$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: Nz/621WSCsTYcOTpMCwqs1qCKyTWzQlJtHALN9US7mQ= Subject key identifier: 96:AF:E6:B4:A1:8F:3D:58:98:FE:3F:37:92:4B:2D:9F:75:05:D7:34 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 04 Signing time: Sat 19 Jul 2025 08:31:08 +0000 Manifest this update: Sat 19 Jul 2025 08:31:07 +0000 Manifest next update: Sat 26 Jul 2025 08:31:07 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: 53rkmh45+qTMDqjbr/CKEgbq4ibyMUqZ9xKiy1nspXw=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Jul 19 08:31:07 2025 GMT Not After : Jul 26 08:31:07 2025 GMT Subject: CN=687b57cc-bd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:0f:bd:6e:5b:29:ac:ad:cf:e1:ae:9f:2d: c6:d8:ef:ca:7f:fb:a5:33:13:e1:fe:43:6f:fd:c2: ae:c3:42:07:09:2c:d6:3d:19:59:a3:53:9c:d2:de: b3:78:d1:2c:c0:fc:22:e1:e2:56:32:62:31:70:8e: ca:5a:11:b4:34:0b:80:88:29:f7:e0:f3:c3:32:57: 78:72:c5:2e:5a:e5:28:39:8f:94:14:1b:dd:39:38: fe:f1:5b:a2:ad:0d:e1:1d:64:85:49:6f:34:54:8c: ec:2f:22:b8:d4:5b:7a:1d:20:56:eb:9c:42:31:90: f4:71:90:d3:ac:af:1a:14:84:da:c7:53:bc:75:a3: 80:2b:1e:be:14:a3:be:8b:e9:b9:42:01:34:d5:76: 6d:80:4d:05:05:c5:1a:29:e9:ab:93:ae:18:35:8e: 32:ec:02:c7:64:c1:db:cc:5b:30:ef:13:e9:48:68: 64:55:a8:da:9e:54:4f:76:34:0c:fc:de:f7:7e:68: a1:03:a1:26:0e:15:f9:58:22:87:68:50:cf:aa:80: d2:b2:ef:7f:7f:91:00:5b:ba:a1:5e:12:2f:2f:bf: 5c:97:74:bc:25:a1:ae:9d:0b:c5:6e:7a:aa:e4:d7: a6:b7:62:96:00:02:b6:18:fe:c4:2a:40:6e:e4:77: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AF:E6:B4:A1:8F:3D:58:98:FE:3F:37:92:4B:2D:9F:75:05:D7:34 X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:76:11:53:10:ea:88:ed:38:5e:34:87:36:46:00:99:f6: ea:7a:64:b3:e2:7e:c3:0d:2a:6a:3d:d3:84:b7:dc:fc:14:b1: a2:dd:9c:87:61:5d:81:f8:95:e1:4e:c5:a1:96:8d:2a:86:cb: 0f:5b:67:b9:fe:9b:58:97:c0:45:e4:af:70:c4:5a:bc:3d:80: fa:1a:ce:02:08:5e:4c:7d:04:98:61:6f:c2:ee:7c:66:d4:ac: ff:e8:9d:49:20:f3:f3:f3:03:69:58:c4:0c:28:33:51:73:05: 44:a0:5a:4d:ee:9d:95:78:8b:73:b3:52:3f:50:ea:04:db:1f: 09:f6:3e:68:da:3d:56:be:dd:43:f6:67:18:1d:32:85:12:9c: f7:11:8f:46:52:30:b3:40:c7:c2:aa:e4:8f:02:58:6d:0e:50: 2f:ab:54:fb:ec:c2:39:f9:2d:5c:d0:0e:85:6b:08:eb:35:7b: fd:17:45:48:2a:e2:f5:33:77:f8:f5:15:7e:f0:0b:a4:27:69: 0a:c5:b7:2a:4a:2b:88:4e:9e:81:b1:a3:bf:87:f5:e5:da:4c: 04:54:31:f6:e0:91:51:8b:79:9e:d5:da:77:ab:c3:d5:4f:37: f9:2e:e9:1a:58:e0:e9:37:af:ad:7b:82:90:1e:b3:95:36:fb: a9:1f:ba:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTA3MTkwODMxMDdaFw0yNTA3MjYwODMxMDdaMBgxFjAUBgNV BAMTDTY4N2I1N2NjLWJkNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpSA+9blsprK3P4a6fLcbY78p/+6UzE+H+Q2/9wq7DQgcJLNY9GVmjU5zS3rN4 0SzA/CLh4lYyYjFwjspaEbQ0C4CIKffg88MyV3hyxS5a5Sg5j5QUG905OP7xW6Kt DeEdZIVJbzRUjOwvIrjUW3odIFbrnEIxkPRxkNOsrxoUhNrHU7x1o4ArHr4Uo76L 6blCATTVdm2ATQUFxRop6auTrhg1jjLsAsdkwdvMWzDvE+lIaGRVqNqeVE92NAz8 3vd+aKEDoSYOFflYIodoUM+qgNKy739/kQBbuqFeEi8vv1yXdLwloa6dC8Vueqrk 16a3YpYAArYY/sQqQG7kdzWlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlq/mtKGP PViY/j83kkstn3UF1zQwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABP0dhFTEOqI7TheNIc2RgCZ9up6ZLPifsMNKmo904S33PwUsaLdnIdh XYH4leFOxaGWjSqGyw9bZ7n+m1iXwEXkr3DEWrw9gPoazgIIXkx9BJhhb8LufGbU rP/onUkg8/PzA2lYxAwoM1FzBUSgWk3unZV4i3OzUj9Q6gTbHwn2PmjaPVa+3UP2 ZxgdMoUSnPcRj0ZSMLNAx8Kq5I8CWG0OUC+rVPvswjn5LVzQDoVrCOs1e/0XRUgq 4vUzd/j1FX7wC6QnaQrFtypKK4hOnoGxo7+H9eXaTARUMfbgkVGLeZ7V2nerw9VP N/ku6RpY4Ok3r617gpAes5U2+6kfuuU= -----END CERTIFICATE-----Generated at Sun Jul 20 18:57:17 2025 by rpki-client