$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: /hsjZZvFeMoO8ACmSW2SfUuDqIVJTXzfm+2/lpTLRTk= Subject key identifier: D4:E7:7C:94:E7:32:C7:EC:4C:61:7C:19:FF:C2:92:C8:7D:77:EE:75 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02A8 Signing time: Sat 09 Aug 2025 02:03:28 +0000 Manifest this update: Sat 09 Aug 2025 02:03:27 +0000 Manifest next update: Sat 16 Aug 2025 02:03:27 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: vJG1d/Z//jru99awA2MHYz0muOLXvYarg4jNQz0inqA=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Aug 9 02:03:27 2025 GMT Not After : Aug 16 02:03:27 2025 GMT Subject: CN=6896ac70-db33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:fd:e6:b5:b8:e1:f7:5f:79:55:a8:be:1f: 35:db:5e:69:00:a1:3b:ba:d5:d5:52:a0:3f:79:d3: 88:24:ce:b2:cd:0b:23:01:44:9d:27:de:0f:fb:83: 4b:36:2c:bf:aa:10:9a:6e:98:c3:59:96:3d:86:73: ca:94:7a:38:4e:b7:00:88:bf:95:3a:eb:86:58:e7: 88:a0:30:57:e8:ab:2a:61:a7:9f:d3:49:9b:a7:15: 51:01:b0:18:82:9a:7f:27:2d:27:53:43:a3:57:d5: 91:c1:17:78:43:ad:52:9e:b8:b9:ac:79:70:01:cf: c6:a7:c3:ab:ce:70:21:7b:30:71:b5:b4:4d:98:3a: 61:09:08:ca:87:39:f7:5e:80:9f:49:12:a4:c3:d0: 5c:bc:58:cf:b5:ba:32:b4:4f:8c:9e:83:be:ce:48: 8e:a3:98:4c:41:dd:d0:65:ad:05:00:1e:dd:72:0e: 62:7d:de:3a:69:68:bd:f2:f7:5b:53:5b:6b:68:5a: dc:fb:e8:ad:d9:80:c2:fa:64:3e:05:e2:46:08:80: d8:1c:9d:7e:75:82:37:07:13:7b:11:70:00:bf:d1: d2:c8:8d:82:7e:0f:3d:9f:a3:50:f9:e0:a4:ff:b7: 05:fb:8d:c6:6b:56:59:16:68:36:d1:30:f0:5d:63: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:7C:94:E7:32:C7:EC:4C:61:7C:19:FF:C2:92:C8:7D:77:EE:75 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:25:5a:77:5c:cd:a9:19:d7:39:a7:49:b4:2f:62:02:8b:c6: f2:16:db:c5:1f:45:d6:78:85:58:b6:12:3e:c9:25:2f:be:bc: cd:2c:ce:1a:15:42:8a:51:4b:1a:b3:32:64:1d:13:b2:24:c5: 8a:33:64:1f:f8:2f:c0:28:85:92:3e:a4:61:94:b9:da:26:32: 50:64:8a:5e:ea:4e:85:fd:dd:d5:8b:bf:c4:9d:6a:c6:ea:b3: 55:a3:80:26:53:ae:62:4e:13:5d:d7:f7:84:00:9a:ab:d3:c8: 42:b0:0c:b8:ad:5a:bb:98:f0:f7:40:54:94:8b:e3:b4:40:a7: d6:0a:a9:10:37:c7:56:fb:3c:6d:93:65:f8:cb:2c:12:08:75: b7:04:ef:c0:ac:97:d3:65:0e:26:6e:a2:35:32:8d:52:7e:93: 82:a8:97:60:d1:e2:14:57:ea:42:76:0d:8c:72:06:c3:77:19: fd:67:d7:da:2e:5c:06:99:48:c6:df:96:1c:87:13:e2:76:a8: a2:89:65:ee:ba:39:33:71:f5:f2:e0:56:24:1d:50:88:00:d9: 02:9d:8e:59:fc:ce:d8:fe:d8:9f:4e:c5:b3:7a:67:8c:53:a9: 6c:0b:04:df:2c:bc:56:06:ae:20:d0:c2:58:90:9c:48:b3:3a: c8:85:11:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUwODA5MDIwMzI3WhcNMjUwODE2MDIwMzI3WjAYMRYwFAYD VQQDEw02ODk2YWM3MC1kYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjv95rW44fdfeVWovh81215pAKE7utXVUqA/edOIJM6yzQsjAUSdJ94P+4NL Niy/qhCabpjDWZY9hnPKlHo4TrcAiL+VOuuGWOeIoDBX6KsqYaef00mbpxVRAbAY gpp/Jy0nU0OjV9WRwRd4Q61Snri5rHlwAc/Gp8OrznAhezBxtbRNmDphCQjKhzn3 XoCfSRKkw9BcvFjPtboytE+MnoO+zkiOo5hMQd3QZa0FAB7dcg5ifd46aWi98vdb U1traFrc++it2YDC+mQ+BeJGCIDYHJ1+dYI3BxN7EXAAv9HSyI2Cfg89n6NQ+eCk /7cF+43Ga1ZZFmg20TDwXWNHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTnfJTn MsfsTGF8Gf/Cksh9d+51MB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/JVp3XM2pGdc5p0m0L2ICi8byFtvFH0XWeIVYthI+ySUvvrzNLM4a FUKKUUsaszJkHROyJMWKM2Qf+C/AKIWSPqRhlLnaJjJQZIpe6k6F/d3Vi7/EnWrG 6rNVo4AmU65iThNd1/eEAJqr08hCsAy4rVq7mPD3QFSUi+O0QKfWCqkQN8dW+zxt k2X4yywSCHW3BO/ArJfTZQ4mbqI1Mo1SfpOCqJdg0eIUV+pCdg2McgbDdxn9Z9fa LlwGmUjG35YchxPidqiiiWXuujkzcfXy4FYkHVCIANkCnY5Z/M7Y/tifTsWzemeM U6lsCwTfLLxWBq4g0MJYkJxIszrIhRHa -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:11 2025 by rpki-client