$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: FVJFT4XgCeVZ78OfKbLbgcBn99ZUUDIUE6nOpAkvZf4= Subject key identifier: 0F:02:B9:8C:6B:5C:F0:8F:98:8F:8B:5F:0D:CD:95:7F:B3:91:62:9C Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 061B Signing time: Thu 18 Sep 2025 23:07:38 +0000 Manifest this update: Thu 18 Sep 2025 23:07:37 +0000 Manifest next update: Thu 25 Sep 2025 23:07:37 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: IotqlbDrRQPQTD7jMk+AQJCU2hVJyYCa2tQz3YeSDjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: Sep 18 23:07:37 2025 GMT Not After : Sep 25 23:07:37 2025 GMT Subject: CN=68cc90b9-6637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:39:b0:31:26:02:12:2d:b9:6e:53:a3:6b: f9:4c:e5:30:44:01:9e:ca:b7:88:88:ce:b9:bc:b5: f5:5e:bb:18:cb:da:ab:fc:1b:0b:47:62:b8:a0:b0: 09:d9:63:e6:ed:f4:64:0c:e0:b3:2c:a0:fe:62:c8: ca:02:1f:70:3e:e6:c2:69:54:a9:96:e8:e9:c5:02: 1a:e8:4c:26:8d:0f:b0:ea:7e:e5:01:38:91:aa:a9: 9e:3a:bb:78:94:ad:5c:b8:62:0a:5c:2e:81:e6:8a: 9e:a7:59:6d:7c:a6:ed:ac:2b:ee:5c:99:0c:e8:44: 6d:cc:e7:9a:5c:9e:e1:2c:cd:e1:66:db:6e:cd:3c: 35:8b:a9:5f:bd:7f:45:99:e1:e7:37:36:21:ca:48: da:43:72:ee:41:e2:dc:24:67:00:03:cf:d7:3e:26: e0:67:12:bf:29:c0:f2:e1:72:8e:3e:b6:f8:45:2b: 25:d7:38:20:d5:a0:31:5b:74:a8:7a:1f:79:c1:3e: 6e:10:46:8e:1c:71:af:37:0a:f6:7c:cc:11:c1:52: e5:30:47:a9:e4:c4:f8:e9:94:fb:f7:8b:94:34:fd: e4:42:ce:90:eb:9a:85:75:eb:1e:9d:02:a4:34:01: c3:d5:33:33:68:88:2d:1b:42:6e:22:d1:ea:a8:55: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:B9:8C:6B:5C:F0:8F:98:8F:8B:5F:0D:CD:95:7F:B3:91:62:9C X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:db:88:d6:4f:90:e6:7f:9d:b8:c2:6d:34:30:f8:9d:77: 5c:64:5a:93:b1:61:26:0a:1c:b3:ad:ed:35:16:e6:1a:c4:1f: d7:64:d1:b7:cb:0f:83:08:3e:64:9b:eb:d3:6e:c4:91:f6:74: 2c:01:3f:a0:ad:3d:71:52:0c:3f:71:ad:95:44:c2:3f:02:3f: 7a:b4:4f:c4:bb:8a:5e:fd:7b:2b:b9:7b:a5:ef:45:ad:3b:e9: 84:72:52:7c:8a:14:bc:58:0f:6c:04:87:6b:4c:9f:ba:c1:ad: 4d:38:f8:87:08:38:d8:05:0b:e0:73:93:af:89:eb:9a:55:68: 10:8d:52:71:36:cc:6f:65:0a:55:a9:5c:cb:74:57:3b:f1:a8: 49:5c:72:4c:2c:92:bf:15:43:ce:2f:4f:63:fa:21:b6:3a:7e: 6b:72:c5:b6:f4:29:2b:ab:2c:de:9a:e5:46:9e:1f:3a:2e:ab: 23:42:e2:6d:1f:2d:e7:83:61:23:46:99:65:f7:df:2a:62:0f: a9:72:8b:47:76:63:02:2a:37:8b:e7:b8:cf:fc:64:9b:2b:1a: 42:96:82:82:aa:2b:58:ad:d2:3c:52:d5:db:6e:cb:a7:b1:47: a7:77:51:60:57:91:ff:45:95:04:c8:40:0f:ab:cd:b3:6f:a0: 73:d6:4f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjUwOTE4MjMwNzM3WhcNMjUwOTI1MjMwNzM3WjAYMRYwFAYD VQQDEw02OGNjOTBiOS02NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13c5sDEmAhItuW5To2v5TOUwRAGeyreIiM65vLX1XrsYy9qr/BsLR2K4oLAJ 2WPm7fRkDOCzLKD+YsjKAh9wPubCaVSplujpxQIa6EwmjQ+w6n7lATiRqqmeOrt4 lK1cuGIKXC6B5oqep1ltfKbtrCvuXJkM6ERtzOeaXJ7hLM3hZttuzTw1i6lfvX9F meHnNzYhykjaQ3LuQeLcJGcAA8/XPibgZxK/KcDy4XKOPrb4RSsl1zgg1aAxW3So eh95wT5uEEaOHHGvNwr2fMwRwVLlMEep5MT46ZT794uUNP3kQs6Q65qFdesenQKk NAHD1TMzaIgtG0JuItHqqFXCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8CuYxr XPCPmI+LXw3NlX+zkWKcMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48tuI1k+Q5n+duMJtNDD4nXdcZFqTsWEmChyzre01FuYaxB/XZNG3 yw+DCD5km+vTbsSR9nQsAT+grT1xUgw/ca2VRMI/Aj96tE/Eu4pe/XsruXul70Wt O+mEclJ8ihS8WA9sBIdrTJ+6wa1NOPiHCDjYBQvgc5OvieuaVWgQjVJxNsxvZQpV qVzLdFc78ahJXHJMLJK/FUPOL09j+iG2On5rcsW29CkrqyzemuVGnh86LqsjQuJt Hy3ng2EjRpll998qYg+pcotHdmMCKjeL57jP/GSbKxpCloKCqitYrdI8UtXbbsun sUend1FgV5H/RZUEyEAPq82zb6Bz1k8S -----END CERTIFICATE-----Generated at Fri Sep 19 10:52:23 2025 by rpki-client