$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: 6Oj03TEGS6N//Cs5fYK6H1AlYNkXY6oc1EKq8XZ2pT4= Subject key identifier: 2E:82:52:84:D2:A0:BD:E5:51:B0:5F:EA:B1:89:E8:7A:69:6A:B5:15 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 086F Signing time: Fri 18 Jul 2025 21:07:52 +0000 Manifest this update: Fri 18 Jul 2025 21:07:52 +0000 Manifest next update: Fri 25 Jul 2025 21:07:52 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: vLoEFmYeEO3UW1cnTnElJLTx1BAfOe6ePl7SkXz5F1k=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: 669892085D5D11F0AAE8C847C4F9AE02.roa (hash: YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=) 6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Jul 18 21:07:52 2025 GMT Not After : Jul 25 21:07:52 2025 GMT Subject: CN=687ab7a8-5a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:23:c2:58:43:c6:43:dd:f2:25:cc:12:f8: 84:e6:8c:f3:69:35:5b:a7:0f:95:a5:c8:de:e5:91: 50:09:62:d9:28:2a:3b:4d:63:48:ff:11:d0:ce:2d: 61:1f:2a:a1:be:ca:2f:93:a1:ee:4b:69:a6:68:ea: 83:56:6b:4e:05:31:d1:2e:71:17:a5:92:f5:16:19: 4a:92:ab:06:f5:96:48:4b:60:bc:38:a6:c2:12:52: 6b:82:fa:58:e8:b2:d1:d4:eb:bd:c9:3a:73:90:9f: 65:e0:78:de:4e:be:ad:3d:64:81:24:7c:13:bb:fb: 1c:bf:a2:a4:cb:ac:da:39:74:b3:23:e5:d7:87:47: b4:98:3c:18:87:6f:ae:f2:e0:64:ef:9f:b2:4a:84: ad:7b:e9:be:0f:d7:26:cc:4a:37:c8:fa:e5:ce:e9: c1:de:e5:45:3d:c4:95:4d:11:e9:d0:2a:d1:47:30: 02:3a:fa:b9:31:3c:74:da:bf:f3:27:05:98:0f:54: b8:7c:99:a8:71:f6:44:9e:85:b8:0b:18:7a:03:2f: 84:b3:64:46:9d:d3:17:e5:01:0b:4f:22:c4:7d:44: 93:1a:b5:08:0a:0b:56:2d:0e:a8:34:47:20:6c:65: 22:74:4a:bd:a9:37:43:8f:28:c1:05:7d:ae:04:28: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:52:84:D2:A0:BD:E5:51:B0:5F:EA:B1:89:E8:7A:69:6A:B5:15 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d2:a1:d7:6f:68:ff:98:f1:b2:3d:0a:84:42:31:eb:e6:33: 00:80:92:57:67:83:62:bb:3c:3a:f4:18:a5:7b:80:58:eb:b6: d2:4f:28:50:35:64:c7:be:3d:e7:1e:1c:0e:f7:db:78:82:61: e3:5a:1a:7e:9c:0f:9d:5e:54:13:5d:64:56:93:46:dc:d6:df: 69:03:cc:6f:e1:bd:6b:a2:bd:99:31:90:35:79:07:f7:1f:65: 33:57:25:16:6b:45:77:7b:25:72:37:37:a2:6e:78:17:14:a0: f9:73:23:79:2c:bb:13:86:fc:8f:01:94:0b:f0:b9:90:16:be: a0:4b:c8:f7:c2:6d:3a:5e:b9:39:a8:ff:41:51:85:d7:4b:bb: 2f:c3:94:a5:03:fc:1c:79:e2:cf:f0:eb:e7:3f:46:e9:e2:52: fe:88:fe:8b:6f:02:df:73:e0:3b:87:0d:52:7a:27:de:5c:e2: 1c:88:e2:69:db:02:5a:79:76:f8:24:28:44:8b:84:9e:45:d4: 9f:b6:05:2e:ee:93:c4:77:66:77:1a:b4:4f:18:42:3c:79:37: 6a:00:ca:ce:ff:cf:11:b4:08:ee:25:87:79:7f:9b:a7:0a:82: 13:bf:54:28:97:f9:db:59:4b:12:7c:b8:9a:ee:7e:f6:9a:04: 8a:f7:7c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUwNzE4MjEwNzUyWhcNMjUwNzI1MjEwNzUyWjAYMRYwFAYD VQQDEw02ODdhYjdhOC01YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnq4jwlhDxkPd8iXMEviE5ozzaTVbpw+Vpcje5ZFQCWLZKCo7TWNI/xHQzi1h Hyqhvsovk6HuS2mmaOqDVmtOBTHRLnEXpZL1FhlKkqsG9ZZIS2C8OKbCElJrgvpY 6LLR1Ou9yTpzkJ9l4HjeTr6tPWSBJHwTu/scv6Kky6zaOXSzI+XXh0e0mDwYh2+u 8uBk75+ySoSte+m+D9cmzEo3yPrlzunB3uVFPcSVTRHp0CrRRzACOvq5MTx02r/z JwWYD1S4fJmocfZEnoW4Cxh6Ay+Es2RGndMX5QELTyLEfUSTGrUICgtWLQ6oNEcg bGUidEq9qTdDjyjBBX2uBCgFPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6CUoTS oL3lUbBf6rGJ6HpparUVMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU0qHXb2j/mPGyPQqEQjHr5jMAgJJXZ4Niuzw69Bile4BY67bSTyhQ NWTHvj3nHhwO99t4gmHjWhp+nA+dXlQTXWRWk0bc1t9pA8xv4b1ror2ZMZA1eQf3 H2UzVyUWa0V3eyVyNzeibngXFKD5cyN5LLsThvyPAZQL8LmQFr6gS8j3wm06Xrk5 qP9BUYXXS7svw5SlA/wceeLP8OvnP0bp4lL+iP6LbwLfc+A7hw1SeifeXOIciOJp 2wJaeXb4JChEi4SeRdSftgUu7pPEd2Z3GrRPGEI8eTdqAMrO/88RtAjuJYd5f5un CoITv1Qol/nbWUsSfLia7n72mgSK93zy -----END CERTIFICATE-----Generated at Sun Jul 20 14:29:23 2025 by rpki-client