$ rpki-client -vvf rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft File: n-FamlS6VTXSl0WIBcRwNi7YcXM.mft (raw, json) Hash identifier: MUCIqa9gJQOh5BfR6GPgToEwDnkh7E61UsDwDfAUdeo= Subject key identifier: 2F:0E:89:39:D9:04:F1:6D:C1:57:E2:A0:3C:FC:77:A6:60:7A:D7:37 Authority key identifier: 9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73 Certificate issuer: /CN=A916943B/serialNumber=9FE15A9A54BA5535D297458805C470362ED87173 Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft Manifest number: 0AAC Signing time: Mon 04 Aug 2025 19:46:37 +0000 Manifest this update: Mon 04 Aug 2025 19:46:37 +0000 Manifest next update: Mon 11 Aug 2025 19:46:37 +0000 Files and hashes: 1: n-FamlS6VTXSl0WIBcRwNi7YcXM.crl (hash: oVTxBZLctS3hxvvDQazefz1etXaF6Uy04YRO8R3iHKY=) 2: 205773705AEA11EAA2FDF10EC4F9AE02.roa (hash: xIyzqpx/v+AWGG+aa4XOH44ipbfUfWT7BofPfTKwqVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916943B, serialNumber=9FE15A9A54BA5535D297458805C470362ED87173 Validity Not Before: Aug 4 19:46:37 2025 GMT Not After : Aug 11 19:46:37 2025 GMT Subject: CN=68910e1d-c0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:1a:32:b8:1c:a1:89:65:2a:e8:73:16:65: b1:97:13:a4:46:25:15:9f:07:39:8f:b9:07:bf:05: a1:1f:b6:63:29:87:6b:5c:1b:65:6d:51:53:66:8c: d5:bc:bd:a3:36:04:53:1b:d0:86:5e:1a:9c:79:0b: 81:cd:a9:dc:df:c7:6e:9f:3f:40:15:1c:e8:81:16: c0:91:ea:0d:78:f6:61:34:04:5c:d8:57:ac:b8:4c: 64:3a:89:a4:fa:73:fc:a6:63:30:a8:6e:c7:e5:99: 4a:02:f9:f2:1d:e6:36:a1:e3:67:8c:70:a2:d8:df: 95:c7:c9:f9:54:19:2c:eb:4e:b7:17:2e:3d:6d:4d: 8f:62:61:ca:fa:71:a0:79:19:fe:1e:ad:a4:bb:21: bd:02:a6:0a:27:6c:38:45:c3:42:c1:63:ae:6b:f7: 02:26:a5:9d:7d:65:23:07:b1:d9:fe:f9:aa:62:46: 74:e9:8a:29:27:9d:5e:d5:61:4d:4a:80:4d:2d:7d: f2:0e:2c:67:0c:fe:f5:86:00:31:4c:90:cc:b0:c5: 9c:e4:cc:0d:fd:1b:47:66:93:82:34:68:06:01:83: ce:72:05:ad:56:c0:2e:cf:b1:8e:6b:3c:86:43:35: 90:e9:24:bc:82:62:03:c9:b8:8e:38:72:bd:2d:2a: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0E:89:39:D9:04:F1:6D:C1:57:E2:A0:3C:FC:77:A6:60:7A:D7:37 X509v3 Authority Key Identifier: keyid:9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:46:08:4f:b1:f9:08:08:7a:04:be:53:44:5c:bf:3a:05:5e: 8a:f6:42:dc:be:7c:b7:50:fd:30:98:0e:2d:2d:64:4c:0a:65: 7e:4f:ca:df:cd:28:2d:1c:a8:3d:c3:30:7d:d9:2c:4b:77:71: 49:53:98:df:c0:de:90:c7:8e:1a:ec:fa:56:9e:c7:f5:2c:af: 5e:98:e9:df:28:68:85:4b:f3:1f:b3:f7:fa:81:0c:f6:11:11: 35:0d:c0:32:be:26:77:6d:23:ce:12:5c:d4:55:91:e8:59:b1: 9d:51:fd:d7:03:46:5a:aa:22:2f:b0:5d:3e:e4:ec:56:e4:39: ae:8c:fc:7f:7c:ff:1f:10:69:8f:2b:bc:19:a2:f5:65:ae:81: 0a:99:2f:a0:9c:91:b4:0b:f0:ad:ca:e9:81:42:0d:ed:3b:0d: cb:61:20:65:09:3e:b5:b4:94:d8:fe:75:a6:a8:32:3a:59:29: 9f:5f:2f:93:2f:e2:21:84:86:d2:ef:55:65:e2:b2:92:18:c6: 9b:91:e9:a7:e9:58:44:89:f8:c9:3b:a2:e8:13:ac:bf:b1:28: 0f:83:13:15:cf:50:ba:a0:6b:4d:90:4f:69:ea:6a:47:c2:cf: 9c:98:35:f9:65:fe:ee:fa:a7:c4:00:a8:5d:ed:a5:c5:3b:29: cc:0c:55:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0M0IxMTAvBgNVBAUTKDlGRTE1QTlBNTRCQTU1MzVEMjk3NDU4ODA1QzQ3MDM2 MkVEODcxNzMwHhcNMjUwODA0MTk0NjM3WhcNMjUwODExMTk0NjM3WjAYMRYwFAYD VQQDEw02ODkxMGUxZC1jMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArioaMrgcoYllKuhzFmWxlxOkRiUVnwc5j7kHvwWhH7ZjKYdrXBtlbVFTZozV vL2jNgRTG9CGXhqceQuBzanc38dunz9AFRzogRbAkeoNePZhNARc2FesuExkOomk +nP8pmMwqG7H5ZlKAvnyHeY2oeNnjHCi2N+Vx8n5VBks6063Fy49bU2PYmHK+nGg eRn+Hq2kuyG9AqYKJ2w4RcNCwWOua/cCJqWdfWUjB7HZ/vmqYkZ06YopJ51e1WFN SoBNLX3yDixnDP71hgAxTJDMsMWc5MwN/RtHZpOCNGgGAYPOcgWtVsAuz7GOazyG QzWQ6SS8gmIDybiOOHK9LSp3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8OiTnZ BPFtwVfioDz8d6Zgetc3MB8GA1UdIwQYMBaAFJ/hWppUulU10pdFiAXEcDYu2HFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQzQi82NEYzMUMwNjVB RTkxMUVBQUM4RjUyMEVDNEY5QUUwMi9uLUZhbWxTNlZUWFNsMFdJQmNSd05pN1lj WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24tRmFtbFM2VlRYU2wwV0lCY1J3Tmk3WWNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQzQi82NEYzMUMwNjVBRTkxMUVBQUM4RjUyMEVDNEY5QUUwMi9uLUZhbWxTNlZU WFNsMFdJQmNSd05pN1ljWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXRghPsfkICHoEvlNEXL86BV6K9kLcvny3UP0wmA4tLWRMCmV+T8rf zSgtHKg9wzB92SxLd3FJU5jfwN6Qx44a7PpWnsf1LK9emOnfKGiFS/Mfs/f6gQz2 ERE1DcAyviZ3bSPOElzUVZHoWbGdUf3XA0ZaqiIvsF0+5OxW5DmujPx/fP8fEGmP K7wZovVlroEKmS+gnJG0C/CtyumBQg3tOw3LYSBlCT61tJTY/nWmqDI6WSmfXy+T L+IhhIbS71Vl4rKSGMabkemn6VhEifjJO6LoE6y/sSgPgxMVz1C6oGtNkE9p6mpH ws+cmDX5Zf7u+qfEAKhd7aXFOynMDFUd -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:05 2025 by rpki-client