$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: nh6tjWoHnx7JRtA7tIJK35pgDZ2V74Km8OS+zY0xQeE= Subject key identifier: 49:91:75:41:B5:E2:8D:D3:3A:49:DE:AD:1E:09:49:AB:61:42:6E:90 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 52 Signing time: Sat 09 Aug 2025 07:43:52 +0000 Manifest this update: Sat 09 Aug 2025 07:43:52 +0000 Manifest next update: Sat 16 Aug 2025 07:43:52 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: smN/KdBKC0mN+DOAcxqgK/MEgVYZRc0rACbBiu1JOiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: Aug 9 07:43:52 2025 GMT Not After : Aug 16 07:43:52 2025 GMT Subject: CN=6896fc38-ce06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:78:1e:55:6d:48:03:55:74:06:ff:7a:88: e8:be:56:5e:03:ea:63:99:0a:01:9c:86:60:57:59: 1e:16:32:0a:12:c8:89:b8:2a:55:d0:d0:31:9b:e5: 59:9c:6d:4b:0d:ff:56:3b:92:aa:8d:e9:c1:ce:a0: 0e:91:a3:2c:ce:1d:fc:6a:70:bf:7f:89:b4:cd:f1: b9:95:ff:10:af:ec:6c:fe:93:5d:3d:d9:c8:83:86: 5f:01:e6:1c:9f:85:f7:08:20:66:57:6b:08:64:a8: 79:5d:f2:2e:35:7b:44:48:be:78:77:32:bf:b0:a9: 37:9d:c4:c7:7f:c4:25:b6:7c:26:99:3f:29:e7:bc: 63:96:27:25:66:5a:b9:a9:42:e7:90:ed:20:05:fa: 00:40:55:82:40:36:cd:b4:6b:ce:35:e2:c1:ba:44: 51:55:e9:5c:90:25:b8:d1:59:db:a7:8d:d9:f1:1e: 43:6a:53:7b:ef:47:66:ff:6b:bd:58:16:d3:8d:c3: 67:19:d0:23:60:4f:a6:e3:23:ec:cc:ab:ee:f2:7b: 55:0f:44:39:2c:6f:c6:3f:49:dc:5c:7d:67:4b:d9: 1f:72:99:25:88:4a:b0:29:6b:7b:32:76:42:bb:8e: bf:28:b4:35:bc:23:86:50:1a:da:37:b0:fd:94:e0: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:91:75:41:B5:E2:8D:D3:3A:49:DE:AD:1E:09:49:AB:61:42:6E:90 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:20:f6:4e:2b:eb:f4:4d:a2:6e:23:49:94:35:95:b1:7f:91: 7e:24:c7:d3:bb:28:e7:78:88:d2:3e:23:1a:55:c4:72:c0:91: 3d:23:7a:49:97:9d:ce:09:f5:65:84:69:30:56:03:6c:55:6c: 7e:9c:f6:e9:f7:53:f7:be:05:85:3c:61:80:3e:a9:54:bd:d6: 4a:89:ae:93:b5:33:0a:29:af:e2:86:84:16:8d:bf:a6:24:10: 82:49:e2:77:f9:f9:17:a1:ff:12:7c:3c:ee:36:ce:f7:32:20: 94:92:2c:c2:32:28:65:83:be:23:36:10:4b:a7:82:b3:b5:e7: a2:d0:69:d3:10:da:9a:8a:da:7a:77:8f:f5:97:4e:2b:5d:c0: 91:76:f1:93:6f:61:2c:ef:91:be:91:6c:e7:41:fc:51:c0:01: 73:ed:a1:e7:aa:45:b9:b5:38:ea:52:cd:89:de:7f:88:42:b0: a5:03:51:55:c8:e3:b7:19:c5:ad:53:fd:2c:4a:5d:18:e8:d8: ce:96:ff:69:df:d1:4f:cb:16:f0:2c:70:80:d7:a3:f7:c5:b8: bb:d4:f4:22:0c:51:a8:c4:52:0d:9f:1a:1b:40:15:70:79:6a: 80:7e:a8:67:b6:00:fa:27:68:94:6d:1e:b5:c6:7c:b6:61:d3: ce:cf:8b:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoMTRENUFEMjcyMkFDQTg2QUQzNEYwRjlBMzQ0NzI2Q0I2 Njk4MDgzMTAeFw0yNTA4MDkwNzQzNTJaFw0yNTA4MTYwNzQzNTJaMBgxFjAUBgNV BAMTDTY4OTZmYzM4LWNlMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLbHgeVW1IA1V0Bv96iOi+Vl4D6mOZCgGchmBXWR4WMgoSyIm4KlXQ0DGb5Vmc bUsN/1Y7kqqN6cHOoA6RoyzOHfxqcL9/ibTN8bmV/xCv7Gz+k1092ciDhl8B5hyf hfcIIGZXawhkqHld8i41e0RIvnh3Mr+wqTedxMd/xCW2fCaZPynnvGOWJyVmWrmp QueQ7SAF+gBAVYJANs20a8414sG6RFFV6VyQJbjRWdunjdnxHkNqU3vvR2b/a71Y FtONw2cZ0CNgT6bjI+zMq+7ye1UPRDksb8Y/SdxcfWdL2R9ymSWISrApa3sydkK7 jr8otDW8I4ZQGto3sP2U4PXLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSZF1QbXi jdM6Sd6tHglJq2FCbpAwHwYDVR0jBBgwFoAUFNWtJyKsqGrTTw+aNEcmy2aYCDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2LzkzMDZBMkM0RjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk5XdEp5S3NxR3JUVHctYU5FY215MmFZQ0RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2LzkzMDZBMkM0RjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdy VFR3LWFORWNteTJhWUNERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgg9k4r6/RNom4jSZQ1lbF/kX4kx9O7KOd4iNI+IxpVxHLAkT0jekmX nc4J9WWEaTBWA2xVbH6c9un3U/e+BYU8YYA+qVS91kqJrpO1Mwopr+KGhBaNv6Yk EIJJ4nf5+Reh/xJ8PO42zvcyIJSSLMIyKGWDviM2EEungrO156LQadMQ2pqK2np3 j/WXTitdwJF28ZNvYSzvkb6RbOdB/FHAAXPtoeeqRbm1OOpSzYnef4hCsKUDUVXI 47cZxa1T/SxKXRjo2M6W/2nf0U/LFvAscIDXo/fFuLvU9CIMUajEUg2fGhtAFXB5 aoB+qGe2APonaJRtHrXGfLZh087Pi/k= -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:32 2025 by rpki-client