD VQQDEw02ODliOWFkNC0wMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvM0DAOsyU+sxqde1v4Z4s1UQMaNla3YNU+njvUBwI/TVQ6ZdD8tzJN9ypyH DulomkNXyG9W23/3nzZSN61YwmI7eN8JkUwt9TEFcr0GmrzF/u15MBXJAJPYc2YZ ZER8uYp58Nxc1rUK+bj+/hYt2VLbEkrX83W4LcZjBRLSNgiTzpPq9NZtvWc1MVR8 Ib5acosdoW4b+gqBkNkCCaLBs6j0k20q0XpXq0EvmX2BDZYj8ldSinskQTydWnBS Vx5BUa+MKq8e4NBsiSNlVVGTMxPYp0cswjyiunrkDpGJjpi1aAnV/16FZff6e80C wsL4KQw9AUkSEP3nNPXw8/cLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnxqG3m Q7ll2pL2RAjr1szpJwIsMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCizvoWofbvDnrZ90u1tYCXwvecoIsXv1gEfGXF5fSj5RSCuiJo/amF KUxB8ZJ0AqAq8+usU9oBSCQA7JDR7IVUjlzh99qafjrlYZfMFhy32EG9gF2A0jRu BumsHdUnNYubkOkrJHVLldtPwyQPC0KQNqShPj8rZRr38ZpSBBDzB+KHqEWRIYmj kPRAEqdcnCVRfWEyXllQ0hnxsWaiAtKXWQ90E+mwDPadC2WWFex/U0MPVrAhBg1B h6sHRAzD/zTnoaJrgdgWB9XNfGW67riQLbUmdoBwUWeKQDfYe4G8cx5KVTR243nQ kOuZP8zkdOvq/vXrmns6ZEa4ISEPAnT7 -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:27 2025 by rpki-client