$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: VNBHFAgHvurtAw62UQ4D4E5IbJontZEYMsF8TVtuYrk= Subject key identifier: 51:6A:01:FF:FC:F8:87:6A:35:3B:D8:E5:54:AE:CC:41:9A:C5:14:27 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C49 Signing time: Sun 10 Aug 2025 17:34:59 +0000 Manifest this update: Sun 10 Aug 2025 17:34:59 +0000 Manifest next update: Sun 17 Aug 2025 17:34:59 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: AFwWJK2seYrEJN6p9PDgMGD2Xcwh62++/x8glzX77eQ=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Aug 10 17:34:59 2025 GMT Not After : Aug 17 17:34:59 2025 GMT Subject: CN=6898d843-5047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:84:0a:9d:81:07:15:2c:a1:46:50:97:37: a3:09:4f:ca:44:62:d1:18:ac:9e:69:4e:06:fd:b8: 1b:17:8a:0c:99:4b:3d:b4:12:67:1b:95:7a:f4:dd: a1:d8:1e:5a:db:cd:fc:de:b9:37:4d:9a:a2:d7:95: b3:79:10:48:fb:c8:13:7b:c3:8c:c5:b3:47:8b:91: 99:ee:e3:dc:db:c8:c9:ac:ef:c8:cf:82:5e:5d:86: 2a:04:ef:33:e6:5a:71:d4:9f:e7:b8:9c:5b:d2:62: 09:57:e2:54:b0:79:31:a6:6a:58:79:4c:8d:b1:e4: e5:1f:0f:a6:81:7f:70:d1:73:5f:b2:35:9d:13:6a: e1:e7:7a:49:79:50:fc:b6:af:ef:64:5d:44:fa:f1: 8e:cb:0c:a4:4c:34:15:41:92:b7:3e:e2:c4:d5:8d: e2:99:6f:b9:86:93:0c:d4:b8:60:1c:fc:a2:8a:4c: 2e:4e:8a:51:56:04:09:b5:5b:66:ad:dd:51:a5:60: 2a:3f:91:8d:86:37:af:12:2f:ef:12:08:67:60:9c: 4e:8d:ad:07:5d:42:1f:12:0f:16:e8:f1:65:ef:07: f0:5b:cf:51:10:5c:6e:d6:ef:a4:cd:1f:8b:06:21: 06:87:79:f5:9f:2d:ab:aa:8c:dc:d4:88:6b:f1:b3: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6A:01:FF:FC:F8:87:6A:35:3B:D8:E5:54:AE:CC:41:9A:C5:14:27 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:02:e1:93:d3:12:06:32:53:3f:1d:38:08:a1:07:1b:81:51: 12:9e:95:1f:3a:38:11:52:24:00:cb:c3:e9:69:0a:aa:fe:f0: 76:fa:1a:f3:76:97:fd:cc:dd:4e:fa:28:41:a2:db:f5:be:a6: ee:b6:dc:23:fb:9b:4f:0b:01:44:20:76:8b:d8:d9:fc:26:26: 32:d8:da:c7:e9:92:22:90:07:b8:e6:b4:24:a7:f2:88:27:8d: ef:e5:23:bb:66:ec:21:cc:fb:d4:ca:89:e7:4d:64:05:9d:72: c1:ad:20:d9:06:70:23:00:c3:56:44:fb:e7:2c:02:b8:7d:b7: a4:ac:3c:67:66:36:9b:bc:54:31:ed:1a:38:ff:10:bd:37:55: 65:d3:4e:f0:bb:79:fe:57:3e:05:dd:a4:80:b8:a2:d9:ee:1a: fa:df:17:1d:89:79:cc:5f:23:a8:5e:ea:8f:7f:6c:b8:3f:75: ec:eb:03:99:73:0f:65:dd:7d:3d:63:33:61:42:d4:6c:6b:39: 55:5c:d7:24:76:10:5b:83:d2:57:36:93:c2:41:06:9c:1b:67: ef:1f:b4:49:8f:c9:35:bf:8f:57:c3:16:e0:f3:3a:52:06:8e: 18:b5:7e:10:c3:10:8f:97:e2:48:bc:47:2c:0e:e5:4b:b3:2d: 7b:b3:e7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwODEwMTczNDU5WhcNMjUwODE3MTczNDU5WjAYMRYwFAYD VQQDEw02ODk4ZDg0My01MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs2ECp2BBxUsoUZQlzejCU/KRGLRGKyeaU4G/bgbF4oMmUs9tBJnG5V69N2h 2B5a28383rk3TZqi15WzeRBI+8gTe8OMxbNHi5GZ7uPc28jJrO/Iz4JeXYYqBO8z 5lpx1J/nuJxb0mIJV+JUsHkxpmpYeUyNseTlHw+mgX9w0XNfsjWdE2rh53pJeVD8 tq/vZF1E+vGOywykTDQVQZK3PuLE1Y3imW+5hpMM1LhgHPyiikwuTopRVgQJtVtm rd1RpWAqP5GNhjevEi/vEghnYJxOja0HXUIfEg8W6PFl7wfwW89REFxu1u+kzR+L BiEGh3n1ny2rqozc1Ihr8bMmAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFqAf/8 +IdqNTvY5VSuzEGaxRQnMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtAuGT0xIGMlM/HTgIoQcbgVESnpUfOjgRUiQAy8PpaQqq/vB2+hrz dpf9zN1O+ihBotv1vqbuttwj+5tPCwFEIHaL2Nn8JiYy2NrH6ZIikAe45rQkp/KI J43v5SO7ZuwhzPvUyonnTWQFnXLBrSDZBnAjAMNWRPvnLAK4fbekrDxnZjabvFQx 7Ro4/xC9N1Vl007wu3n+Vz4F3aSAuKLZ7hr63xcdiXnMXyOoXuqPf2y4P3Xs6wOZ cw9l3X09YzNhQtRsazlVXNckdhBbg9JXNpPCQQacG2fvH7RJj8k1v49Xwxbg8zpS Bo4YtX4QwxCPl+JIvEcsDuVLsy17s+dZ -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:41 2025 by rpki-client