$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: A6/gT6iK6j5dmYnhyuqzoMjmTcZlNgVIqAI0iD7lKQU= Subject key identifier: 71:C3:55:E8:CF:88:45:4E:92:20:D7:D1:93:90:4C:6B:B9:C6:75:17 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0142 Signing time: Thu 07 Aug 2025 04:48:38 +0000 Manifest this update: Thu 07 Aug 2025 04:48:38 +0000 Manifest next update: Thu 14 Aug 2025 04:48:38 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: 6UrIR4GNJV1j7x8IdOIUOUb/6FeO5fQ9Mt7KSibQWfE=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Aug 7 04:48:38 2025 GMT Not After : Aug 14 04:48:38 2025 GMT Subject: CN=68943026-4f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:51:2c:52:eb:19:95:e9:d9:f8:79:f7:be: a8:0e:4f:7c:44:aa:23:10:88:84:8f:97:12:41:c5: 7a:7c:1e:60:bc:69:a5:41:8d:08:e7:89:b6:56:d6: e3:9d:7f:13:50:90:43:c3:ab:26:86:af:10:3b:5b: c4:1b:4c:9b:24:30:d5:a1:47:f0:96:d0:cd:b2:87: 62:ad:90:02:f6:2d:5e:db:bf:18:e2:b0:2b:52:7a: 9d:2e:e9:b2:6b:26:f0:e3:95:d7:05:8d:0d:a3:e1: f9:11:96:9d:63:a4:c3:46:5f:6a:fe:49:33:02:47: 71:c3:7d:4c:a6:65:04:83:1b:88:f8:55:91:46:8f: 2f:70:02:90:e9:0a:80:da:81:71:1f:29:87:19:1f: a5:6d:86:a3:79:fa:15:0d:a3:f1:db:6f:30:23:80: b4:66:84:a5:cc:45:14:2b:6c:4f:a9:80:c8:2c:83: 81:ae:0c:f4:1b:00:30:0c:1f:7e:a6:d9:3e:b7:08: 65:15:f6:2f:3c:21:eb:64:d8:e7:1f:91:00:28:cc: 5d:c9:09:6f:c0:4c:a3:ec:0c:fc:47:46:1e:44:29: 6a:6e:9c:b6:2c:73:b9:5d:0d:b7:b6:d0:ff:c6:f0: a5:79:d4:18:25:c5:ae:5d:64:33:f9:b6:17:1e:cd: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:55:E8:CF:88:45:4E:92:20:D7:D1:93:90:4C:6B:B9:C6:75:17 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b6:64:68:95:9c:eb:82:a3:49:29:d8:ac:09:a4:b1:84:36: dd:8c:db:36:07:4a:9d:95:5a:35:b4:b7:5e:2d:d5:9b:16:be: 61:c8:3b:93:2c:e0:3c:6e:0f:c8:80:14:b0:89:4d:f7:1c:88: ad:70:da:2d:d3:5b:0a:bd:4e:ae:3e:f7:8c:7e:43:1b:7e:dc: e6:39:4c:1f:e3:ea:9c:82:60:44:5b:6b:ec:2b:55:fd:bd:86: 26:c6:8a:9d:9b:8c:3e:1b:28:e5:91:d0:80:e3:ca:99:71:fb: c4:ef:ea:f8:a4:74:2e:57:e2:0c:df:4d:6e:9e:52:20:8c:2c: 03:bb:a5:2f:80:36:cd:15:08:89:5c:56:4c:54:45:43:67:2d: f3:b0:09:fe:23:dd:1b:9b:9c:53:00:fb:6b:f6:da:97:4e:6c: 78:0c:25:d5:81:c7:b1:c2:29:3a:90:3e:76:8a:72:40:76:96: 1f:6c:79:4c:21:7b:02:09:73:8b:fd:a7:f7:21:9a:9c:57:8d: 16:49:3e:e8:45:11:04:02:f1:51:62:ca:4a:d2:2f:13:5e:17: 77:9d:e9:ae:21:28:97:fe:fe:b8:24:34:b0:1f:a6:40:84:ac: 4a:8e:b9:75:4d:0b:a5:50:e7:35:a4:2c:6f:26:d7:a2:67:d2: 66:e4:a7:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwODA3MDQ0ODM4WhcNMjUwODE0MDQ0ODM4WjAYMRYwFAYD VQQDEw02ODk0MzAyNi00ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEhRLFLrGZXp2fh5976oDk98RKojEIiEj5cSQcV6fB5gvGmlQY0I54m2Vtbj nX8TUJBDw6smhq8QO1vEG0ybJDDVoUfwltDNsodirZAC9i1e278Y4rArUnqdLumy aybw45XXBY0No+H5EZadY6TDRl9q/kkzAkdxw31MpmUEgxuI+FWRRo8vcAKQ6QqA 2oFxHymHGR+lbYajefoVDaPx228wI4C0ZoSlzEUUK2xPqYDILIOBrgz0GwAwDB9+ ptk+twhlFfYvPCHrZNjnH5EAKMxdyQlvwEyj7Az8R0YeRClqbpy2LHO5XQ23ttD/ xvCledQYJcWuXWQz+bYXHs30wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHDVejP iEVOkiDX0ZOQTGu5xnUXMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZtmRolZzrgqNJKdisCaSxhDbdjNs2B0qdlVo1tLdeLdWbFr5hyDuT LOA8bg/IgBSwiU33HIitcNot01sKvU6uPveMfkMbftzmOUwf4+qcgmBEW2vsK1X9 vYYmxoqdm4w+GyjlkdCA48qZcfvE7+r4pHQuV+IM301unlIgjCwDu6UvgDbNFQiJ XFZMVEVDZy3zsAn+I90bm5xTAPtr9tqXTmx4DCXVgcexwik6kD52inJAdpYfbHlM IXsCCXOL/af3IZqcV40WST7oRREEAvFRYspK0i8TXhd3nemuISiX/v64JDSwH6ZA hKxKjrl1TQulUOc1pCxvJteiZ9Jm5KcT -----END CERTIFICATE-----Generated at Sat Aug 9 02:57:59 2025 by rpki-client