$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: 9fr7yV50J5XLJgkTnq/OG33KloOiqb8JRKYTUGFyALA= Subject key identifier: 86:61:CB:8E:9A:14:4C:89:03:96:4E:A4:13:8E:5C:BC:16:FE:9A:50 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F43 Signing time: Tue 12 Aug 2025 16:05:00 +0000 Manifest this update: Tue 12 Aug 2025 16:05:00 +0000 Manifest next update: Tue 19 Aug 2025 16:05:00 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: de8mh1sc07JiE8GGXceE5k9CbI18CaKgjJJuFezbh4c=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8016 (0x1f50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Aug 12 16:05:00 2025 GMT Not After : Aug 19 16:05:00 2025 GMT Subject: CN=689b662c-3a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e9:43:15:e9:57:fa:81:31:f6:86:bf:e0:e8: 45:f6:72:de:4c:ea:6a:2b:0c:da:8b:6d:93:6d:b1: 2e:e7:c9:2d:39:61:da:15:79:e4:e1:14:9e:2e:ea: f4:e4:4c:9b:82:f5:e6:37:e2:29:87:42:80:2e:a0: ad:1b:e8:5d:87:a3:ec:c7:59:d4:c8:c2:08:9a:69: 0d:5d:d5:64:24:29:53:70:0d:b1:b5:e7:09:3c:10: 2d:d6:d7:bc:71:cc:8f:8c:91:26:ad:85:bd:09:e8: 10:aa:3b:d2:4b:8e:a7:05:8b:09:1a:b9:c1:d9:0e: f7:5f:14:f3:a0:92:ba:1c:2a:55:c0:0f:6a:78:61: 09:5a:3d:3b:91:78:70:83:70:07:a9:cf:f5:e5:4a: 47:df:a6:40:11:c4:57:03:86:5e:c9:ea:61:b8:bf: 3d:84:60:34:8a:e6:6d:16:1e:87:83:b7:51:58:5e: 8d:58:f0:d7:a3:b8:73:a0:a2:e8:65:3f:4e:a2:29: c9:e0:6c:93:73:73:07:b5:fb:db:8d:6c:fb:ca:35: a7:ea:98:b8:bd:a0:53:de:ff:7c:b2:85:66:f3:5d: b3:ee:89:10:1a:d4:0b:4d:91:de:9a:62:9c:ad:6c: b1:b5:88:c9:47:84:de:fc:2c:bf:e2:fd:81:9f:9e: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:61:CB:8E:9A:14:4C:89:03:96:4E:A4:13:8E:5C:BC:16:FE:9A:50 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:27:85:4f:33:00:fc:a7:fb:4e:9c:3a:83:e0:f2:e9:15:4b: 2f:38:c4:e4:61:93:9b:91:5f:dc:e2:c5:f7:1b:9c:55:cb:15: be:d8:21:b7:7e:39:69:6d:f3:41:7f:91:91:b8:25:be:29:8b: ea:8f:17:24:48:93:0c:9f:9d:74:ce:c9:de:59:1b:1f:8d:01: d1:36:ce:0f:11:86:63:80:ef:af:e0:66:ca:cd:14:58:97:fd: 4e:72:fb:56:d8:50:96:e2:b2:11:f9:3c:78:28:e9:61:b2:8a: da:47:4b:7d:2d:b7:8b:f8:ad:39:d8:23:c6:05:9f:dd:c3:35: 6d:a3:4f:90:16:4f:70:89:ee:d5:25:ae:a5:12:7d:a2:bf:30: 5b:6b:d8:22:a6:a5:12:b1:d5:53:9e:89:0e:c8:a3:09:2a:9f: 58:07:e6:14:95:5a:9d:22:4e:d9:75:fc:af:25:2e:f3:05:f6: e1:c7:8e:5b:78:68:23:cc:1a:05:1f:3d:d8:9d:5c:f0:d6:25: 70:97:ed:da:b2:cb:1a:5c:4f:b9:91:24:f1:03:3d:85:86:ab: ae:9f:f6:c8:5c:5a:ec:da:33:13:b3:5e:71:10:fe:90:56:d2: df:ac:c0:c4:5b:fa:3c:d2:b4:53:eb:ef:75:03:0f:c9:4c:20: 89:c8:6c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwODEyMTYwNTAwWhcNMjUwODE5MTYwNTAwWjAYMRYwFAYD VQQDEw02ODliNjYyYy0zYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+lDFelX+oEx9oa/4OhF9nLeTOpqKwzai22TbbEu58ktOWHaFXnk4RSeLur0 5EybgvXmN+Iph0KALqCtG+hdh6Psx1nUyMIImmkNXdVkJClTcA2xtecJPBAt1te8 ccyPjJEmrYW9CegQqjvSS46nBYsJGrnB2Q73XxTzoJK6HCpVwA9qeGEJWj07kXhw g3AHqc/15UpH36ZAEcRXA4ZeyephuL89hGA0iuZtFh6Hg7dRWF6NWPDXo7hzoKLo ZT9OoinJ4GyTc3MHtfvbjWz7yjWn6pi4vaBT3v98soVm812z7okQGtQLTZHemmKc rWyxtYjJR4Te/Cy/4v2Bn57bwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZhy46a FEyJA5ZOpBOOXLwW/ppQMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvJ4VPMwD8p/tOnDqD4PLpFUsvOMTkYZObkV/c4sX3G5xVyxW+2CG3 fjlpbfNBf5GRuCW+KYvqjxckSJMMn510zsneWRsfjQHRNs4PEYZjgO+v4GbKzRRY l/1OcvtW2FCW4rIR+Tx4KOlhsoraR0t9LbeL+K052CPGBZ/dwzVto0+QFk9wie7V Ja6lEn2ivzBba9gipqUSsdVTnokOyKMJKp9YB+YUlVqdIk7ZdfyvJS7zBfbhx45b eGgjzBoFHz3YnVzw1iVwl+3asssaXE+5kSTxAz2Fhquun/bIXFrs2jMTs15xEP6Q VtLfrMDEW/o80rRT6+91Aw/JTCCJyGwZ -----END CERTIFICATE-----Generated at Wed Aug 13 00:29:58 2025 by rpki-client