$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json) Hash identifier: vIP/UkwP2NNu8d7Qsvl63BsruKOhtVtgLAJNxskb7tA= Subject key identifier: 8E:13:5C:D8:B3:4D:D2:8A:70:52:84:7C:DB:75:14:BC:F0:8D:B2:AF Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft Manifest number: 57 Signing time: Mon 11 Aug 2025 07:27:54 +0000 Manifest this update: Mon 11 Aug 2025 07:27:54 +0000 Manifest next update: Mon 18 Aug 2025 07:27:54 +0000 Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: JL6dpWWjCEvX+jt+619HrBopat/uvW3B0ZhGWaakgNA=) 2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: Aug 11 07:27:54 2025 GMT Not After : Aug 18 07:27:54 2025 GMT Subject: CN=68999b7a-ce62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e0:42:90:3d:ef:dd:c0:c4:aa:b7:89:4b:fc: 18:2c:58:05:a4:a7:a5:5d:70:1f:bf:dc:51:f1:59: 2e:4e:80:4e:7b:72:a5:4b:b5:2f:d9:18:fb:8e:22: 96:8b:84:9a:d5:16:73:d4:bc:d3:88:65:80:5d:02: 56:54:44:ee:38:8a:ab:74:4c:98:2f:30:16:e4:a7: fc:0b:83:d5:f2:b4:fb:d7:5d:1d:64:74:78:a1:32: 4f:98:05:4d:c6:d0:e6:a5:5b:08:01:cd:5b:66:b2: 51:43:43:dc:35:93:d5:70:dc:14:90:bf:16:01:c9: 50:67:00:14:ae:b3:61:74:34:4f:3c:52:61:e4:4c: 0a:dd:4c:64:18:75:d6:80:32:80:13:9f:3e:90:06: 39:0b:0e:f3:d5:88:7f:91:e3:7c:98:c7:19:b1:86: f4:f2:19:cc:b5:f9:b9:11:47:d5:66:9c:09:cb:75: 85:7b:6b:e1:c5:41:13:6b:76:13:ff:0d:8f:69:4c: 2c:d6:a2:c1:c2:ba:e5:9b:07:09:93:e2:51:be:e3: 65:e8:36:65:cf:6e:ec:46:27:e5:06:3d:7b:1b:4e: 29:33:36:53:07:0b:f6:ba:7b:38:cc:77:3b:53:a2: 3d:49:7c:a8:d9:b2:6d:c2:b7:16:b9:84:4d:d5:ce: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:13:5C:D8:B3:4D:D2:8A:70:52:84:7C:DB:75:14:BC:F0:8D:B2:AF X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:68:ff:74:78:c4:7d:01:af:29:4e:40:85:a2:c3:f5:26:c2: 9b:61:f5:fd:68:e1:f2:a3:33:27:95:6f:b5:3d:dd:ec:f3:26: 63:58:da:e7:51:57:5d:89:ab:a7:d0:50:be:8c:95:74:09:a2: 16:79:eb:d6:4a:d9:af:1d:be:af:6b:f0:f3:d9:5e:96:73:b3: 39:90:a2:7e:74:11:20:fd:f3:19:13:96:ea:82:4d:19:90:85: e9:48:5c:9f:1e:8f:32:80:f8:fa:85:76:8e:a5:57:93:04:b5: 85:58:ad:d1:9b:38:f5:e2:3a:8f:2f:14:32:b4:67:21:a5:30: aa:3f:10:f5:2d:72:ba:6a:97:c7:be:fe:a7:1c:c0:3e:d1:c7: fa:b8:eb:36:9c:b0:c7:cb:05:95:f5:a8:13:b4:c4:d2:7f:93: a1:f2:af:f3:5f:ee:4b:bf:4f:57:f5:86:4f:92:16:ac:ce:55: c4:f4:04:c5:59:43:db:f2:85:64:a7:6e:e5:53:79:f0:8c:71: 62:44:22:2d:05:8a:d3:42:85:db:c7:fd:58:f0:3d:71:cb:5b: 9c:0d:a6:8a:83:f0:6a:66:6e:f5:e1:8d:94:30:08:fb:be:bc: 18:5c:81:6b:72:67:86:bc:1d:b5:40:ab:d6:1d:2b:7d:2e:f2: 27:2c:7e:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjAxRTExMC8GA1UEBRMoN0RCRjgzQUU1MjgyQzg0RUIwRUZGNTVENUMxQzY3ODAx Q0I2NDVDNDAeFw0yNTA4MTEwNzI3NTRaFw0yNTA4MTgwNzI3NTRaMBgxFjAUBgNV BAMTDTY4OTk5YjdhLWNlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf4EKQPe/dwMSqt4lL/BgsWAWkp6VdcB+/3FHxWS5OgE57cqVLtS/ZGPuOIpaL hJrVFnPUvNOIZYBdAlZURO44iqt0TJgvMBbkp/wLg9XytPvXXR1kdHihMk+YBU3G 0OalWwgBzVtmslFDQ9w1k9Vw3BSQvxYByVBnABSus2F0NE88UmHkTArdTGQYddaA MoATnz6QBjkLDvPViH+R43yYxxmxhvTyGcy1+bkRR9VmnAnLdYV7a+HFQRNrdhP/ DY9pTCzWosHCuuWbBwmT4lG+42XoNmXPbuxGJ+UGPXsbTikzNlMHC/a6ezjMdztT oj1JfKjZsm3Ctxa5hE3VznYBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjhNc2LNN 0opwUoR823UUvPCNsq8wHwYDVR0jBBgwFoAUfb+DrlKCyE6w7/VdXBxngBy2RcQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2MDFFL0ZGNDg3NUJFRjU2 MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmItRHJsS0N5RTZ3N19WZFhCeG5nQnkyUmNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 MDFFL0ZGNDg3NUJFRjU2MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2 dzdfVmRYQnhuZ0J5MlJjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1o/3R4xH0BrylOQIWiw/Umwpth9f1o4fKjMyeVb7U93ezzJmNY2udR V12Jq6fQUL6MlXQJohZ569ZK2a8dvq9r8PPZXpZzszmQon50ESD98xkTluqCTRmQ helIXJ8ejzKA+PqFdo6lV5MEtYVYrdGbOPXiOo8vFDK0ZyGlMKo/EPUtcrpql8e+ /qccwD7Rx/q46zacsMfLBZX1qBO0xNJ/k6Hyr/Nf7ku/T1f1hk+SFqzOVcT0BMVZ Q9vyhWSnbuVTefCMcWJEIi0FitNChdvH/VjwPXHLW5wNpoqD8GpmbvXhjZQwCPu+ vBhcgWtyZ4a8HbVAq9YdK30u8icsfmA= -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:16 2025 by rpki-client