$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: hqagDx6M0AaBLO8DLHkS4GB2kcxB86XRXVRpgnOli3A= Subject key identifier: 8C:AF:99:44:B2:ED:1F:DD:E1:5F:9D:28:C1:2E:8D:66:8B:3C:8C:1F Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 10E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 10DF Signing time: Fri 08 Aug 2025 17:29:13 +0000 Manifest this update: Fri 08 Aug 2025 17:29:13 +0000 Manifest next update: Fri 15 Aug 2025 17:29:13 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: SdeeDBbZAaygK6zQseW5nqAMlRfwiG4iOQMx2KDSRaA=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: mvO7yHkevsKcC0ytNQ/yXnGhsAYGTtTZqPPj/+jmmtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4328 (0x10e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Validity Not Before: Aug 8 17:29:13 2025 GMT Not After : Aug 15 17:29:13 2025 GMT Subject: CN=689633e9-a069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:3c:90:29:8f:b4:b8:e6:4c:91:80:b9:6e: b1:26:12:5d:be:25:8e:b8:82:94:7f:da:89:31:6e: de:59:86:b9:0f:82:aa:22:60:26:52:e0:80:fa:0b: 2d:e1:0f:ab:bc:24:eb:f2:c5:76:35:cc:5f:ce:78: 63:fd:a4:16:f5:cf:1f:2a:52:11:22:c1:79:d5:1b: 89:93:80:99:f0:aa:d5:d8:d1:83:a5:50:23:e8:1f: cc:8d:cb:82:d9:44:17:35:d9:c9:b1:49:60:9d:89: fb:7c:a0:06:91:cb:61:03:0e:88:1a:8c:a3:ea:f6: 6f:a4:95:c9:26:c4:96:f6:25:c3:f8:2a:a0:59:36: 7a:bb:e1:a8:73:1c:c4:04:2e:94:74:13:ab:67:4b: 83:37:36:18:e8:28:62:4f:43:9a:54:86:4e:f7:d7: f6:7c:de:26:cc:82:13:0c:d3:5e:cc:d2:c7:77:5d: 9f:14:bb:96:13:da:c5:f3:49:6f:04:4a:9d:34:90: 77:8e:54:a7:e2:be:71:cf:e8:42:2d:88:2e:f2:66: ef:e2:5f:88:7f:f1:50:dc:ed:64:71:d8:36:06:82: 29:55:98:dc:d6:0d:2a:84:27:b8:0c:5a:fd:be:48: c9:bc:9f:71:be:10:0c:59:5e:97:c8:69:33:40:8a: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AF:99:44:B2:ED:1F:DD:E1:5F:9D:28:C1:2E:8D:66:8B:3C:8C:1F X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:5f:e1:b4:f3:ec:c8:34:67:85:1e:ee:e7:97:98:52:59:01: 35:2a:c6:0a:a3:20:e0:7c:bd:13:16:1e:90:50:4f:0e:a5:56: 68:50:e8:4d:d5:bb:89:5e:5f:ab:56:ee:97:1e:67:d0:52:b1: 55:5b:5e:c5:09:f2:58:16:d6:de:14:da:53:e4:ea:ad:ca:e9: 99:f1:cc:d1:b8:35:de:73:b3:c2:d6:f4:1b:a4:ca:80:6c:a3: ac:66:49:3f:da:22:df:09:dc:d8:27:1f:0d:e3:ab:3d:a7:e1: 23:1a:1f:0d:f6:10:24:05:37:d4:bc:96:31:91:81:61:05:23: 35:c9:78:7c:48:74:d2:ba:2b:65:0d:08:9d:cf:90:bf:67:4b: f7:58:6c:04:0e:1a:e4:cb:17:d5:4a:af:a1:1b:c5:58:5b:05: 31:15:bd:a4:6e:00:aa:53:b0:da:84:19:98:76:5d:9c:ae:e1: 09:b9:13:ba:4b:41:ea:4d:97:ba:20:2e:3c:50:d9:d5:96:0c: bb:cd:72:7d:f1:3e:59:46:36:a0:a6:30:e3:bc:c0:17:3a:d3: 59:d4:cd:9f:db:91:3b:b1:46:84:d7:fe:2e:4b:5d:0c:c0:f5: f2:59:ad:30:b0:78:28:34:85:af:71:63:45:55:b7:cd:c7:f0: 6d:5f:0a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjUwODA4MTcyOTEzWhcNMjUwODE1MTcyOTEzWjAYMRYwFAYD VQQDEw02ODk2MzNlOS1hMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuM8kCmPtLjmTJGAuW6xJhJdviWOuIKUf9qJMW7eWYa5D4KqImAmUuCA+gst 4Q+rvCTr8sV2Ncxfznhj/aQW9c8fKlIRIsF51RuJk4CZ8KrV2NGDpVAj6B/MjcuC 2UQXNdnJsUlgnYn7fKAGkcthAw6IGoyj6vZvpJXJJsSW9iXD+CqgWTZ6u+GocxzE BC6UdBOrZ0uDNzYY6ChiT0OaVIZO99f2fN4mzIITDNNezNLHd12fFLuWE9rF80lv BEqdNJB3jlSn4r5xz+hCLYgu8mbv4l+If/FQ3O1kcdg2BoIpVZjc1g0qhCe4DFr9 vkjJvJ9xvhAMWV6XyGkzQIra3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyvmUSy 7R/d4V+dKMEujWaLPIwfMB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQX+G08+zINGeFHu7nl5hSWQE1KsYKoyDgfL0TFh6QUE8OpVZoUOhN 1buJXl+rVu6XHmfQUrFVW17FCfJYFtbeFNpT5OqtyumZ8czRuDXec7PC1vQbpMqA bKOsZkk/2iLfCdzYJx8N46s9p+EjGh8N9hAkBTfUvJYxkYFhBSM1yXh8SHTSuitl DQidz5C/Z0v3WGwEDhrkyxfVSq+hG8VYWwUxFb2kbgCqU7DahBmYdl2cruEJuRO6 S0HqTZe6IC48UNnVlgy7zXJ98T5ZRjagpjDjvMAXOtNZ1M2f25E7sUaE1/4uS10M wPXyWa0wsHgoNIWvcWNFVbfNx/BtXwps -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:01 2025 by rpki-client