$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: rODTXdK/zO52kNl1Yo58Ww8PcQkQXtj2avQdvr9c/QI= Subject key identifier: 29:FD:68:47:20:89:CC:9A:A7:F2:92:D5:3A:06:B3:69:A5:77:D0:22 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 14AB Signing time: Fri 18 Jul 2025 18:41:34 +0000 Manifest this update: Fri 18 Jul 2025 18:41:34 +0000 Manifest next update: Fri 25 Jul 2025 18:41:34 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: KWIcGlbFD/TRyD8WBevoh/zUj1FRQ2+yUW13+Bj1D10=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Jul 18 18:41:34 2025 GMT Not After : Jul 25 18:41:34 2025 GMT Subject: CN=687a955e-ec5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:d8:9c:eb:b5:93:a5:b0:12:5e:2c:ed:fa: 36:49:a9:ac:2b:62:63:72:61:cf:85:5c:21:2a:ef: 86:c6:9d:8a:68:09:1b:60:47:40:73:c9:51:5b:bc: fa:92:74:36:41:13:f7:d7:aa:4d:36:2f:80:40:0d: 14:4e:42:72:4c:3f:90:bc:0e:00:9e:7a:26:c8:48: 39:7f:ba:c6:d0:0a:3d:40:6d:36:df:a9:17:12:95: ca:21:b7:0e:b0:c1:01:d6:a9:41:60:47:4c:72:36: 77:32:7e:f9:16:53:33:1a:99:0c:d5:2f:71:9c:df: 3d:e3:f0:41:e4:ba:e3:85:3c:c5:6c:62:de:f0:05: 9c:74:b4:fd:11:8f:89:65:b3:f9:68:79:30:71:84: 0e:c4:2c:78:9c:5e:19:13:4f:89:01:42:26:37:cd: 7e:6f:07:1b:11:3c:d2:89:16:e5:f7:71:d3:ec:50: 19:0c:15:1c:d5:35:b5:0e:f1:79:47:ec:f1:98:11: 20:02:cf:52:4b:c8:e9:c0:23:98:f7:84:6c:74:13: 81:c4:70:8e:94:80:85:3c:83:fa:23:fa:fe:79:fb: d5:09:62:19:3b:77:38:aa:d0:4d:b3:f6:04:70:88: d2:01:f7:a4:cd:3c:e6:9e:52:2e:a1:ec:77:f9:a7: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:68:47:20:89:CC:9A:A7:F2:92:D5:3A:06:B3:69:A5:77:D0:22 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:a0:38:31:ed:51:2c:82:e7:13:68:a5:7b:b0:1f:81:6c: d4:db:47:10:f2:29:f2:30:19:f0:eb:e9:73:76:a4:8b:3d:7c: 57:2f:76:5f:19:ed:0b:75:c0:27:6c:43:ee:cc:05:2e:dd:69: a9:aa:dd:1f:9c:3b:ab:79:93:14:af:df:4c:e0:54:03:e0:1a: c0:45:4b:37:a0:ab:1b:be:44:15:28:b4:0a:80:ff:c5:0c:12: 9b:02:63:7d:03:4b:02:00:e4:89:9b:6d:92:d9:2e:f7:3b:ef: 0e:80:df:57:c4:b9:08:be:b2:80:03:89:eb:67:03:cd:bd:92: 58:85:57:5e:48:0b:a5:12:70:fc:06:02:e7:d2:f8:82:8e:ed: 5f:df:24:b4:63:d0:e3:9b:bb:cc:4b:44:c8:5f:0d:41:e5:e2: 69:bb:72:64:c5:fa:ce:4a:92:07:a2:f9:38:70:47:76:4b:b6: 31:53:b6:0b:d3:a2:38:3a:64:82:ba:8b:05:ae:48:b4:d6:f3: 27:07:49:5f:03:2e:59:c1:64:df:80:a8:91:3c:8e:69:d5:aa: 30:a3:76:0b:b4:98:7c:2e:46:dc:54:71:d9:f9:5e:c8:ed:5c: 2a:d0:28:89:41:32:cf:0c:5c:c8:54:2d:83:41:46:e5:12:f1: 7c:86:08:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwNzE4MTg0MTM0WhcNMjUwNzI1MTg0MTM0WjAYMRYwFAYD VQQDEw02ODdhOTU1ZS1lYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPnYnOu1k6WwEl4s7fo2SamsK2JjcmHPhVwhKu+Gxp2KaAkbYEdAc8lRW7z6 knQ2QRP316pNNi+AQA0UTkJyTD+QvA4AnnomyEg5f7rG0Ao9QG0236kXEpXKIbcO sMEB1qlBYEdMcjZ3Mn75FlMzGpkM1S9xnN894/BB5LrjhTzFbGLe8AWcdLT9EY+J ZbP5aHkwcYQOxCx4nF4ZE0+JAUImN81+bwcbETzSiRbl93HT7FAZDBUc1TW1DvF5 R+zxmBEgAs9SS8jpwCOY94RsdBOBxHCOlICFPIP6I/r+efvVCWIZO3c4qtBNs/YE cIjSAfekzTzmnlIuoex3+aenFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn9aEcg icyap/KS1ToGs2mld9AiMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFoaA4Me1RLILnE2ile7AfgWzU20cQ8inyMBnw6+lzdqSLPXxXL3Zf Ge0LdcAnbEPuzAUu3Wmpqt0fnDureZMUr99M4FQD4BrARUs3oKsbvkQVKLQKgP/F DBKbAmN9A0sCAOSJm22S2S73O+8OgN9XxLkIvrKAA4nrZwPNvZJYhVdeSAulEnD8 BgLn0viCju1f3yS0Y9Djm7vMS0TIXw1B5eJpu3JkxfrOSpIHovk4cEd2S7YxU7YL 06I4OmSCuosFrki01vMnB0lfAy5ZwWTfgKiRPI5p1aowo3YLtJh8LkbcVHHZ+V7I 7Vwq0CiJQTLPDFzIVC2DQUblEvF8hggC -----END CERTIFICATE-----Generated at Sun Jul 20 07:54:26 2025 by rpki-client