$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: 7SKfD360F3v56zTpueTzoCI19VzjwfURq24UEjofNh4= Subject key identifier: 3C:4D:47:2A:6B:69:4A:A7:19:67:3F:9F:B6:EE:31:50:AB:C6:FF:74 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 0888 Signing time: Thu 04 Sep 2025 21:03:28 +0000 Manifest this update: Thu 04 Sep 2025 21:03:27 +0000 Manifest next update: Thu 11 Sep 2025 21:03:27 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: brjtlZaUpEpuGKgd8i6We9hYb7TRtPwQOTzNNtzbBtw=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: 669892085D5D11F0AAE8C847C4F9AE02.roa (hash: YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=) 6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Sep 4 21:03:27 2025 GMT Not After : Sep 11 21:03:27 2025 GMT Subject: CN=68b9fe9f-2589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:fc:44:f8:1c:bd:44:20:eb:15:8d:c5:f7: 47:ed:24:c1:2c:31:ec:c9:4d:83:74:d2:2d:6d:61: 7a:6d:0d:f0:60:d9:bd:10:58:60:3b:ba:8b:80:1a: 69:fd:45:57:c7:c2:8a:56:a3:66:ce:90:dd:3a:2f: 9f:ad:21:10:84:d9:ba:17:84:1a:58:3d:33:85:37: 8b:73:1a:c7:d7:eb:68:58:bb:a7:eb:b9:4c:9a:22: 47:63:be:c2:76:ef:8a:b6:55:cb:12:20:4e:74:40: 5d:4a:b6:4f:0d:a5:f7:3e:58:34:bd:f7:fb:e6:82: 80:c1:46:48:8b:56:9b:9e:01:a7:24:5a:9c:f7:30: 57:c7:5f:f5:14:82:c6:2b:d8:1a:9a:72:93:93:e4: 9d:13:ff:c3:03:b8:a8:26:c5:06:52:16:6a:09:28: 55:f5:a7:aa:f5:db:79:51:35:23:5a:bd:07:88:40: 63:9f:e9:36:7f:30:36:0a:00:68:cc:59:ca:79:6c: b5:8b:78:e6:39:57:8e:27:43:65:1a:c2:b5:54:c7: 1a:b6:25:60:0f:1d:bf:75:94:f2:cc:75:15:fe:78: 93:28:74:a9:4e:1a:e8:e5:fa:7e:48:6f:e8:49:17: fd:bb:56:55:6b:af:02:95:d4:6d:d6:88:4c:81:b8: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4D:47:2A:6B:69:4A:A7:19:67:3F:9F:B6:EE:31:50:AB:C6:FF:74 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:dd:da:33:cc:80:fe:bb:1b:39:46:1f:58:b6:f3:ce:59:71: f3:05:2f:1d:0a:e7:3f:32:d2:07:a9:aa:47:d5:82:16:c6:08: 76:b2:bd:c8:ed:6f:42:a0:4c:5f:80:5b:1d:22:88:8b:1d:75: 15:37:33:26:3e:52:8c:6b:0f:c6:a7:5a:69:4e:21:8f:e2:d1: dc:5f:cc:e8:49:5a:66:e3:12:03:48:81:91:40:a7:51:9b:b3: 5d:b9:ed:69:00:81:f8:55:07:ec:65:5a:35:0a:87:55:d9:07: 2b:3b:d5:21:b0:db:33:06:70:a5:b3:9e:14:6f:82:3f:41:00: 1c:2f:a6:43:fa:b8:ed:18:53:06:fd:65:64:14:20:05:6c:3c: b6:90:6c:90:50:f3:1e:0b:22:20:aa:5a:f2:5e:b5:28:60:b4: e2:d8:af:ea:79:42:fa:7c:fa:b5:3e:ae:ce:ee:43:6c:d8:b4: 3a:79:31:60:07:b9:fb:a8:18:94:f6:9c:f2:8b:7d:05:c4:c3: f8:ba:1c:3b:4f:e5:b0:7e:5b:6b:e7:c2:9c:45:23:2f:64:52: 3e:c0:b1:72:48:f4:cd:9c:44:b5:f2:a0:b6:c1:3e:a2:26:bc: f1:65:2e:3a:19:d7:22:70:7e:60:3d:19:20:93:f2:f7:77:77: 66:ba:b6:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUwOTA0MjEwMzI3WhcNMjUwOTExMjEwMzI3WjAYMRYwFAYD VQQDEw02OGI5ZmU5Zi0yNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO/8RPgcvUQg6xWNxfdH7STBLDHsyU2DdNItbWF6bQ3wYNm9EFhgO7qLgBpp /UVXx8KKVqNmzpDdOi+frSEQhNm6F4QaWD0zhTeLcxrH1+toWLun67lMmiJHY77C du+KtlXLEiBOdEBdSrZPDaX3Plg0vff75oKAwUZIi1abngGnJFqc9zBXx1/1FILG K9gamnKTk+SdE//DA7ioJsUGUhZqCShV9aeq9dt5UTUjWr0HiEBjn+k2fzA2CgBo zFnKeWy1i3jmOVeOJ0NlGsK1VMcatiVgDx2/dZTyzHUV/niTKHSpThro5fp+SG/o SRf9u1ZVa68CldRt1ohMgbj1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxNRypr aUqnGWc/n7buMVCrxv90MB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv3dozzID+uxs5Rh9YtvPOWXHzBS8dCuc/MtIHqapH1YIWxgh2sr3I 7W9CoExfgFsdIoiLHXUVNzMmPlKMaw/Gp1ppTiGP4tHcX8zoSVpm4xIDSIGRQKdR m7Ndue1pAIH4VQfsZVo1CodV2QcrO9UhsNszBnCls54Ub4I/QQAcL6ZD+rjtGFMG /WVkFCAFbDy2kGyQUPMeCyIgqlryXrUoYLTi2K/qeUL6fPq1Pq7O7kNs2LQ6eTFg B7n7qBiU9pzyi30FxMP4uhw7T+Wwfltr58KcRSMvZFI+wLFySPTNnES18qC2wT6i JrzxZS46GdcicH5gPRkgk/L3d3dmurYC -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:11 2025 by rpki-client