$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: jfvquFc3swgYRmoMXLbY+vlrgDC62VrjrmD6m268+FU= Subject key identifier: 4E:B5:C2:13:E3:0F:28:2C:75:2C:1C:77:E4:E8:B5:EF:F8:F6:D8:02 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04D5 Signing time: Sat 09 Aug 2025 00:16:43 +0000 Manifest this update: Sat 09 Aug 2025 00:16:42 +0000 Manifest next update: Sat 16 Aug 2025 00:16:42 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: kfyFUQI3FhhWhyIlK4l5SiM87i9mwe+5hTPMbvCCb/Y=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Aug 9 00:16:42 2025 GMT Not After : Aug 16 00:16:42 2025 GMT Subject: CN=6896936a-4c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:36:a5:32:37:8a:23:91:22:1e:df:9d:3d: 10:11:88:82:1f:ae:d1:32:18:25:2d:08:dc:6d:9c: 7e:72:a1:2e:dc:03:18:08:84:f8:5a:a3:98:66:92: 1b:c1:9e:ba:8d:26:d8:28:b7:79:81:06:5c:42:57: a9:a9:d6:a9:38:08:8e:5d:6f:52:30:35:12:06:92: 74:97:27:db:23:7d:59:9c:36:5e:c6:b9:d8:95:90: d4:09:ab:6b:3d:7c:b8:7b:22:65:47:53:b7:1b:99: 16:38:ce:b9:63:72:60:13:62:c3:73:0a:6f:62:94: b4:4f:a9:ee:14:93:7b:7b:0e:37:01:00:4a:e9:42: c3:c7:3b:a1:78:6e:0d:77:d2:31:d5:f0:e9:c7:84: d6:16:c6:3d:28:2e:9e:86:94:fa:58:59:1b:2f:69: ff:81:e7:e9:75:5f:55:5a:50:a3:d1:b1:77:20:3d: 92:bf:64:7d:e6:f8:f4:24:d2:29:4e:29:1b:b2:b6: a3:31:d7:7d:3b:c4:ca:cc:8f:4c:36:f7:58:b7:20: 7a:7d:14:be:5d:17:9d:db:3a:b2:14:a3:6d:76:56: 09:86:e4:40:d4:7e:7f:78:ea:5a:ff:f1:8f:de:c5: 78:e4:4e:9e:50:54:24:c8:ec:5f:33:4b:46:fe:43: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:C2:13:E3:0F:28:2C:75:2C:1C:77:E4:E8:B5:EF:F8:F6:D8:02 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5d:c8:2c:eb:c4:30:cf:a7:23:ec:20:41:ca:b0:17:aa:ca: d4:2a:43:ad:df:a6:1d:92:35:62:d5:cd:bd:b9:c6:6b:b4:0b: e5:10:03:95:75:55:f3:d3:ba:eb:27:ca:6a:c8:ad:84:c2:7c: c7:b7:bc:c6:7d:7a:ab:0a:b7:e8:61:79:a2:96:55:af:3f:c4: 2d:a2:9d:bd:6c:77:f0:bd:e7:63:f4:84:80:db:d1:46:2e:43: ac:fd:7f:c8:9b:38:82:5d:6c:42:3d:be:3d:a3:74:c9:43:da: f6:98:8f:ba:37:b3:d1:e5:41:75:5b:10:c0:57:3a:d3:b0:aa: 46:0c:68:b7:0b:d5:bd:9b:e9:99:2d:3b:f8:54:f3:1e:47:65: c5:ce:01:95:4c:a5:bd:f1:3a:67:52:73:19:c6:81:e5:f7:68: 0a:73:7a:ab:9e:91:76:30:77:c6:94:05:93:60:d6:c4:74:73: 7a:7e:e9:a9:4f:3e:5c:1b:23:d4:63:36:6e:fa:87:f7:50:01: 0d:74:ca:e4:fb:e1:2d:75:f0:b0:44:91:c5:3b:ce:82:ad:2a: c9:df:d3:fc:33:1f:3d:b6:49:d6:35:39:b8:79:04:aa:ad:5e: ee:49:11:b1:53:7d:cb:4e:47:f8:a1:9c:6f:11:fe:dd:db:18: a8:11:29:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwODA5MDAxNjQyWhcNMjUwODE2MDAxNjQyWjAYMRYwFAYD VQQDEw02ODk2OTM2YS00YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21s2pTI3iiORIh7fnT0QEYiCH67RMhglLQjcbZx+cqEu3AMYCIT4WqOYZpIb wZ66jSbYKLd5gQZcQlepqdapOAiOXW9SMDUSBpJ0lyfbI31ZnDZexrnYlZDUCatr PXy4eyJlR1O3G5kWOM65Y3JgE2LDcwpvYpS0T6nuFJN7ew43AQBK6ULDxzuheG4N d9Ix1fDpx4TWFsY9KC6ehpT6WFkbL2n/gefpdV9VWlCj0bF3ID2Sv2R95vj0JNIp TikbsrajMdd9O8TKzI9MNvdYtyB6fRS+XRed2zqyFKNtdlYJhuRA1H5/eOpa//GP 3sV45E6eUFQkyOxfM0tG/kOMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE61whPj DygsdSwcd+Tote/49tgCMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXcgs68Qwz6cj7CBByrAXqsrUKkOt36YdkjVi1c29ucZrtAvlEAOV dVXz07rrJ8pqyK2EwnzHt7zGfXqrCrfoYXmillWvP8Qtop29bHfwvedj9ISA29FG LkOs/X/ImziCXWxCPb49o3TJQ9r2mI+6N7PR5UF1WxDAVzrTsKpGDGi3C9W9m+mZ LTv4VPMeR2XFzgGVTKW98TpnUnMZxoHl92gKc3qrnpF2MHfGlAWTYNbEdHN6fump Tz5cGyPUYzZu+of3UAENdMrk++EtdfCwRJHFO86CrSrJ39P8Mx89tknWNTm4eQSq rV7uSRGxU33LTkf4oZxvEf7d2xioESlk -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:45 2025 by rpki-client