$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: lcHM7ZYZrIdLmvEDe6ijKCZlQ37491Ol23vzF8nCqUw= Subject key identifier: 14:F0:5C:16:2F:76:5E:26:52:10:0F:AA:4F:7E:17:53:87:E4:AF:34 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0C0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0C00 Signing time: Thu 18 Sep 2025 18:58:30 +0000 Manifest this update: Thu 18 Sep 2025 18:58:29 +0000 Manifest next update: Thu 25 Sep 2025 18:58:29 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: vSAvhzyhy+l+dk10+AX4P0VV0PnsjSnFkpW6YBiKslc=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: ufbhLIgMA/VLskicM2b7dedBW1kGeaUN1gsoMiATTdU=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: P1+1DUz+vfXoEUhgbF6Z4GWZWQs4iS84lJdf+sr/ADs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Sep 18 18:58:29 2025 GMT Not After : Sep 25 18:58:29 2025 GMT Subject: CN=68cc5656-c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:9c:84:0f:5a:6d:2d:d8:63:19:22:ae:f1: ea:3d:2f:7d:f5:a3:86:ad:24:ac:02:33:e9:c4:e0: 28:2e:9e:f7:69:c4:54:50:d2:54:26:d9:bf:0a:f7: ab:f6:37:6d:41:5c:6b:56:ab:37:23:ae:51:af:09: 79:56:95:d0:9a:45:20:89:c9:6a:49:af:05:9c:2e: a5:15:52:eb:40:56:f7:9d:f8:a7:30:f2:f1:1a:7c: 82:d9:b9:29:03:68:ed:1b:8e:05:f8:02:a1:54:e6: 9e:b5:c2:5d:47:54:e5:05:b5:c3:20:5f:a0:c4:8d: cd:f4:42:3c:10:70:20:41:22:05:ad:dc:1a:b1:d1: 8d:df:2d:bd:7a:80:38:a1:7e:be:8d:74:a4:0b:dc: cf:dd:78:a8:f4:65:ee:be:38:f1:69:a7:94:74:4e: f3:d6:8f:fa:ce:59:52:c2:df:17:aa:89:6b:61:03: d0:5e:08:00:72:73:26:a1:17:42:05:06:36:ad:77: ac:64:44:2a:66:5d:0e:59:88:6a:eb:59:41:b8:f2: ce:85:ce:af:d3:c9:00:e4:cf:6a:57:14:0e:2f:9a: 1a:cd:f9:f2:8f:1a:c1:d7:b7:aa:00:9e:1f:bb:15: 4f:09:c3:95:ce:14:d6:2e:ff:fe:41:c8:31:41:b4: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:5C:16:2F:76:5E:26:52:10:0F:AA:4F:7E:17:53:87:E4:AF:34 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1b:83:f2:83:e6:39:6f:19:ec:e1:45:68:ee:59:3a:d3:52: cd:d3:7b:a3:e0:4c:af:68:ec:ef:f7:5a:29:cd:fb:a7:09:17: 45:70:60:dd:bb:82:2a:b3:dc:08:d7:2e:0e:c7:f0:ac:73:54: b4:0e:ba:55:1f:fe:a4:aa:3f:0e:a4:d3:a7:36:a1:05:66:45: a6:91:ac:1a:59:38:31:a2:d9:9a:6b:f0:82:f0:9f:37:45:2d: e9:fe:b4:65:09:8b:1c:5f:a3:41:71:da:30:ab:4c:bf:2f:dd: e7:23:9d:25:c6:34:ae:b3:0b:03:02:54:04:88:ce:77:38:78: 6a:c4:4b:53:f1:2f:78:15:ad:71:a4:d7:11:78:66:9d:97:fd: 4d:98:0b:a4:e9:6a:3f:e1:f0:ee:91:90:b1:a4:40:74:ed:f8: 09:76:e9:49:59:98:67:a0:35:ca:7d:e6:35:79:a7:94:0e:12: d3:2b:9b:d1:53:3a:dc:b4:91:86:2f:ef:d3:f4:73:63:e2:19: 19:98:ea:e3:5c:fa:90:8f:59:95:a9:5c:b6:5d:a3:7e:7e:31: 4f:22:4d:37:65:84:06:85:1a:30:31:23:25:80:b0:25:8b:4e: 39:4a:e2:3b:e8:9d:f7:c1:a9:6e:67:75:11:91:4f:7f:9b:aa: 1e:c3:9c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwOTE4MTg1ODI5WhcNMjUwOTI1MTg1ODI5WjAYMRYwFAYD VQQDEw02OGNjNTY1Ni1jMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsWchA9abS3YYxkirvHqPS999aOGrSSsAjPpxOAoLp73acRUUNJUJtm/Cver 9jdtQVxrVqs3I65Rrwl5VpXQmkUgiclqSa8FnC6lFVLrQFb3nfinMPLxGnyC2bkp A2jtG44F+AKhVOaetcJdR1TlBbXDIF+gxI3N9EI8EHAgQSIFrdwasdGN3y29eoA4 oX6+jXSkC9zP3Xio9GXuvjjxaaeUdE7z1o/6zllSwt8XqolrYQPQXggAcnMmoRdC BQY2rXesZEQqZl0OWYhq61lBuPLOhc6v08kA5M9qVxQOL5oazfnyjxrB17eqAJ4f uxVPCcOVzhTWLv/+QcgxQbTrwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTwXBYv dl4mUhAPqk9+F1OH5K80MB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwG4Pyg+Y5bxns4UVo7lk601LN03uj4EyvaOzv91opzfunCRdFcGDd u4Iqs9wI1y4Ox/Csc1S0DrpVH/6kqj8OpNOnNqEFZkWmkawaWTgxotmaa/CC8J83 RS3p/rRlCYscX6NBcdowq0y/L93nI50lxjSuswsDAlQEiM53OHhqxEtT8S94Fa1x pNcReGadl/1NmAuk6Wo/4fDukZCxpEB07fgJdulJWZhnoDXKfeY1eaeUDhLTK5vR UzrctJGGL+/T9HNj4hkZmOrjXPqQj1mVqVy2XaN+fjFPIk03ZYQGhRowMSMlgLAl i045SuI76J33waluZ3URkU9/m6oew5yo -----END CERTIFICATE-----Generated at Thu Sep 18 22:00:21 2025 by rpki-client