$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: 4ZdDllCy7Lie7FvAbP2XoFjXAkFivUxKB+oPtcJWUmM= Subject key identifier: 39:43:37:4F:27:21:7E:A3:61:CD:85:68:9E:35:EE:B3:9E:8B:91:70 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 054B Signing time: Sun 10 Aug 2025 23:41:52 +0000 Manifest this update: Sun 10 Aug 2025 23:41:51 +0000 Manifest next update: Sun 17 Aug 2025 23:41:51 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: mjaTde39/7KSBuc3YeIx1J8Fr6GtKcQZG69c5t3o7oM=) 2: 1CE5552C6D3B11F0AA825533C4F9AE02.roa (hash: jDQvCTpMcft9Y6vTZ/KCcWn5HK48OaJzX4vFOC3gRbU=) 3: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 4: B4018F066D3C11F08004E139C4F9AE02.roa (hash: mkXVXjWOhZ0DUz/i0E5riYkh07lG0BNhsP2Vdoc5P0U=) 5: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 6: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Aug 10 23:41:51 2025 GMT Not After : Aug 17 23:41:51 2025 GMT Subject: CN=68992e40-f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:79:7a:b6:cd:98:7c:e7:81:51:9d:95:2a:73: c5:d7:49:f8:ba:29:1f:90:37:62:70:ca:ea:4c:7c: be:c8:1c:19:16:ee:01:5c:10:33:28:cf:09:6f:97: 96:ec:80:84:6f:63:21:dc:62:a8:40:39:88:e8:6a: 24:f9:d0:7e:c2:50:11:f4:86:72:9d:4f:cf:cd:c4: 34:2e:ac:e3:f9:1e:ef:8d:93:b6:49:de:fd:4a:08: 0a:44:8a:39:f9:58:00:6b:12:ea:fe:5e:9c:7f:cb: 7b:bc:57:fe:2d:05:73:7e:60:8f:0e:34:7d:97:58: 5a:5e:53:a0:ef:62:9b:70:b1:b2:ef:f4:e7:45:84: 6f:c5:e1:73:26:b4:c1:df:64:ad:7b:cc:55:b1:e3: 98:50:ef:07:21:b2:fc:e7:fd:90:7e:dc:f6:ba:a2: 34:f7:a2:c4:3f:03:2c:b3:81:98:5c:30:cb:09:1e: 7e:82:c2:32:ef:0e:17:4a:c1:7d:f4:80:85:39:87: 0a:b8:68:b8:c0:4a:28:23:88:87:6f:ea:e1:ca:72: ba:62:8d:ba:f3:fe:de:5d:48:4b:30:ea:75:57:69: f7:f4:9f:73:fb:f4:55:f4:fe:c2:ee:05:2b:1d:1a: 4d:cd:12:0c:51:b6:6b:f0:90:6a:12:b8:fe:09:c8: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:37:4F:27:21:7E:A3:61:CD:85:68:9E:35:EE:B3:9E:8B:91:70 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:57:6c:92:bd:69:16:6f:a4:38:4f:63:96:eb:9d:58:18: e7:ff:c3:4a:08:a1:ea:48:ee:44:b6:25:65:21:26:e3:76:58: f6:06:f9:09:cf:3d:49:83:5e:51:58:da:56:a8:10:eb:66:da: 31:ad:ae:ac:e1:4e:da:b9:94:fe:85:de:f7:3f:6b:7a:e5:ca: 47:a4:b0:2b:ff:1c:f0:a9:c0:15:2f:cd:5b:23:ce:2e:43:27: 9c:e2:42:3f:2e:74:d7:ac:3b:3f:31:fb:10:e3:83:45:e4:f7: 1a:d7:32:5b:31:d3:cd:bf:d6:85:10:a0:a7:3f:fd:b8:32:e2: d9:3d:5a:e9:8d:9b:e5:74:73:72:67:0e:8e:05:44:d3:4a:52: 5d:c2:89:0b:1c:16:7e:1c:94:69:5d:17:72:df:e1:cb:a4:1a: ce:1f:66:91:04:98:e8:ce:0a:75:bb:9a:77:42:ee:38:43:d8: 7a:0e:68:aa:ab:ef:9b:bb:49:7b:ee:d2:4e:a4:98:5e:ed:1c: 43:d2:84:ad:d0:3b:2c:7c:8c:da:c9:6c:89:64:b5:bd:40:63: 9f:de:f8:11:ef:41:a5:c6:95:c9:16:31:2f:04:0b:1f:21:e0: b8:6d:89:b1:fa:b7:39:47:0d:50:85:4d:85:3f:b2:e3:15:9d: 75:95:6b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwODEwMjM0MTUxWhcNMjUwODE3MjM0MTUxWjAYMRYwFAYD VQQDEw02ODk5MmU0MC1mNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3l6ts2YfOeBUZ2VKnPF10n4uikfkDdicMrqTHy+yBwZFu4BXBAzKM8Jb5eW 7ICEb2Mh3GKoQDmI6Gok+dB+wlAR9IZynU/PzcQ0Lqzj+R7vjZO2Sd79SggKRIo5 +VgAaxLq/l6cf8t7vFf+LQVzfmCPDjR9l1haXlOg72KbcLGy7/TnRYRvxeFzJrTB 32Ste8xVseOYUO8HIbL85/2Qftz2uqI096LEPwMss4GYXDDLCR5+gsIy7w4XSsF9 9ICFOYcKuGi4wEooI4iHb+rhynK6Yo268/7eXUhLMOp1V2n39J9z+/RV9P7C7gUr HRpNzRIMUbZr8JBqErj+Cch/vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlDN08n IX6jYc2FaJ417rOei5FwMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXgVdskr1pFm+kOE9jluudWBjn/8NKCKHqSO5EtiVlISbjdlj2BvkJ zz1Jg15RWNpWqBDrZtoxra6s4U7auZT+hd73P2t65cpHpLAr/xzwqcAVL81bI84u Qyec4kI/LnTXrDs/MfsQ44NF5Pca1zJbMdPNv9aFEKCnP/24MuLZPVrpjZvldHNy Zw6OBUTTSlJdwokLHBZ+HJRpXRdy3+HLpBrOH2aRBJjozgp1u5p3Qu44Q9h6Dmiq q++bu0l77tJOpJhe7RxD0oSt0DssfIzayWyJZLW9QGOf3vgR70GlxpXJFjEvBAsf IeC4bYmx+rc5Rw1QhU2FP7LjFZ11lWup -----END CERTIFICATE-----Generated at Mon Aug 11 04:32:48 2025 by rpki-client