$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft File: FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft (raw, json) Hash identifier: NC03oFeI0D0M2XKL2XipyCGlH5ou2L+87YcpSJLE0zQ= Subject key identifier: 6D:3C:95:0A:F6:E9:68:A2:4B:28:5F:40:95:B2:54:E5:3D:39:E3:79 Authority key identifier: 15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 Certificate issuer: /CN=A91187C1/serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 08:31:57 +0000 Manifest this update: Sat 05 Jul 2025 08:31:56 +0000 Manifest next update: Sat 12 Jul 2025 08:31:56 +0000 Files and hashes: 1: FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl (hash: tLXFgY87JMOms5dc3Q6AUXkCwTNjKmgfT8MO/xwNKS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187C1, serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001 Validity Not Before: Jul 5 08:31:56 2025 GMT Not After : Jul 12 08:31:56 2025 GMT Subject: CN=6868e2fd-213b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:7c:af:62:f7:e1:a4:cd:de:e2:c2:75:72: 2f:61:2d:4e:c3:2a:ff:8f:b1:5d:ae:5e:60:13:62: 42:43:ad:ad:2d:38:e4:a8:6f:9b:9e:32:2d:86:f9: 40:28:dc:99:c9:f2:70:86:26:c5:5a:1a:80:86:be: 6a:84:fc:66:df:db:d7:e5:b2:71:8a:2b:08:cb:a3: 2e:05:0f:d1:f6:39:f2:9b:46:92:ea:62:21:1a:b7: 5a:d9:91:a6:64:23:b5:e9:a1:53:01:da:1d:45:3e: 7d:b8:ce:b6:fe:ab:ce:a1:4d:f0:d4:4e:72:c1:36: e8:56:20:8b:00:84:16:ac:52:40:2b:0b:59:76:78: 83:a3:2c:9d:9b:a7:1d:82:55:64:9e:bb:a9:69:d4: 1f:8f:8e:e1:10:ea:1b:9b:ec:1b:f5:26:8e:3b:2e: 01:c3:c3:ee:5b:81:0d:63:c7:26:a7:72:d3:af:ec: 2e:01:0e:f2:0b:0e:72:6d:fd:55:c6:43:03:c4:77: a1:4a:de:fd:57:42:35:16:61:dc:cd:fa:e8:d8:bf: ac:3f:1c:6a:ed:83:ff:7f:e6:78:de:de:cd:f5:16: b8:26:a7:19:32:2b:07:1d:d1:e6:f6:8b:86:e0:12: 0b:f0:79:81:ba:8d:07:87:7f:80:21:f6:d4:06:d7: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3C:95:0A:F6:E9:68:A2:4B:28:5F:40:95:B2:54:E5:3D:39:E3:79 X509v3 Authority Key Identifier: keyid:15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:51:fd:19:fb:26:6c:7a:6f:b9:ab:f4:ef:da:bc:c5:2e:31: 57:b0:ff:9c:b2:82:da:f4:a3:ed:f8:25:45:ef:d2:21:74:b7: 3e:2a:9d:fc:ea:8f:fc:5f:90:48:76:3c:38:62:02:30:6d:e4: 38:6c:a1:58:59:e3:73:48:b3:06:c2:bf:9c:da:51:4c:9a:72: 35:de:8e:db:95:cb:30:b3:b4:f8:da:a6:4d:8b:f8:e1:f6:e6: 46:98:4f:95:a2:82:fb:be:b9:93:34:88:27:57:78:a4:4d:37: 76:5e:46:0f:8c:5f:58:b7:66:a4:dd:ab:31:61:65:c6:ae:f3: 65:b0:19:94:dd:bb:fa:c6:ae:03:c5:50:43:35:0b:81:9a:72: 37:24:aa:da:a6:59:04:d7:1f:dc:a3:43:6b:89:94:bb:dd:9c: 7a:3f:ae:52:62:f1:80:86:2a:c6:0a:bc:3c:f4:24:9d:a4:35: 15:f4:b8:7e:70:e4:d9:ad:51:90:28:ed:51:66:ce:8c:cb:fd: ff:24:85:06:40:da:21:3b:b0:59:4c:d1:d5:50:4b:72:61:68: ba:49:6c:0b:79:86:a0:7e:48:4d:86:95:1b:0b:49:22:23:28: c4:4e:70:56:2f:43:64:81:4b:b6:cb:d0:a6:ef:d0:d2:4a:48: be:e7:98:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODdDMTExMC8GA1UEBRMoMTU1QUQ2MjgxRTA1NTBDQjRGREQ2MUQyRjExNzY5QzI2 ODRBNzAwMTAeFw0yNTA3MDUwODMxNTZaFw0yNTA3MTIwODMxNTZaMBgxFjAUBgNV BAMTDTY4NjhlMmZkLTIxM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9Z3yvYvfhpM3e4sJ1ci9hLU7DKv+PsV2uXmATYkJDra0tOOSob5ueMi2G+UAo 3JnJ8nCGJsVaGoCGvmqE/Gbf29flsnGKKwjLoy4FD9H2OfKbRpLqYiEat1rZkaZk I7XpoVMB2h1FPn24zrb+q86hTfDUTnLBNuhWIIsAhBasUkArC1l2eIOjLJ2bpx2C VWSeu6lp1B+PjuEQ6hub7Bv1Jo47LgHDw+5bgQ1jxyanctOv7C4BDvILDnJt/VXG QwPEd6FK3v1XQjUWYdzN+ujYv6w/HGrtg/9/5nje3s31FrgmpxkyKwcd0eb2i4bg EgvweYG6jQeHf4Ah9tQG17S/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbTyVCvbp aKJLKF9AlbJU5T0543kwHwYDVR0jBBgwFoAUFVrWKB4FUMtP3WHS8RdpwmhKcAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4N0MxLzJGNjkyMzNDNTcw QTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10UDNXSFM4UmRwd21oS2NB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlZyV0tCNEZVTXRQM1dIUzhSZHB3bWhLY0FFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 N0MxLzJGNjkyMzNDNTcwQTExRjBCNTM4Q0Y2NUM0RjlBRTAyL0ZWcldLQjRGVU10 UDNXSFM4UmRwd21oS2NBRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBR/Rn7Jmx6b7mr9O/avMUuMVew/5yygtr0o+34JUXv0iF0tz4qnfzq j/xfkEh2PDhiAjBt5DhsoVhZ43NIswbCv5zaUUyacjXejtuVyzCztPjapk2L+OH2 5kaYT5Wigvu+uZM0iCdXeKRNN3ZeRg+MX1i3ZqTdqzFhZcau82WwGZTdu/rGrgPF UEM1C4GacjckqtqmWQTXH9yjQ2uJlLvdnHo/rlJi8YCGKsYKvDz0JJ2kNRX0uH5w 5NmtUZAo7VFmzozL/f8khQZA2iE7sFlM0dVQS3JhaLpJbAt5hqB+SE2GlRsLSSIj KMROcFYvQ2SBS7bL0Kbv0NJKSL7nmOk= -----END CERTIFICATE-----Generated at Mon Jul 7 09:24:39 2025 by rpki-client