$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json) Hash identifier: 8UQ5+t8gXeQgzkpi+mlNYKZlrOgCbh/hd27g8y3H1R0= Subject key identifier: B5:1F:33:DE:CC:C8:F2:3C:D2:CB:D5:FE:15:50:FB:96:6B:C4:B9:40 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft Manifest number: 22 Signing time: Sat 09 Aug 2025 08:21:43 +0000 Manifest this update: Sat 09 Aug 2025 08:21:43 +0000 Manifest next update: Sat 16 Aug 2025 08:21:43 +0000 Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: 79SgqPJniFvRB0aSkXOxtZHh8Ln61J/eiq369D/75rE=) 2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: yO04AY7QLHjRPUPcniLxzPjcVxS3CSh7vc358kz20Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Aug 9 08:21:43 2025 GMT Not After : Aug 16 08:21:43 2025 GMT Subject: CN=68970517-9fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:91:95:1e:7e:c8:0e:b3:d5:8c:b0:48:20: ba:8a:ef:eb:71:80:1c:76:2c:20:ca:b1:bc:73:dd: 07:5b:d7:1e:70:7f:0d:f9:93:f3:b7:15:4f:83:88: 97:67:d7:f6:83:96:d7:d7:6f:37:3a:e5:d7:3f:42: 4f:41:c4:88:07:04:c9:d3:87:81:20:c6:99:0b:04: a1:71:e1:0f:d8:81:46:90:a9:f1:11:ac:80:31:d9: 61:37:b2:5d:10:5c:e7:b1:d6:3f:0f:2e:b3:e3:5a: 7c:0b:f1:ca:7a:7a:f0:0e:31:ac:e3:75:ea:8f:7e: ad:ae:f0:4b:8c:99:e2:ec:b0:31:29:85:24:5b:c6: 30:20:17:8b:d7:68:58:6c:4b:79:ae:a5:da:67:fa: bc:1d:9a:d2:bb:a0:25:b4:47:44:47:5e:34:1d:a2: 4b:30:83:64:bd:ea:90:5a:20:48:56:92:ab:86:d1: 67:8b:d9:19:ac:5d:63:4b:b2:99:dd:f0:90:f3:be: 25:3e:0d:e4:68:96:ee:2f:3d:14:fb:c9:2e:50:91: 84:c5:3f:ae:6b:3b:01:7f:7f:b7:77:f7:90:f5:9b: d8:79:3a:34:12:a2:ac:e7:14:df:d2:ff:02:15:9b: 4c:49:8c:ce:5f:ea:b2:b7:8e:6c:84:cb:10:0c:d6: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:33:DE:CC:C8:F2:3C:D2:CB:D5:FE:15:50:FB:96:6B:C4:B9:40 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:43:70:be:24:ce:c4:87:7a:76:d0:e3:b6:bb:3b:6f:43:4e: f2:5c:07:2a:fb:48:b3:f7:e0:a5:63:3b:d3:ed:33:8d:73:a2: bd:58:0e:52:43:d3:16:3b:d3:65:40:a9:7a:22:5e:cf:5c:d6: 70:14:a3:af:2c:2d:3d:61:e1:e1:5a:b3:a5:79:b7:79:eb:fc: 33:de:a9:ea:d3:ae:49:0a:6a:35:09:2e:63:f4:44:78:96:d1: c1:47:b3:fd:63:7f:48:70:aa:7c:93:3c:8b:56:af:89:4d:a1: 2f:8a:e6:8a:63:22:66:a8:ee:c2:a7:d7:da:76:16:b5:7e:11: ac:36:ff:42:25:2e:4b:48:94:19:96:ce:bd:a6:fd:8e:4f:a8: ad:84:6f:fc:5a:19:38:de:1a:23:66:2a:10:a1:03:47:61:1b: 58:1c:98:dc:15:2c:e6:eb:3f:f0:68:4b:a7:7f:16:b4:64:6c: af:41:29:0c:67:51:43:b4:f6:ab:a5:10:56:87:50:53:ec:79: ec:a4:78:20:71:2c:63:22:f2:a3:86:3f:a6:b2:92:f3:45:cd: 99:b1:0b:b3:85:8f:1a:ad:6d:6d:d0:59:65:68:29:7a:16:3d: 3f:46:a8:a1:f3:e9:e1:38:61:bc:48:ad:4f:ff:70:09:54:52: 66:f2:84:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA4MDkwODIxNDNaFw0yNTA4MTYwODIxNDNaMBgxFjAUBgNV BAMTDTY4OTcwNTE3LTlmZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpFZGVHn7IDrPVjLBIILqK7+txgBx2LCDKsbxz3Qdb1x5wfw35k/O3FU+DiJdn 1/aDltfXbzc65dc/Qk9BxIgHBMnTh4EgxpkLBKFx4Q/YgUaQqfERrIAx2WE3sl0Q XOex1j8PLrPjWnwL8cp6evAOMazjdeqPfq2u8EuMmeLssDEphSRbxjAgF4vXaFhs S3mupdpn+rwdmtK7oCW0R0RHXjQdokswg2S96pBaIEhWkquG0WeL2RmsXWNLspnd 8JDzviU+DeRolu4vPRT7yS5QkYTFP65rOwF/f7d395D1m9h5OjQSoqznFN/S/wIV m0xJjM5f6rK3jmyEyxAM1oI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtR8z3szI 8jzSy9X+FVD7lmvEuUAwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzgyNDhFOTE0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFO SHFYckUxWUZ0anQ1VUlZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFRDcL4kzsSHenbQ47a7O29DTvJcByr7SLP34KVjO9PtM41zor1YDlJD 0xY702VAqXoiXs9c1nAUo68sLT1h4eFas6V5t3nr/DPeqerTrkkKajUJLmP0RHiW 0cFHs/1jf0hwqnyTPItWr4lNoS+K5opjImao7sKn19p2FrV+Eaw2/0IlLktIlBmW zr2m/Y5PqK2Eb/xaGTjeGiNmKhChA0dhG1gcmNwVLObrP/BoS6d/FrRkbK9BKQxn UUO09qulEFaHUFPseeykeCBxLGMi8qOGP6aykvNFzZmxC7OFjxqtbW3QWWVoKXoW PT9GqKHz6eE4YbxIrU//cAlUUmbyhGs= -----END CERTIFICATE-----Generated at Mon Aug 11 09:36:52 2025 by rpki-client