$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: mIHsumkEIRgaCGiEe2yzRMjgmgaPnsWQZPeQ4PdpCkU= Subject key identifier: 19:BE:E7:B4:F6:1D:E3:F4:FF:10:27:BA:50:37:FF:84:94:B8:E3:E8 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0AEC Signing time: Fri 18 Jul 2025 19:37:39 +0000 Manifest this update: Fri 18 Jul 2025 19:37:39 +0000 Manifest next update: Fri 25 Jul 2025 19:37:39 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: 45pCvuv1ZxGrS7YzmuVmGkdyWkIJdH0hhCpCZ8qo0Uk=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Jul 18 19:37:39 2025 GMT Not After : Jul 25 19:37:39 2025 GMT Subject: CN=687aa283-186d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:78:c8:f2:e6:52:80:2a:19:b8:33:4e:7e:45: 92:3b:af:ae:07:e9:74:60:f4:0c:23:9e:c8:06:1e: bc:68:fe:33:ac:e9:c7:91:2d:12:27:59:ec:68:34: 0d:dd:7d:4d:08:16:bc:e8:8a:1f:00:9d:1c:a1:60: 5d:c1:6b:4b:67:46:85:ef:cb:6b:a9:81:5a:0e:5d: 3f:22:29:c9:8f:7a:06:10:92:27:dd:f0:02:dd:ee: 22:ef:a8:c9:5b:8d:b8:93:b5:bb:83:e2:4e:23:be: 72:1d:83:04:d3:09:f9:13:80:49:56:6f:ac:b8:20: c9:c7:30:b0:0d:df:07:d0:30:87:1a:a9:e0:ac:ed: 05:73:d4:2f:fb:5d:79:ac:21:e8:36:3c:f0:d3:85: 7b:30:66:f7:c9:e3:7c:16:e2:0c:64:b9:56:97:9c: 7a:46:1e:12:21:ec:fd:89:e1:e4:19:79:cd:c3:8e: 8e:ca:e6:af:a4:8a:98:cd:61:dd:c4:f2:92:dd:41: cc:21:e4:f0:25:05:0e:d3:ed:6a:0e:3a:1d:f9:5b: 30:44:68:f7:f2:1e:66:cf:f2:e0:92:7a:7e:14:59: a8:53:0b:5b:20:8e:a2:06:8e:25:d3:64:db:3c:97: fa:24:02:d4:c2:b0:e6:cd:5c:4e:24:89:3b:b8:8f: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BE:E7:B4:F6:1D:E3:F4:FF:10:27:BA:50:37:FF:84:94:B8:E3:E8 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:27:36:3e:78:54:1b:f7:97:aa:16:ac:ee:04:ed:3a:6f: bc:76:a8:14:9c:a9:f9:0c:4d:1a:56:7e:e3:b6:3c:78:38:87: 3c:a3:d7:7d:39:d5:07:1a:a7:d3:2d:7b:2d:b1:57:5e:33:fa: 94:ff:a8:ab:5e:19:ea:a7:33:bb:0d:a5:94:0f:ad:29:cd:e7: 6f:f3:c3:2d:fe:4e:a8:20:f5:5d:6d:c0:fa:c2:b2:d8:71:34: 9e:0a:89:f3:a9:ae:8b:ca:85:ee:69:24:69:61:6b:3d:fe:a3: da:63:b1:6c:0c:1a:6f:b0:fe:cc:81:e8:ec:62:f8:f0:f4:6e: 64:5e:81:d1:ba:25:f2:27:ec:dc:45:51:9b:0e:28:9c:52:f0: 05:4b:c3:de:a2:4e:31:e0:3f:37:12:ec:06:32:30:45:a5:2a: a8:19:5d:13:0a:c6:79:f3:1b:ea:27:dc:d2:b5:2f:b2:5f:42: f0:7d:05:e1:58:4f:b4:80:b3:36:cf:b6:71:81:fb:ee:e4:fa: 67:ce:ab:54:af:00:d5:0a:3c:29:ba:c6:56:f5:7c:3f:e7:5e: 6b:f7:31:8d:10:4f:8d:3e:ba:e3:02:c8:1d:91:59:22:3f:c2: 6d:e8:86:f6:67:a5:67:3f:a5:62:d1:20:d5:d6:b8:5b:c0:a7: d8:8f:16:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNzE4MTkzNzM5WhcNMjUwNzI1MTkzNzM5WjAYMRYwFAYD VQQDEw02ODdhYTI4My0xODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/HjI8uZSgCoZuDNOfkWSO6+uB+l0YPQMI57IBh68aP4zrOnHkS0SJ1nsaDQN 3X1NCBa86IofAJ0coWBdwWtLZ0aF78trqYFaDl0/IinJj3oGEJIn3fAC3e4i76jJ W424k7W7g+JOI75yHYME0wn5E4BJVm+suCDJxzCwDd8H0DCHGqngrO0Fc9Qv+115 rCHoNjzw04V7MGb3yeN8FuIMZLlWl5x6Rh4SIez9ieHkGXnNw46OyuavpIqYzWHd xPKS3UHMIeTwJQUO0+1qDjod+VswRGj38h5mz/Lgknp+FFmoUwtbII6iBo4l02Tb PJf6JALUwrDmzVxOJIk7uI8+mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm+57T2 HeP0/xAnulA3/4SUuOPoMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCinic2PnhUG/eXqhas7gTtOm+8dqgUnKn5DE0aVn7jtjx4OIc8o9d9 OdUHGqfTLXstsVdeM/qU/6irXhnqpzO7DaWUD60pzedv88Mt/k6oIPVdbcD6wrLY cTSeConzqa6LyoXuaSRpYWs9/qPaY7FsDBpvsP7MgejsYvjw9G5kXoHRuiXyJ+zc RVGbDiicUvAFS8Peok4x4D83EuwGMjBFpSqoGV0TCsZ58xvqJ9zStS+yX0LwfQXh WE+0gLM2z7Zxgfvu5PpnzqtUrwDVCjwpusZW9Xw/515r9zGNEE+NPrrjAsgdkVki P8Jt6Ib2Z6VnP6Vi0SDV1rhbwKfYjxa7 -----END CERTIFICATE-----Generated at Sun Jul 20 06:29:43 2025 by rpki-client