$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: 5DvEmonn0EIWXbeDlGy3D6EImJy0W7fMBkP6Uw1SHyk= Subject key identifier: E4:B3:FE:DE:B7:BD:4A:F6:52:86:9C:B8:13:78:92:8F:0D:9E:3F:3C Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 0158 Signing time: Sat 09 Aug 2025 04:29:51 +0000 Manifest this update: Sat 09 Aug 2025 04:29:50 +0000 Manifest next update: Sat 16 Aug 2025 04:29:50 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: K6b9c42m40h1CjGPUhQNNrGFfVgp+O46X085woI3fz4=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Aug 9 04:29:50 2025 GMT Not After : Aug 16 04:29:50 2025 GMT Subject: CN=6896cebf-19eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:5e:07:5b:ad:fd:40:09:4a:90:d1:d7:e0: 73:77:e8:f4:14:6c:91:bb:73:c5:62:1b:41:55:5a: 78:e1:94:5f:c4:0f:0d:32:13:58:cf:96:0d:62:c1: 61:6d:bb:06:c4:5d:b4:6d:d6:41:40:03:a0:83:d7: 09:0e:a4:76:26:f6:c2:ea:4b:fe:27:fd:d6:5e:0f: 9d:28:c3:82:00:2d:44:f8:f3:7d:ae:e6:0a:5b:ab: 29:21:a4:21:da:cf:3b:45:7d:74:e9:d6:3c:b9:ce: 52:f2:7d:45:21:02:58:36:e3:91:7b:3b:90:46:92: 38:9e:f8:be:18:cd:b0:d4:b2:85:35:6d:33:9a:50: 97:be:79:3b:dd:11:3e:cc:13:f3:fc:c5:08:f2:9b: 98:95:c0:5b:99:79:3a:db:c6:70:6e:ca:d1:d4:92: 4c:7f:16:7e:53:fe:c3:b8:06:24:46:e7:0f:81:d1: 9b:ee:9c:3f:d4:41:d5:ec:f3:c7:72:46:25:45:79: 04:cd:67:82:eb:fa:1c:f5:3b:7c:e4:01:c9:b8:84: 63:80:55:a4:18:aa:e2:9e:aa:b5:21:82:41:67:24: 1d:de:9e:81:23:8a:21:7e:7e:c9:3e:47:7d:87:aa: b3:49:62:64:1c:bc:7b:52:8a:42:4b:fa:44:6d:1f: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:FE:DE:B7:BD:4A:F6:52:86:9C:B8:13:78:92:8F:0D:9E:3F:3C X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:02:4d:4c:65:ba:56:a4:f9:c9:cf:36:db:36:a0:7b:e4:28: f4:90:e9:45:f1:e5:44:7c:a3:b5:f8:5b:0e:1c:62:f2:56:ea: ae:ba:45:ed:0e:b4:3a:a1:1a:65:6b:be:1c:a9:57:61:67:19: 21:cc:64:2c:59:4a:89:d8:e6:ea:ef:83:12:53:05:d9:f4:b9: bf:d7:e8:41:14:15:4c:5e:cc:c6:9f:3f:08:cb:66:64:37:9f: 57:5d:5d:cd:ab:b4:3f:f0:9b:46:32:4c:39:29:93:41:60:70: c1:ce:71:b5:55:b4:3a:b2:2d:1b:47:83:86:a5:0e:bb:ab:ff: 6c:ef:d2:08:84:97:df:8d:8a:c9:12:f5:a2:73:85:26:fe:f1: 07:a8:67:a3:e6:2b:7c:e7:c5:09:91:cb:98:4f:2d:bb:fd:e3: 04:a7:a2:9e:f7:03:2e:ee:68:32:51:c9:37:25:ec:bc:99:80: 6e:d2:21:86:f5:f8:89:28:77:b5:a6:f5:86:44:37:0e:da:06: 5d:09:7f:7c:9e:84:fd:c3:7a:53:5a:79:6e:3c:e5:30:1a:ac: 93:ff:04:53:52:5f:d1:d6:98:c5:46:ad:58:b0:14:84:02:49: 83:cd:24:60:09:3d:06:7f:c7:85:9a:d1:92:b9:0c:90:ff:94: bf:ea:e4:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwODA5MDQyOTUwWhcNMjUwODE2MDQyOTUwWjAYMRYwFAYD VQQDEw02ODk2Y2ViZi0xOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO9eB1ut/UAJSpDR1+Bzd+j0FGyRu3PFYhtBVVp44ZRfxA8NMhNYz5YNYsFh bbsGxF20bdZBQAOgg9cJDqR2JvbC6kv+J/3WXg+dKMOCAC1E+PN9ruYKW6spIaQh 2s87RX106dY8uc5S8n1FIQJYNuORezuQRpI4nvi+GM2w1LKFNW0zmlCXvnk73RE+ zBPz/MUI8puYlcBbmXk628ZwbsrR1JJMfxZ+U/7DuAYkRucPgdGb7pw/1EHV7PPH ckYlRXkEzWeC6/oc9Tt85AHJuIRjgFWkGKrinqq1IYJBZyQd3p6BI4ohfn7JPkd9 h6qzSWJkHLx7UopCS/pEbR9+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSz/t63 vUr2UoacuBN4ko8Nnj88MB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPAk1MZbpWpPnJzzbbNqB75Cj0kOlF8eVEfKO1+FsOHGLyVuquukXt DrQ6oRpla74cqVdhZxkhzGQsWUqJ2Obq74MSUwXZ9Lm/1+hBFBVMXszGnz8Iy2Zk N59XXV3Nq7Q/8JtGMkw5KZNBYHDBznG1VbQ6si0bR4OGpQ67q/9s79IIhJffjYrJ EvWic4Um/vEHqGej5it858UJkcuYTy27/eMEp6Ke9wMu7mgyUck3Jey8mYBu0iGG 9fiJKHe1pvWGRDcO2gZdCX98noT9w3pTWnluPOUwGqyT/wRTUl/R1pjFRq1YsBSE AkmDzSRgCT0Gf8eFmtGSuQyQ/5S/6uR1 -----END CERTIFICATE-----Generated at Sat Aug 9 22:47:45 2025 by rpki-client