$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: IxTVf9R01L/4jCBBcrEdjaRktVkQwdKs51qNO+erHeQ= Subject key identifier: 4B:52:83:8D:D3:9E:B6:B0:0A:71:97:D3:E4:0B:0D:4F:49:30:74:C0 Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 053A Signing time: Wed 06 Aug 2025 23:58:51 +0000 Manifest this update: Wed 06 Aug 2025 23:58:50 +0000 Manifest next update: Wed 13 Aug 2025 23:58:50 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: ikpj0x9SSUmTRW9v0uZFXESwKipZthNU2rYcE7HPKq8=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Aug 6 23:58:50 2025 GMT Not After : Aug 13 23:58:50 2025 GMT Subject: CN=6893ec3a-8a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:f4:0d:93:51:32:c6:29:78:21:24:db:6b: 1b:50:76:26:6c:79:f5:a4:59:0c:3f:ce:8d:0f:8d: 4f:75:90:0d:23:bf:1d:85:03:4c:74:82:89:50:44: 11:91:7d:cc:18:01:03:dc:dd:ac:ec:bd:80:63:18: 82:24:d7:36:26:8d:3b:c7:06:e4:d5:2d:c2:23:2c: fc:a4:29:4b:9f:4d:d6:1b:50:67:0f:29:20:38:1d: ae:dc:a6:ac:5b:17:9e:5f:31:02:df:67:01:08:f5: c0:01:4d:45:aa:4b:ff:52:08:07:33:cd:85:34:0f: 58:a6:52:67:30:2a:ae:20:0c:e1:47:4b:fe:71:af: bf:83:3d:c7:e9:e9:95:98:ab:79:fe:04:1e:f2:5d: 69:a4:48:ed:6f:38:93:1b:5d:1b:77:0e:d1:b9:80: 7b:17:7f:80:bc:61:86:ae:69:18:89:b8:81:1a:58: 86:71:43:24:07:07:af:dd:5b:d3:62:05:08:cd:90: 09:2e:2a:70:fa:e4:56:fa:1b:20:43:0e:22:59:b9: d0:a1:37:2f:b0:37:92:a5:40:44:97:09:65:9c:59: c6:47:c3:fa:09:56:fa:c0:a7:55:45:b8:d6:9d:ee: 2a:23:2f:e9:99:b6:0f:66:10:35:96:0c:2a:bf:e2: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:52:83:8D:D3:9E:B6:B0:0A:71:97:D3:E4:0B:0D:4F:49:30:74:C0 X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:92:2a:97:65:a3:69:50:27:06:4a:f9:83:a0:e2:0c:1f:8c: a1:f8:65:e3:e4:bc:f5:10:16:14:bc:0b:d8:4d:19:02:a9:7a: 0f:de:51:54:9e:0c:0d:71:aa:c4:40:d9:a6:55:c7:75:69:6e: 51:f7:69:4c:4c:7e:8a:24:a7:a3:24:51:b4:da:a9:54:0d:78: af:9e:90:5c:de:53:e9:53:2f:fb:60:2a:35:20:c2:19:8e:90: 08:4a:4c:46:5f:63:d1:06:9a:44:47:3c:7e:8e:56:60:3b:0b: 23:13:d6:78:29:c9:82:5b:1e:43:15:95:02:4c:47:17:f1:15: e2:57:da:11:aa:43:2b:bf:d1:59:75:ba:aa:95:4c:1e:52:4f: c9:e4:18:f9:59:b3:22:c0:af:db:fe:09:86:4b:b9:65:f5:37: 1d:09:40:5a:af:52:19:db:68:6d:f7:89:54:e9:2f:a1:2c:31: fb:e2:7c:b8:19:88:f2:46:3d:4d:fb:2f:63:39:45:ce:20:bb: 68:73:6c:7a:d3:9e:02:31:55:28:1a:21:01:32:dc:69:48:a2: 09:4f:91:3c:f8:84:97:f6:a2:60:2c:be:34:dd:d7:86:1a:b0: 48:e6:ab:ad:b4:f7:13:a5:10:35:b8:34:39:bb:08:53:f6:b6: f7:14:b7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwODA2MjM1ODUwWhcNMjUwODEzMjM1ODUwWjAYMRYwFAYD VQQDEw02ODkzZWMzYS04YTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fP0DZNRMsYpeCEk22sbUHYmbHn1pFkMP86ND41PdZANI78dhQNMdIKJUEQR kX3MGAED3N2s7L2AYxiCJNc2Jo07xwbk1S3CIyz8pClLn03WG1BnDykgOB2u3Kas WxeeXzEC32cBCPXAAU1Fqkv/UggHM82FNA9YplJnMCquIAzhR0v+ca+/gz3H6emV mKt5/gQe8l1ppEjtbziTG10bdw7RuYB7F3+AvGGGrmkYibiBGliGcUMkBwev3VvT YgUIzZAJLipw+uRW+hsgQw4iWbnQoTcvsDeSpUBElwllnFnGR8P6CVb6wKdVRbjW ne4qIy/pmbYPZhA1lgwqv+JjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtSg43T nrawCnGX0+QLDU9JMHTAMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPkiqXZaNpUCcGSvmDoOIMH4yh+GXj5Lz1EBYUvAvYTRkCqXoP3lFU ngwNcarEQNmmVcd1aW5R92lMTH6KJKejJFG02qlUDXivnpBc3lPpUy/7YCo1IMIZ jpAISkxGX2PRBppERzx+jlZgOwsjE9Z4KcmCWx5DFZUCTEcX8RXiV9oRqkMrv9FZ dbqqlUweUk/J5Bj5WbMiwK/b/gmGS7ll9TcdCUBar1IZ22ht94lU6S+hLDH74ny4 GYjyRj1N+y9jOUXOILtoc2x6054CMVUoGiEBMtxpSKIJT5E8+ISX9qJgLL403deG GrBI5quttPcTpRA1uDQ5uwhT9rb3FLeG -----END CERTIFICATE-----Generated at Thu Aug 7 03:48:44 2025 by rpki-client