$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: ubOUCVLpSNmhw9OU+Q4f4w7fIVVff/04zbhxC1dnmHg= Subject key identifier: A3:B7:9D:7E:96:18:58:07:2F:E7:DE:0D:B3:A7:0C:16:9A:13:61:1E Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: C6 Signing time: Sat 09 Aug 2025 06:12:53 +0000 Manifest this update: Sat 09 Aug 2025 06:12:53 +0000 Manifest next update: Sat 16 Aug 2025 06:12:53 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: 2EloaenKchtNYMpM+WINmcrqQKt86Yz2pJCUhasMQUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Aug 9 06:12:53 2025 GMT Not After : Aug 16 06:12:53 2025 GMT Subject: CN=6896e6e5-1c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:f5:e6:a9:1b:a0:a6:e1:af:78:f8:26:09: 7f:41:c6:0a:f4:68:89:58:3f:f2:be:ce:b8:c0:9e: 96:a6:0c:8d:4c:ae:9f:b6:94:db:13:b6:4b:a3:c8: ae:10:9e:99:b1:bb:a2:dc:56:d0:76:51:dd:3c:47: fd:a8:40:b6:8e:8e:81:37:e6:bc:ec:8e:49:1b:00: c6:c4:28:3e:6e:01:9b:ed:0c:55:d6:bc:e0:91:7d: 6f:2b:6d:af:cb:a5:0f:e0:7d:ad:74:28:e2:ca:a2: 64:7a:dc:c0:43:74:3e:d5:11:41:cf:e8:0f:47:d1: d5:f6:26:a7:52:ec:d0:af:41:2c:3d:f0:8c:d8:b5: 33:41:d3:92:7e:4a:89:68:89:11:e4:7e:2e:48:c8: 9f:11:80:08:10:0a:87:c5:d3:43:80:3c:1d:00:b7: 82:86:a0:a2:5a:09:ee:0e:55:d2:db:53:b3:11:f9: b1:33:29:d3:b2:c2:3b:4e:71:cd:10:a2:e7:3b:11: a6:f1:f5:6b:f3:13:02:97:68:4b:46:1c:71:ec:ee: 50:c1:ca:16:59:52:5f:f7:47:93:72:47:d2:8e:c1: ea:ed:ef:a6:fd:68:0b:97:45:b5:bf:7f:00:18:7a: 2c:1c:b5:23:31:f0:52:79:9b:ec:71:50:df:50:c5: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B7:9D:7E:96:18:58:07:2F:E7:DE:0D:B3:A7:0C:16:9A:13:61:1E X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:90:0d:ff:19:f8:7d:6b:aa:35:c2:57:ba:9a:d1:48:b1:02: 87:41:07:29:22:e4:6a:b1:3d:30:d0:c1:bd:33:5f:c2:43:d4: 35:1d:9a:6d:c1:8a:37:37:07:41:e9:77:31:d1:26:c2:d9:42: 37:e0:24:50:d5:a7:c1:a2:78:ee:0e:09:ff:17:6c:40:b5:41: 01:ee:91:d2:50:6d:37:a5:f3:23:f3:cb:4a:ad:12:38:3d:c7: 22:3f:f9:e9:02:aa:ef:06:82:63:e0:e2:9b:95:9e:b0:4a:4b: f1:18:6d:80:dd:c7:90:de:5c:71:b3:46:bc:d9:4a:cd:4b:08: a9:be:27:ce:30:2a:70:ea:d6:6f:af:41:36:f4:79:fa:57:77: 65:e2:89:9a:df:ab:d8:1a:9a:b0:9a:3c:9a:10:27:ed:5a:44: 1c:7f:d3:5b:e1:34:b7:82:f4:ac:f3:1d:11:d3:5e:75:14:fc: bd:67:90:8c:24:fa:1f:56:f6:4a:a6:8b:51:b4:d1:69:0e:fa: 63:61:6d:3a:a1:e7:f6:89:97:b8:2b:78:e8:b3:d2:bc:5c:9c: 74:28:1b:66:52:36:9e:e1:98:bd:d4:95:dc:2f:9a:f6:5d:a0: 25:e9:db:19:03:3c:5d:fb:23:ff:59:a9:63:f8:eb:42:d8:e5: 46:73:5d:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwODA5MDYxMjUzWhcNMjUwODE2MDYxMjUzWjAYMRYwFAYD VQQDEw02ODk2ZTZlNS0xYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhT15qkboKbhr3j4Jgl/QcYK9GiJWD/yvs64wJ6WpgyNTK6ftpTbE7ZLo8iu EJ6Zsbui3FbQdlHdPEf9qEC2jo6BN+a87I5JGwDGxCg+bgGb7QxV1rzgkX1vK22v y6UP4H2tdCjiyqJketzAQ3Q+1RFBz+gPR9HV9ianUuzQr0EsPfCM2LUzQdOSfkqJ aIkR5H4uSMifEYAIEAqHxdNDgDwdALeChqCiWgnuDlXS21OzEfmxMynTssI7TnHN EKLnOxGm8fVr8xMCl2hLRhxx7O5QwcoWWVJf90eTckfSjsHq7e+m/WgLl0W1v38A GHosHLUjMfBSeZvscVDfUMUK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO3nX6W GFgHL+feDbOnDBaaE2EeMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPkA3/Gfh9a6o1wle6mtFIsQKHQQcpIuRqsT0w0MG9M1/CQ9Q1HZpt wYo3NwdB6Xcx0SbC2UI34CRQ1afBonjuDgn/F2xAtUEB7pHSUG03pfMj88tKrRI4 PcciP/npAqrvBoJj4OKblZ6wSkvxGG2A3ceQ3lxxs0a82UrNSwipvifOMCpw6tZv r0E29Hn6V3dl4oma36vYGpqwmjyaECftWkQcf9Nb4TS3gvSs8x0R0151FPy9Z5CM JPofVvZKpotRtNFpDvpjYW06oef2iZe4K3jos9K8XJx0KBtmUjae4Zi91JXcL5r2 XaAl6dsZAzxd+yP/Walj+OtC2OVGc13H -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:03 2025 by rpki-client