$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: 3791Y9/imnivq8gkN8DdTDtUsYJu7VQEUhznBI5tIVI= Subject key identifier: F5:4C:3C:79:38:A4:4F:1B:95:F6:78:81:82:F1:8B:97:08:1A:C0:B3 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 0F Signing time: Sat 09 Aug 2025 08:37:49 +0000 Manifest this update: Sat 09 Aug 2025 08:37:48 +0000 Manifest next update: Sat 16 Aug 2025 08:37:48 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: 3NLUM6eAnGFevVgG5927j7VlXym1zW3cnXVJgS2eEKY=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Aug 9 08:37:48 2025 GMT Not After : Aug 16 08:37:48 2025 GMT Subject: CN=689708dc-a9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:89:a3:e3:e0:d4:40:84:8c:1a:dd:cf:85:79: 28:45:45:b5:39:16:c6:41:90:5c:db:d2:74:59:5d: 6a:f8:22:a0:53:11:cb:0e:48:18:93:f7:99:01:b5: ca:b4:68:53:94:1b:83:6a:51:ff:1b:97:3a:64:69: 30:a2:6d:62:27:fd:f1:35:58:37:21:6e:9d:78:b9: 52:ef:80:28:05:1b:78:32:1b:cb:ae:01:90:a2:cb: a4:dc:4e:1a:41:49:f0:17:32:10:d4:fa:0e:6e:f9: ea:db:cc:e5:44:89:54:ea:db:b8:8a:f8:ac:c0:5b: c0:1b:06:e7:fa:63:88:41:35:30:37:b0:9d:9b:4a: 30:6c:b2:b7:4f:1b:fd:36:00:ec:23:8d:b1:a9:7f: 79:2f:40:74:93:cb:c2:8c:72:ba:6e:70:54:4e:90: be:48:9b:9f:63:10:ba:57:f1:4f:41:8c:3e:db:0b: 73:80:54:00:3c:c0:52:13:89:18:ee:c7:ae:6e:3c: d3:ae:e8:6a:16:81:76:c6:49:85:df:13:f7:92:94: 13:f2:5e:16:47:1e:aa:2a:11:8b:10:d3:d6:7f:08: b1:1f:e4:a5:41:95:47:d4:04:c6:8f:35:de:32:a8: 4d:bb:83:64:94:45:8e:cd:be:76:bd:b3:e9:b9:d7: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4C:3C:79:38:A4:4F:1B:95:F6:78:81:82:F1:8B:97:08:1A:C0:B3 X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:6a:55:f9:1a:ef:e1:79:77:8b:79:9a:fc:9a:cd:9d:3a:b2: a8:2b:78:ee:ca:51:58:23:74:f2:96:12:dd:f5:66:ab:99:57: 37:d1:dc:aa:36:54:9b:b2:3e:ea:f4:54:80:62:d3:40:a1:b6: df:f5:7e:f4:e5:65:39:73:15:91:3f:a4:8a:c7:c2:a7:26:92: 5a:09:f8:80:43:29:51:16:ac:d3:fb:d6:d9:ea:d1:da:44:b7: a7:97:27:97:c2:4d:cd:f5:ff:3b:35:14:de:06:e6:1a:73:d4: 38:e5:f0:91:58:79:9a:65:97:17:56:36:ed:37:0c:e5:a3:f8: e2:9f:7f:99:de:ff:04:3a:cb:58:e4:01:04:e1:71:79:5d:37: 6b:d6:20:67:9b:35:0b:94:ca:f2:47:96:59:49:8c:4d:1b:e2: 41:4f:80:26:14:ec:c1:f1:0f:70:2f:0f:06:ce:36:7b:6a:c7: a7:bf:9f:50:11:ae:1d:c0:b4:58:0b:e6:14:10:9e:40:e3:5d: bb:c9:a7:22:78:ea:04:e8:64:f1:f9:c1:00:5a:a8:31:48:3b: b9:de:28:b9:30:b6:3b:1a:70:d2:55:00:01:5c:58:53:2e:39: cc:4b:ab:26:bf:40:87:7f:cb:e3:05:f5:3b:8e:f9:b0:fd:96: 0e:d5:a5:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTA4MDkwODM3NDhaFw0yNTA4MTYwODM3NDhaMBgxFjAUBgNV BAMTDTY4OTcwOGRjLWE5ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3iaPj4NRAhIwa3c+FeShFRbU5FsZBkFzb0nRZXWr4IqBTEcsOSBiT95kBtcq0 aFOUG4NqUf8blzpkaTCibWIn/fE1WDchbp14uVLvgCgFG3gyG8uuAZCiy6TcThpB SfAXMhDU+g5u+erbzOVEiVTq27iK+KzAW8AbBuf6Y4hBNTA3sJ2bSjBssrdPG/02 AOwjjbGpf3kvQHSTy8KMcrpucFROkL5Im59jELpX8U9BjD7bC3OAVAA8wFITiRju x65uPNOu6GoWgXbGSYXfE/eSlBPyXhZHHqoqEYsQ09Z/CLEf5KVBlUfUBMaPNd4y qE27g2SURY7Nvna9s+m51+B9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9Uw8eTik TxuV9niBgvGLlwgawLMwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMBqVfka7+F5d4t5mvyazZ06sqgreO7KUVgjdPKWEt31ZquZVzfR3Ko2 VJuyPur0VIBi00Chtt/1fvTlZTlzFZE/pIrHwqcmkloJ+IBDKVEWrNP71tnq0dpE t6eXJ5fCTc31/zs1FN4G5hpz1Djl8JFYeZpllxdWNu03DOWj+OKff5ne/wQ6y1jk AQThcXldN2vWIGebNQuUyvJHlllJjE0b4kFPgCYU7MHxD3AvDwbONntqx6e/n1AR rh3AtFgL5hQQnkDjXbvJpyJ46gToZPH5wQBaqDFIO7neKLkwtjsacNJVAAFcWFMu OcxLqya/QId/y+MF9TuO+bD9lg7VpXA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:47 2025 by rpki-client