$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: 7Jct4a+24HqzbdSHIvRzQfHNmdZm6WvwiWZBnEdTH2U= Subject key identifier: 5F:02:E6:76:BF:C6:98:28:76:75:1D:6B:67:0A:1E:6D:5F:F5:71:56 Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 0533 Signing time: Thu 24 Jul 2025 23:51:16 +0000 Manifest this update: Thu 24 Jul 2025 23:51:16 +0000 Manifest next update: Thu 31 Jul 2025 23:51:16 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: hQbAQhZR9Fra+jxhKwl+FpG8HgbOu7Z2DPAHk3dxuEM=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Jul 24 23:51:16 2025 GMT Not After : Jul 31 23:51:16 2025 GMT Subject: CN=6882c6f4-edfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:7c:a2:2e:73:bd:82:d3:5a:c1:27:d5:2f: 48:32:c8:17:73:71:01:cb:50:b1:5c:f6:16:a1:a1: 75:04:81:70:ec:70:1a:b2:f6:65:d2:8b:fd:09:c8: 41:d9:a7:c2:f5:cb:1a:4c:6c:4a:c6:f4:fe:dc:d1: 9c:22:d5:dc:b2:9c:bc:a9:ba:6b:c6:b9:72:5f:ac: 30:52:33:bb:1e:d0:f2:ad:4f:5a:e4:48:f3:04:78: cb:4b:e6:4c:b7:8e:4c:9f:9f:91:87:b7:cc:85:41: 78:77:7f:03:d5:78:59:0c:aa:a6:8e:60:40:7b:a1: db:6a:bc:ee:79:64:74:7e:a0:8d:c1:b2:a8:36:ee: c5:1f:90:22:8b:db:7d:5f:63:57:fe:96:ba:87:f0: 21:51:dd:9c:47:b0:8a:af:1b:16:0f:e5:e8:05:10: 12:d8:4a:c5:ee:d3:7d:4c:10:98:29:27:f5:b9:b0: 26:4f:49:76:42:1c:bc:e0:c1:06:7c:89:fc:74:5a: 1d:5f:f7:44:da:bc:a4:6e:90:29:a3:7e:6f:92:28: d9:03:02:32:22:31:04:10:2d:b8:0c:b6:e8:8e:18: 34:47:44:b0:d3:9e:3b:86:48:ec:14:54:4e:5a:34: 78:3a:89:c2:9e:36:58:75:48:62:13:7e:89:ef:9c: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:02:E6:76:BF:C6:98:28:76:75:1D:6B:67:0A:1E:6D:5F:F5:71:56 X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:db:c8:24:de:a8:d6:cb:25:25:af:e1:92:38:23:6d:3b:09: 74:e6:28:98:db:85:62:59:d5:34:1c:86:50:35:85:e0:57:50: 7b:ba:57:0c:f5:af:52:ef:83:04:8e:91:be:67:9d:48:09:28: 67:2e:61:cd:0a:49:a6:8a:4e:3d:65:20:76:20:3b:78:c1:84: 7e:32:e9:27:ab:f0:5a:5a:8e:3b:26:f5:92:8a:f9:0c:59:20: 50:e8:21:db:f9:be:04:b1:9f:69:dd:5f:7b:c3:92:0b:82:e6: c1:68:f3:50:51:63:b0:07:eb:73:4c:06:9b:ba:0d:fa:73:93: af:e2:1c:56:9e:39:68:95:3e:d4:37:40:75:1e:5d:51:1f:4d: 03:2e:f2:31:31:97:c9:ee:2c:46:fe:3d:a0:e3:45:e3:fb:47: 65:8a:47:14:08:71:5d:e5:9b:ac:12:ff:ec:4d:f4:8b:83:ac: a6:ad:af:4c:8f:51:19:98:71:fb:b1:1f:69:a2:fc:ec:28:aa: 78:5e:6e:74:63:6f:1f:a9:11:dd:27:3b:83:e9:92:9d:27:c0: 1f:3a:24:6b:8f:59:05:17:07:2a:9f:0c:17:82:b9:a0:82:54: 45:bc:71:5f:0b:00:65:04:bd:51:ae:10:8b:39:ab:42:5c:95: f3:5f:45:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwNzI0MjM1MTE2WhcNMjUwNzMxMjM1MTE2WjAYMRYwFAYD VQQDEw02ODgyYzZmNC1lZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscB8oi5zvYLTWsEn1S9IMsgXc3EBy1CxXPYWoaF1BIFw7HAasvZl0ov9CchB 2afC9csaTGxKxvT+3NGcItXcspy8qbprxrlyX6wwUjO7HtDyrU9a5EjzBHjLS+ZM t45Mn5+Rh7fMhUF4d38D1XhZDKqmjmBAe6HbarzueWR0fqCNwbKoNu7FH5Aii9t9 X2NX/pa6h/AhUd2cR7CKrxsWD+XoBRAS2ErF7tN9TBCYKSf1ubAmT0l2Qhy84MEG fIn8dFodX/dE2rykbpApo35vkijZAwIyIjEEEC24DLbojhg0R0Sw0547hkjsFFRO WjR4OonCnjZYdUhiE36J75zu9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8C5na/ xpgodnUda2cKHm1f9XFWMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV28gk3qjWyyUlr+GSOCNtOwl05iiY24ViWdU0HIZQNYXgV1B7ulcM 9a9S74MEjpG+Z51ICShnLmHNCkmmik49ZSB2IDt4wYR+Muknq/BaWo47JvWSivkM WSBQ6CHb+b4EsZ9p3V97w5ILgubBaPNQUWOwB+tzTAabug36c5Ov4hxWnjlolT7U N0B1Hl1RH00DLvIxMZfJ7ixG/j2g40Xj+0dlikcUCHFd5ZusEv/sTfSLg6ymra9M j1EZmHH7sR9povzsKKp4Xm50Y28fqRHdJzuD6ZKdJ8AfOiRrj1kFFwcqnwwXgrmg glRFvHFfCwBlBL1RrhCLOatCXJXzX0X3 -----END CERTIFICATE-----Generated at Sat Jul 26 11:44:26 2025 by rpki-client