$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: bwKilbjl8vW060/KUBhnY36gMCmz5AtbDQ5i2C+9roQ= Subject key identifier: A8:22:C6:EE:F1:87:95:62:17:DC:E0:03:67:92:9B:85:9D:FB:F5:BB Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 047B Signing time: Fri 19 Sep 2025 00:31:19 +0000 Manifest this update: Fri 19 Sep 2025 00:31:18 +0000 Manifest next update: Fri 26 Sep 2025 00:31:18 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: V5k6yHxiTluB8W8YxpeAvkwZN2CuoD3N7k5lDKigW3U=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Sep 19 00:31:18 2025 GMT Not After : Sep 26 00:31:18 2025 GMT Subject: CN=68cca456-2a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:7b:a0:c8:da:86:37:68:70:47:c7:4c:46: fd:cd:97:16:79:f6:23:24:9b:62:10:03:29:5e:c9: 0c:2c:95:e5:26:dd:c7:45:7b:6d:a7:3d:9d:20:da: e2:29:42:68:4a:2b:3d:42:3b:42:4c:75:03:34:32: bf:fc:db:c6:5b:eb:52:59:c7:fd:98:0b:f0:5e:3f: 63:ed:36:fd:71:af:bd:ca:51:dd:b1:3e:a3:83:a5: d7:81:ee:b8:d8:2b:51:8a:9c:07:1d:e4:4f:de:3b: 78:35:d2:f1:dd:f1:1d:93:dd:58:85:b9:5a:58:62: 22:26:32:14:26:68:64:65:8a:7f:c7:56:58:f4:d5: b8:de:02:53:81:8f:4e:ff:69:b2:5c:56:d5:c2:48: 93:40:00:ed:d9:17:f0:14:9f:66:1d:e4:8c:c6:4e: 18:4f:49:14:6f:0f:bc:9f:b7:33:75:8f:d7:d1:8a: ce:ce:c7:05:b5:3f:e0:ce:9d:9e:b3:dc:ea:ba:3b: f1:91:34:92:53:2c:c9:cd:67:b9:11:9d:fd:73:b4: 88:e4:18:57:79:58:1b:10:68:2a:ad:89:30:9c:da: 6f:b1:ba:0f:8a:1f:c4:e4:7e:cb:93:f8:86:a8:99: db:d1:03:c6:2d:13:51:60:5b:53:cb:1c:f7:6f:db: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:C6:EE:F1:87:95:62:17:DC:E0:03:67:92:9B:85:9D:FB:F5:BB X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:de:dc:3e:4f:2b:d7:0e:00:8b:99:cc:73:58:df:d8:39:21: ff:5f:ca:df:20:cc:fd:7c:42:14:25:ad:79:a7:3e:17:26:e7: 9b:36:2b:45:f0:13:f4:50:eb:42:8d:dd:66:19:b0:bb:1c:55: 56:0b:90:31:01:49:26:9b:8f:da:b2:45:c7:c9:10:59:28:bd: 38:ca:2f:1d:c0:4f:b8:5c:1d:71:5f:28:0e:fc:08:48:56:a3: e7:19:cb:0a:d6:2b:be:98:4c:97:9c:1e:61:cb:61:eb:fa:2d: ff:04:0a:64:c6:48:19:08:0b:aa:18:94:4b:c8:af:c4:f3:93: 6c:68:8e:ec:49:fa:c2:0a:2c:72:bc:5c:4d:ea:0e:d0:1a:5f: 22:d3:57:33:31:cf:84:2e:e5:f0:a2:48:f2:0a:c3:97:a7:66: 28:af:8c:ea:e6:8f:ee:f8:51:7e:0e:56:50:5a:2d:61:e3:a2: 09:7d:e1:12:be:17:3e:eb:5f:2c:d8:26:11:d1:c0:1b:b5:c3: 4a:fd:9c:af:46:33:48:82:b9:55:d5:71:eb:af:a9:f5:3f:c2: ed:91:65:4a:09:ab:0b:7b:63:e5:d6:ef:0e:6d:7c:2f:6c:9d: b2:81:30:e3:67:93:77:82:3f:9a:4d:5f:2f:04:7e:06:a7:26: 5c:55:5b:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwOTE5MDAzMTE4WhcNMjUwOTI2MDAzMTE4WjAYMRYwFAYD VQQDEw02OGNjYTQ1Ni0yYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2957oMjahjdocEfHTEb9zZcWefYjJJtiEAMpXskMLJXlJt3HRXttpz2dINri KUJoSis9QjtCTHUDNDK//NvGW+tSWcf9mAvwXj9j7Tb9ca+9ylHdsT6jg6XXge64 2CtRipwHHeRP3jt4NdLx3fEdk91YhblaWGIiJjIUJmhkZYp/x1ZY9NW43gJTgY9O /2myXFbVwkiTQADt2RfwFJ9mHeSMxk4YT0kUbw+8n7czdY/X0YrOzscFtT/gzp2e s9zqujvxkTSSUyzJzWe5EZ39c7SI5BhXeVgbEGgqrYkwnNpvsboPih/E5H7Lk/iG qJnb0QPGLRNRYFtTyxz3b9vTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgixu7x h5ViF9zgA2eSm4Wd+/W7MB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi3tw+TyvXDgCLmcxzWN/YOSH/X8rfIMz9fEIUJa15pz4XJuebNitF 8BP0UOtCjd1mGbC7HFVWC5AxAUkmm4/askXHyRBZKL04yi8dwE+4XB1xXygO/AhI VqPnGcsK1iu+mEyXnB5hy2Hr+i3/BApkxkgZCAuqGJRLyK/E85NsaI7sSfrCCixy vFxN6g7QGl8i01czMc+ELuXwokjyCsOXp2Yor4zq5o/u+FF+DlZQWi1h46IJfeES vhc+618s2CYR0cAbtcNK/ZyvRjNIgrlV1XHrr6n1P8LtkWVKCasLe2Pl1u8ObXwv bJ2ygTDjZ5N3gj+aTV8vBH4GpyZcVVun -----END CERTIFICATE-----Generated at Fri Sep 19 02:48:40 2025 by rpki-client