$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: PYDkIw4KGGnBZQxrxngXW5PpDqwlj7F1oDACDS0ChBs= Subject key identifier: A0:D8:32:6F:F6:1F:91:2B:3C:5C:2D:95:8B:F2:CE:45:0F:1E:2D:37 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3902 Signing time: Fri 08 Aug 2025 14:37:51 +0000 Manifest this update: Fri 08 Aug 2025 14:37:51 +0000 Manifest next update: Fri 15 Aug 2025 14:37:51 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: bnhaFjSnjjaR87h+kAvfrdgbODQPzX/iWgoSXZZ89Qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13481 (0x34a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Aug 8 14:37:51 2025 GMT Not After : Aug 15 14:37:51 2025 GMT Subject: CN=68960bbf-31c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:2d:3b:7b:51:89:d4:7f:0e:1b:36:65:af: 4c:34:3b:35:ff:9f:7a:41:86:d9:cd:ef:c8:84:f4: b6:bc:9c:88:99:49:84:09:58:72:ca:8e:8d:a2:09: 95:16:d1:4a:1a:48:df:b5:61:d1:25:fe:1c:10:e2: 8c:d3:98:09:bb:53:99:5c:a9:1c:f8:ae:36:ec:b7: 20:46:dc:81:a1:3f:70:5e:4d:8a:8a:75:73:d4:c9: 4d:af:6b:fb:9d:be:a7:a0:61:98:1c:f0:5d:a6:d3: 1b:44:bc:f6:d2:67:73:e7:73:b6:11:bc:59:e9:64: fc:d0:d5:99:ce:6e:26:ef:e0:55:9f:2a:fd:ba:42: bd:7a:8b:c8:ad:2d:2a:6b:cd:26:63:79:c7:83:66: b9:ff:50:10:2c:ff:0c:c0:00:7d:86:a1:ee:8d:f1: 56:4b:08:b9:2d:ff:69:53:6d:df:82:75:db:f2:2f: 24:96:75:33:2c:6d:7a:8e:32:cd:12:ca:0c:0d:ad: 21:9e:98:f4:c1:a8:a0:3e:9e:ce:97:59:7d:28:ca: 37:de:26:49:4b:43:64:c4:0c:4f:22:89:d0:81:fa: 27:0a:5b:f7:9c:b1:2b:87:85:dc:ad:c7:73:92:c7: bc:5c:1a:32:d1:89:42:28:d3:94:e9:b1:78:dc:02: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:32:6F:F6:1F:91:2B:3C:5C:2D:95:8B:F2:CE:45:0F:1E:2D:37 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:21:3b:01:ec:3c:79:95:91:e2:db:ee:78:9e:9d:a5:ab:6d: 04:6f:a1:61:88:a3:c0:4c:00:d4:62:ab:83:b6:f7:c3:63:65: e3:4a:aa:c5:3e:6c:05:46:81:c3:27:72:16:40:c5:6a:59:8a: f8:c4:9a:04:eb:e8:39:48:fa:1f:45:1f:b6:63:3b:d7:13:0d: 4b:c3:62:f8:8f:ca:56:1c:aa:4a:15:85:96:55:ca:6f:83:8f: aa:94:82:df:3c:91:95:d0:8d:68:c2:48:3a:5d:a9:18:9c:c4: d1:29:67:71:7e:ab:ee:20:da:82:3e:0f:68:8c:46:08:6b:b0: 6a:ee:e5:8e:08:f5:68:5d:ee:b4:c4:46:4f:f4:72:1a:99:bb: 57:f6:5d:1d:13:fb:22:3e:42:03:81:06:2d:bd:16:9f:1b:c9: f5:e5:b0:48:04:11:9b:d6:04:b4:24:d2:9b:1c:c1:34:1a:7a: 4d:ae:98:52:db:1b:1f:8b:6f:51:3c:9b:01:b0:9a:43:59:32: ba:73:79:2a:4d:0f:cc:61:8e:c7:71:d8:1b:6e:14:5f:59:7a: 67:9e:7a:3c:6e:91:a4:49:e3:73:f3:17:e6:2a:89:07:5e:12: 30:7e:69:a4:ca:bc:c1:33:2e:70:d7:8d:bf:5b:93:db:ba:b5: 2f:5f:8c:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwODA4MTQzNzUxWhcNMjUwODE1MTQzNzUxWjAYMRYwFAYD VQQDEw02ODk2MGJiZi0zMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7A0tO3tRidR/Dhs2Za9MNDs1/596QYbZze/IhPS2vJyImUmECVhyyo6NogmV FtFKGkjftWHRJf4cEOKM05gJu1OZXKkc+K427LcgRtyBoT9wXk2KinVz1MlNr2v7 nb6noGGYHPBdptMbRLz20mdz53O2EbxZ6WT80NWZzm4m7+BVnyr9ukK9eovIrS0q a80mY3nHg2a5/1AQLP8MwAB9hqHujfFWSwi5Lf9pU23fgnXb8i8klnUzLG16jjLN EsoMDa0hnpj0waigPp7Ol1l9KMo33iZJS0NkxAxPIonQgfonClv3nLErh4Xcrcdz kse8XBoy0YlCKNOU6bF43AJujQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDYMm/2 H5ErPFwtlYvyzkUPHi03MB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ITsB7Dx5lZHi2+54np2lq20Eb6FhiKPATADUYquDtvfDY2XjSqrF PmwFRoHDJ3IWQMVqWYr4xJoE6+g5SPofRR+2YzvXEw1Lw2L4j8pWHKpKFYWWVcpv g4+qlILfPJGV0I1owkg6XakYnMTRKWdxfqvuINqCPg9ojEYIa7Bq7uWOCPVoXe60 xEZP9HIambtX9l0dE/siPkIDgQYtvRafG8n15bBIBBGb1gS0JNKbHME0GnpNrphS 2xsfi29RPJsBsJpDWTK6c3kqTQ/MYY7HcdgbbhRfWXpnnno8bpGkSeNz8xfmKokH XhIwfmmkyrzBMy5w142/W5PburUvX4yP -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:36 2025 by rpki-client