$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: roMsEwcpuclA0FztGSh+7/1bVF+5HA1GdY9klaki+XA= Subject key identifier: EE:FC:3C:96:56:B6:DD:67:6D:A8:88:B5:AB:13:74:A1:B7:D6:D2:79 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C61 Signing time: Wed 06 Aug 2025 18:38:44 +0000 Manifest this update: Wed 06 Aug 2025 18:38:44 +0000 Manifest next update: Wed 13 Aug 2025 18:38:44 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: iC8KijiDUnYlUk+1RLJle1BYWgpI4E3r2kfA35JYLno=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Aug 6 18:38:44 2025 GMT Not After : Aug 13 18:38:44 2025 GMT Subject: CN=6893a134-7d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:66:4b:90:1d:68:99:3a:3a:f2:c1:fe:73: 25:41:36:76:b4:47:b9:e2:c1:3e:b7:c9:ef:5c:41: 3e:7d:85:9c:5c:9c:50:fe:a7:28:05:00:60:a5:7c: 8b:c8:13:6c:19:91:54:de:be:6a:b1:08:2d:42:98: 11:39:8c:35:b5:c4:e6:c2:84:58:77:f8:a3:b4:75: 8c:50:fb:32:b0:bb:c3:b3:76:b5:6c:56:bc:11:16: c4:00:56:59:44:2c:16:5f:5e:7a:21:2c:d7:3c:f3: e3:55:9d:b7:dc:42:4c:4a:1f:e5:11:41:54:ae:91: d7:b1:5b:4d:9c:68:39:4c:06:8b:7e:8e:bf:39:cc: 96:ab:b5:03:53:6b:4c:53:bf:c7:ea:e7:15:b7:b9: b3:0a:01:ae:fc:67:9c:5f:89:35:ed:87:01:b5:5a: 32:0d:f6:44:11:17:c6:91:d8:1e:4a:cd:c1:0d:58: 74:df:52:37:92:5c:70:f3:25:64:71:aa:25:83:79: 27:4c:87:a5:aa:21:6b:be:55:17:35:73:21:2c:9c: 14:32:a3:9f:81:b5:72:3e:c0:90:05:09:96:61:c9: b9:3d:03:3b:4b:4f:b0:cb:5b:4e:59:ab:29:b3:fa: a5:87:b4:2c:73:55:41:19:bd:a4:2f:42:88:ae:ca: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FC:3C:96:56:B6:DD:67:6D:A8:88:B5:AB:13:74:A1:B7:D6:D2:79 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:a9:8a:07:77:02:c6:92:c6:ca:f7:50:7a:e0:8d:30:84: 4f:90:17:81:e0:30:91:28:ef:cb:f4:0d:9b:93:c7:1c:ce:01: fb:cf:41:4b:6e:d6:85:21:c1:cd:51:4c:f9:0b:6b:19:db:b3: aa:85:fb:ff:89:04:3e:70:d2:5c:f6:b3:a4:92:41:90:76:17: 78:85:8d:b3:d7:47:1e:2c:77:28:aa:d5:61:ce:26:ce:2d:48: ef:9d:fd:c2:cd:9a:4c:f9:45:3a:11:10:59:81:59:f2:38:c7: 65:0c:9e:d8:97:74:4c:3b:ef:8a:b0:89:b6:0c:cf:c0:81:84: ce:24:0a:a1:e5:0f:04:52:ae:b5:45:61:fe:ff:a5:3c:de:72: 4c:9a:d1:b9:bb:6c:c5:94:19:af:60:c3:0d:c2:5f:84:ee:48: 40:2d:60:98:c2:d1:b6:be:ea:32:14:e6:50:b4:8b:83:01:9b: 2b:fa:90:7e:b8:9f:8e:09:f9:00:74:f5:34:fe:eb:d8:64:37: e8:0e:e7:40:60:36:5a:bd:7b:c6:0d:07:da:19:8c:3d:2b:68: 6c:28:e6:00:eb:f4:ac:c6:3c:67:9f:da:6b:8a:6c:54:c7:9b: 6d:4e:01:3e:e4:4e:01:ed:80:7d:64:3f:75:31:c3:cf:33:9c: 18:e0:04:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwODA2MTgzODQ0WhcNMjUwODEzMTgzODQ0WjAYMRYwFAYD VQQDEw02ODkzYTEzNC03ZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNlmS5AdaJk6OvLB/nMlQTZ2tEe54sE+t8nvXEE+fYWcXJxQ/qcoBQBgpXyL yBNsGZFU3r5qsQgtQpgROYw1tcTmwoRYd/ijtHWMUPsysLvDs3a1bFa8ERbEAFZZ RCwWX156ISzXPPPjVZ233EJMSh/lEUFUrpHXsVtNnGg5TAaLfo6/OcyWq7UDU2tM U7/H6ucVt7mzCgGu/GecX4k17YcBtVoyDfZEERfGkdgeSs3BDVh031I3klxw8yVk caolg3knTIelqiFrvlUXNXMhLJwUMqOfgbVyPsCQBQmWYcm5PQM7S0+wy1tOWasp s/qlh7Qsc1VBGb2kL0KIrso60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO78PJZW tt1nbaiItasTdKG31tJ5MB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbnamKB3cCxpLGyvdQeuCNMIRPkBeB4DCRKO/L9A2bk8cczgH7z0FL btaFIcHNUUz5C2sZ27Oqhfv/iQQ+cNJc9rOkkkGQdhd4hY2z10ceLHcoqtVhzibO LUjvnf3CzZpM+UU6ERBZgVnyOMdlDJ7Yl3RMO++KsIm2DM/AgYTOJAqh5Q8EUq61 RWH+/6U83nJMmtG5u2zFlBmvYMMNwl+E7khALWCYwtG2vuoyFOZQtIuDAZsr+pB+ uJ+OCfkAdPU0/uvYZDfoDudAYDZavXvGDQfaGYw9K2hsKOYA6/Ssxjxnn9primxU x5ttTgE+5E4B7YB9ZD91McPPM5wY4ATW -----END CERTIFICATE-----Generated at Fri Aug 8 00:38:44 2025 by rpki-client