$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: p4Wfp+7qN9mjN1SjYGUlxEwj8QtdyrwdLvfjBa8EkOc= Subject key identifier: 45:CA:19:A5:91:9D:78:57:B2:FE:29:6A:3F:13:7B:35:79:EB:6C:01 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 089D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1390 Signing time: Fri 18 Jul 2025 19:49:37 +0000 Manifest this update: Fri 18 Jul 2025 19:49:36 +0000 Manifest next update: Fri 25 Jul 2025 19:49:36 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: l/lS2CwgGUvXcBBkbnkLpGjBv1S/Z/3NnhZ56Sj0SvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2205 (0x89d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Jul 18 19:49:36 2025 GMT Not After : Jul 25 19:49:36 2025 GMT Subject: CN=687aa551-6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:56:29:ad:f2:0f:9f:03:22:53:3e:b7:b7: 65:6e:5d:1b:7a:15:2d:a9:e5:ed:0c:9a:27:44:37: 64:27:08:a7:70:93:7c:68:e3:3f:2e:da:fc:18:bb: ad:ae:e1:b8:98:bb:cf:8f:fd:95:68:70:ae:ee:5b: f0:53:c4:0b:49:f3:10:0e:8f:bb:83:54:4d:b7:3b: 2a:3c:7e:d2:f4:c3:04:33:99:f9:b9:ba:26:a3:13: b8:64:02:82:6f:69:0a:cd:a1:76:e0:63:34:47:46: ae:d6:df:46:10:f6:ad:d2:de:4a:58:f2:8f:ed:22: b1:ab:a7:1f:a0:1f:25:f7:eb:f3:5b:40:21:80:72: 60:5d:53:3a:2f:e2:94:ba:3a:b5:f8:2d:be:47:80: b3:2a:3b:90:c4:ff:cc:da:7e:58:00:77:e7:97:07: 04:c8:fb:a3:89:25:50:41:df:52:26:be:cd:19:5e: d9:52:e3:b9:0d:4c:71:bd:e9:c3:6d:c0:77:80:7d: 18:f7:b7:dd:1e:e4:84:67:a0:56:0d:b2:5b:06:4a: e8:47:d6:29:6c:e7:f9:35:b5:15:8f:74:09:52:a7: 3c:40:5f:c1:7d:1b:ee:8c:60:29:70:16:ae:3b:6e: de:43:fa:10:81:03:ab:f0:aa:7f:3a:ee:49:37:87: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:19:A5:91:9D:78:57:B2:FE:29:6A:3F:13:7B:35:79:EB:6C:01 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:27:ca:b2:28:b1:de:54:bc:ad:e2:01:d2:b7:73:db:55:0c: 34:b6:b9:51:dc:7c:d4:c6:6d:c2:5a:91:63:0c:97:e3:b1:d5: a1:e8:eb:57:76:f6:19:10:64:b8:9f:6f:fc:9a:9d:da:68:cf: ac:25:91:72:70:01:8d:45:ff:04:a3:9d:3f:b2:0a:b3:7b:a3: 06:d2:b5:7b:0e:c1:98:43:4d:cf:92:85:ba:05:50:f0:0b:f9: 17:bb:ae:02:0f:14:33:13:25:27:de:dc:fb:a9:bb:45:a3:d2: 6f:6a:c7:c1:db:98:36:4e:a1:3e:cc:a5:cc:15:eb:07:a4:e9: fb:ec:c9:ad:6e:70:20:bf:73:00:30:93:ab:a1:87:43:fc:7d: d5:06:fd:b1:b2:ff:ba:f8:1a:62:24:82:9c:7a:9c:36:10:d8: f2:65:27:a3:82:82:5e:ab:a4:51:96:0e:16:bf:c1:e1:93:4f: 86:26:6b:39:c8:06:0c:f9:2a:f2:bf:54:ca:d6:64:34:cd:29: 74:45:96:b9:f7:bb:07:74:b5:64:c4:d9:de:59:88:12:56:d8: 22:9d:d1:9f:c9:9f:1a:1f:0f:f3:d5:dd:53:41:54:db:49:97: 40:6c:66:a3:d3:12:6d:e4:f1:29:5b:cf:82:c1:6a:2c:dd:2f: 6b:36:22:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwNzE4MTk0OTM2WhcNMjUwNzI1MTk0OTM2WjAYMRYwFAYD VQQDEw02ODdhYTU1MS02Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxixWKa3yD58DIlM+t7dlbl0behUtqeXtDJonRDdkJwincJN8aOM/Ltr8GLut ruG4mLvPj/2VaHCu7lvwU8QLSfMQDo+7g1RNtzsqPH7S9MMEM5n5ubomoxO4ZAKC b2kKzaF24GM0R0au1t9GEPat0t5KWPKP7SKxq6cfoB8l9+vzW0AhgHJgXVM6L+KU ujq1+C2+R4CzKjuQxP/M2n5YAHfnlwcEyPujiSVQQd9SJr7NGV7ZUuO5DUxxvenD bcB3gH0Y97fdHuSEZ6BWDbJbBkroR9YpbOf5NbUVj3QJUqc8QF/BfRvujGApcBau O27eQ/oQgQOr8Kp/Ou5JN4dIYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXKGaWR nXhXsv4paj8TezV562wBMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJ8qyKLHeVLyt4gHSt3PbVQw0trlR3HzUxm3CWpFjDJfjsdWh6OtX dvYZEGS4n2/8mp3aaM+sJZFycAGNRf8Eo50/sgqze6MG0rV7DsGYQ03PkoW6BVDw C/kXu64CDxQzEyUn3tz7qbtFo9JvasfB25g2TqE+zKXMFesHpOn77MmtbnAgv3MA MJOroYdD/H3VBv2xsv+6+BpiJIKcepw2ENjyZSejgoJeq6RRlg4Wv8Hhk0+GJms5 yAYM+Sryv1TK1mQ0zSl0RZa597sHdLVkxNneWYgSVtgindGfyZ8aHw/z1d1TQVTb SZdAbGaj0xJt5PEpW8+CwWos3S9rNiJy -----END CERTIFICATE-----Generated at Sun Jul 20 06:39:34 2025 by rpki-client