$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: 9DwUVwZdnJvOlXSmoNfNQpUIuw43lFEoTiw9RDPp/78= Subject key identifier: 23:84:E8:E5:B7:08:08:17:D3:E7:FA:DC:DB:60:CA:1B:52:C9:A3:3C Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 03B1 Signing time: Sun 03 Aug 2025 01:16:48 +0000 Manifest this update: Sun 03 Aug 2025 01:16:48 +0000 Manifest next update: Sun 10 Aug 2025 01:16:48 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: u1MGid1bZ/DPgkRjRuh7DsGsM/BFIVXudav8JX2Q00s=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Aug 3 01:16:48 2025 GMT Not After : Aug 10 01:16:48 2025 GMT Subject: CN=688eb880-7d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:91:00:a2:d3:d4:42:19:d7:83:bd:16:80: 24:a9:18:3b:0b:9e:54:86:cf:be:e1:50:9f:2f:6b: b9:3e:54:50:86:dc:8c:d3:14:08:e0:87:68:b5:aa: a4:20:04:d3:f1:83:55:35:77:5b:e9:73:c5:d0:dd: be:e4:99:8b:5a:87:8d:e3:87:ff:0c:6c:91:72:73: 6e:73:93:57:4d:71:33:d3:95:7d:4f:05:e0:c1:fb: a6:4e:4a:06:b7:24:dd:b6:65:64:15:cd:67:83:2f: 8d:1e:7a:4d:a3:c7:c7:cb:a0:8d:f4:2a:c1:b0:08: 23:e5:b2:c6:da:92:d2:e5:70:45:d4:4e:a3:1b:1c: d0:1d:9d:a0:ce:16:df:49:ac:bd:44:b5:ff:6f:ed: 35:27:40:3e:dd:fa:1e:5a:a8:04:aa:35:71:5f:5c: 08:e9:45:69:b5:6b:33:28:22:13:81:1e:21:b9:f0: b6:4b:9b:3d:f3:76:9f:b0:6e:3f:a9:b2:ef:eb:f5: 85:03:9c:21:cd:27:7c:12:7a:41:5c:a4:3b:74:11: b1:c5:71:ab:07:c9:e4:16:fe:14:75:f9:32:1d:86: b5:d8:cc:fe:ec:4f:ea:d7:8f:75:62:2c:8e:d7:08: 82:ed:fe:6f:5e:33:2c:eb:db:28:96:d0:8a:98:45: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:E8:E5:B7:08:08:17:D3:E7:FA:DC:DB:60:CA:1B:52:C9:A3:3C X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:42:14:46:af:ba:6a:b1:63:f0:bb:6f:63:88:21:46:fd: 02:ce:6f:2c:72:d3:86:83:2a:f4:9f:5c:53:ea:f3:1f:e9:cf: 96:9c:b0:8c:d1:bf:1a:ab:5b:a4:41:16:db:62:b1:64:c8:a6: 5f:9b:47:00:f6:03:1a:a9:60:ff:1f:21:69:20:ef:e6:6b:14: a9:e9:ad:ef:89:3b:e0:80:7e:5e:fe:78:31:ec:a1:b0:93:9f: d5:8c:5f:c1:81:37:c0:5d:78:c2:96:19:01:1e:17:01:d2:c1: ea:30:73:c4:b1:53:66:e1:50:93:8f:9b:a7:28:b9:33:ac:cf: 63:9c:4f:aa:5d:68:90:81:fc:2a:57:aa:a6:7e:15:ff:cc:12: d6:30:ca:73:a6:0c:0f:d4:38:81:2f:60:b4:9b:4b:24:26:98: 07:3a:4e:4e:c1:22:27:97:97:27:78:23:ce:1a:09:9e:d1:15: b2:af:58:29:fb:88:1e:6e:8f:ed:25:a3:3d:4d:7c:16:a9:d4: 9d:42:d4:0f:c0:aa:80:e2:db:2c:ef:97:ee:0f:a5:45:6c:8b: 2c:58:20:af:fd:6e:25:c6:b4:a6:92:68:7b:2f:fb:1e:6d:5d: da:5b:82:91:c8:e4:7c:bb:77:c0:9d:26:f6:6d:51:6f:ac:9c: 9a:23:0d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjUwODAzMDExNjQ4WhcNMjUwODEwMDExNjQ4WjAYMRYwFAYD VQQDEw02ODhlYjg4MC03ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5uRAKLT1EIZ14O9FoAkqRg7C55Uhs++4VCfL2u5PlRQhtyM0xQI4Idotaqk IATT8YNVNXdb6XPF0N2+5JmLWoeN44f/DGyRcnNuc5NXTXEz05V9TwXgwfumTkoG tyTdtmVkFc1ngy+NHnpNo8fHy6CN9CrBsAgj5bLG2pLS5XBF1E6jGxzQHZ2gzhbf Say9RLX/b+01J0A+3foeWqgEqjVxX1wI6UVptWszKCITgR4hufC2S5s983afsG4/ qbLv6/WFA5whzSd8EnpBXKQ7dBGxxXGrB8nkFv4UdfkyHYa12Mz+7E/q1491YiyO 1wiC7f5vXjMs69soltCKmEWLrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOE6OW3 CAgX0+f63NtgyhtSyaM8MB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBRkIURq+6arFj8LtvY4ghRv0Czm8sctOGgyr0n1xT6vMf6c+WnLCM 0b8aq1ukQRbbYrFkyKZfm0cA9gMaqWD/HyFpIO/maxSp6a3viTvggH5e/ngx7KGw k5/VjF/BgTfAXXjClhkBHhcB0sHqMHPEsVNm4VCTj5unKLkzrM9jnE+qXWiQgfwq V6qmfhX/zBLWMMpzpgwP1DiBL2C0m0skJpgHOk5OwSInl5cneCPOGgme0RWyr1gp +4gebo/tJaM9TXwWqdSdQtQPwKqA4tss75fuD6VFbIssWCCv/W4lxrSmkmh7L/se bV3aW4KRyOR8u3fAnSb2bVFvrJyaIw03 -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:42 2025 by rpki-client