$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: Ry8/zDapJyAVR8aFn7hEP5hnc02j0ORagvI50ZmcGWY= Subject key identifier: 10:8D:29:4B:EE:62:1F:07:F5:EC:8D:C2:25:35:9F:A8:75:B0:D2:D9 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: BC Signing time: Mon 21 Jul 2025 06:03:58 +0000 Manifest this update: Mon 21 Jul 2025 06:03:58 +0000 Manifest next update: Mon 28 Jul 2025 06:03:58 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: 58haz/96uDZa7Cr4+mMieAjlGteFiQI/j/XIkRK5nTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Jul 21 06:03:58 2025 GMT Not After : Jul 28 06:03:58 2025 GMT Subject: CN=687dd84e-e89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:4f:6f:51:bf:b3:7c:ef:88:6b:ad:4c:ee: 03:dc:5e:89:78:e9:b5:d6:0f:71:d2:35:d8:27:4c: 41:55:f2:c0:28:6e:8e:78:31:a4:17:05:2d:d9:b4: b7:a3:21:af:a1:87:ba:42:06:63:4f:63:2f:b5:c6: 27:40:07:d1:5f:16:05:23:c4:85:b0:4d:8d:0a:3f: 74:34:7d:15:eb:fa:c6:a6:67:ea:12:14:db:00:e6: 7f:7a:18:b9:bd:82:cd:9e:9a:74:10:f4:94:2e:0e: 65:9b:a2:ac:b4:02:55:e6:8f:e4:6f:e4:e9:95:91: 4c:59:f9:cb:69:77:2d:16:32:6b:f0:2d:59:55:f2: b6:ab:f9:4b:e8:2e:01:6c:0e:03:87:e5:ae:85:6a: 2f:65:91:31:a8:02:2c:69:98:27:b6:f9:e8:12:0a: e7:e4:53:c0:37:bc:ae:9f:8b:c8:4a:f0:24:f8:4a: 56:81:18:62:77:3b:eb:4e:7d:69:aa:33:44:b3:9b: ad:f7:d9:e8:d5:0e:e9:08:2d:36:84:b7:d7:4e:c1: 51:96:d7:53:6b:81:b4:35:19:5a:b7:3b:9a:fb:65: cc:0e:c3:dd:58:ac:21:cb:b7:f7:4a:f9:f4:bb:98: ba:d8:50:20:af:43:07:3a:04:36:e7:ae:f5:af:4c: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8D:29:4B:EE:62:1F:07:F5:EC:8D:C2:25:35:9F:A8:75:B0:D2:D9 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:95:1c:5a:17:47:c1:5e:42:79:a3:ad:34:5b:5e:47:c5:48: fa:0f:ff:bb:71:aa:dc:32:e6:16:1a:36:70:5c:39:cc:ed:fb: e9:f5:ed:ea:5d:34:4f:50:ae:6c:fe:d5:ff:41:06:5e:92:96: 36:75:bb:ef:1e:7e:0e:2f:4d:46:ac:36:9b:92:01:e5:fd:e5: d1:4a:a5:dc:21:70:89:c4:6c:ef:17:c1:a2:a4:9e:fe:53:bb: 8c:f9:cd:07:68:b9:73:2e:45:35:8d:c9:da:90:a6:9e:dd:75: 30:2d:e9:7b:c5:33:b4:0a:52:7a:9c:0e:e9:fc:38:af:93:22: a1:ed:20:e6:9f:73:71:7b:54:24:27:d4:fd:af:07:2e:bc:61: 90:36:2b:6a:ee:d1:ce:ea:05:1c:1d:44:70:34:5a:70:20:26: 42:d3:34:62:33:71:c6:9c:2c:2d:79:17:65:1f:32:85:8b:1d: 3a:33:29:92:9d:1e:0c:d6:f4:77:bf:b9:c8:0a:80:ad:a5:95: 61:7c:7e:34:bd:08:10:3a:21:00:7d:5c:06:32:cd:eb:e2:19: 53:77:03:5f:46:f3:6a:15:6f:b2:3d:4d:3f:83:d6:b6:3c:c1: 1b:85:13:21:7a:0a:d7:e0:73:12:85:bf:79:ba:3c:0d:72:29: 5e:8d:89:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwNzIxMDYwMzU4WhcNMjUwNzI4MDYwMzU4WjAYMRYwFAYD VQQDEw02ODdkZDg0ZS1lODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vhPb1G/s3zviGutTO4D3F6JeOm11g9x0jXYJ0xBVfLAKG6OeDGkFwUt2bS3 oyGvoYe6QgZjT2MvtcYnQAfRXxYFI8SFsE2NCj90NH0V6/rGpmfqEhTbAOZ/ehi5 vYLNnpp0EPSULg5lm6KstAJV5o/kb+TplZFMWfnLaXctFjJr8C1ZVfK2q/lL6C4B bA4Dh+WuhWovZZExqAIsaZgntvnoEgrn5FPAN7yun4vISvAk+EpWgRhidzvrTn1p qjNEs5ut99no1Q7pCC02hLfXTsFRltdTa4G0NRlatzua+2XMDsPdWKwhy7f3Svn0 u5i62FAgr0MHOgQ25671r0wLaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCNKUvu Yh8H9eyNwiU1n6h1sNLZMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKlRxaF0fBXkJ5o600W15HxUj6D/+7carcMuYWGjZwXDnM7fvp9e3q XTRPUK5s/tX/QQZekpY2dbvvHn4OL01GrDabkgHl/eXRSqXcIXCJxGzvF8GipJ7+ U7uM+c0HaLlzLkU1jcnakKae3XUwLel7xTO0ClJ6nA7p/DivkyKh7SDmn3Nxe1Qk J9T9rwcuvGGQNitq7tHO6gUcHURwNFpwICZC0zRiM3HGnCwteRdlHzKFix06MymS nR4M1vR3v7nICoCtpZVhfH40vQgQOiEAfVwGMs3r4hlTdwNfRvNqFW+yPU0/g9a2 PMEbhRMhegrX4HMShb95ujwNcilejYlX -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:24 2025 by rpki-client