$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: ISKXcJGd6smOS3pDY/rvSHv8lY+m05xw6JW7A6jXnOQ= Subject key identifier: AE:F7:B4:C4:DE:FD:49:03:B8:41:4E:59:1E:5E:F1:F1:1F:87:2A:7F Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0191 Signing time: Mon 11 Aug 2025 03:37:38 +0000 Manifest this update: Mon 11 Aug 2025 03:37:37 +0000 Manifest next update: Mon 18 Aug 2025 03:37:37 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: 9lUmaNl3r2uJjTbkbaeS5Jzj0c0byzMrmPYTwItkz9g=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: IU2n2x/NVgQOUwGjqFagszzivCXrq63+ZL+OISFLwDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Aug 11 03:37:37 2025 GMT Not After : Aug 18 03:37:37 2025 GMT Subject: CN=68996582-5e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:b1:1e:8d:1b:57:d6:29:78:2e:e8:80:f0: 07:16:4c:d7:f7:86:af:e5:00:66:f8:3e:e4:f0:0a: ad:80:42:b3:3e:ec:6c:79:b2:fa:83:67:8a:4b:35: 85:ac:7f:8b:c4:ac:bd:db:37:b5:18:c0:e0:f9:0c: 43:50:bd:43:32:49:d4:ea:09:ab:a8:6e:49:5f:31: 69:6b:e7:77:9e:0e:00:3e:19:cc:f9:5d:cf:01:37: 64:d2:b4:25:88:66:a8:28:a3:9d:cd:7a:fc:f7:36: 0d:0f:5f:6d:10:bc:5b:5e:2a:7e:88:b5:dd:e8:87: 78:49:04:8d:3d:ba:22:ee:07:38:02:db:d8:c7:c6: a3:bf:31:93:00:92:a0:b4:be:04:33:cb:50:d0:8d: 34:ca:47:2e:75:e1:45:bf:14:fc:a8:8a:d3:98:8b: dc:ee:32:c1:c5:64:19:05:23:25:fc:10:1a:60:0f: 4d:df:84:4b:ed:0d:1e:82:bd:16:db:ec:a7:b8:1b: 2e:f3:99:0f:c0:30:d6:47:ad:0a:c7:b2:95:b2:5d: 64:e2:06:b4:73:b4:98:fd:4f:47:3a:a3:f3:08:98: 22:1d:5c:76:fe:73:1c:53:76:7a:2e:9f:12:a0:c3: 27:56:23:78:10:db:88:b4:1b:56:5a:d1:c6:50:63: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:B4:C4:DE:FD:49:03:B8:41:4E:59:1E:5E:F1:F1:1F:87:2A:7F X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e3:e7:f2:1e:59:f4:7b:5f:77:bf:eb:60:62:17:8f:5f:da: 77:00:04:e9:56:fa:2b:a8:97:31:02:3d:f4:16:c5:ec:96:50: 5b:27:8c:dc:4c:0c:63:8e:99:df:2b:ea:56:5b:d0:17:92:f6: 8e:b6:f8:26:9c:f2:7d:7b:06:fe:96:47:66:a3:29:89:7c:c1: b7:e6:c7:36:68:84:a0:d2:9f:9a:90:41:7e:11:21:46:9f:d5: a3:93:a1:d3:04:05:50:85:00:f6:ad:5b:d1:ef:3c:ed:6e:4d: 38:ef:cd:e2:26:f5:89:eb:eb:53:4d:a7:a8:f9:84:17:15:e9: 09:8a:45:a2:85:f4:fd:b0:49:a7:56:b2:11:1e:ce:1b:e6:c0: 49:ae:65:5e:ff:b5:46:86:73:a9:56:e8:64:2a:62:9a:63:80: 46:35:a3:5d:b0:d2:5f:2c:87:a8:81:a6:da:c5:ca:fa:c8:eb: 01:c7:a6:79:42:74:cf:b6:69:22:6a:04:3b:bc:15:2c:67:33: 1f:c7:6c:7f:65:4f:fd:8e:1e:30:83:65:0f:c2:95:bc:50:d6: 0c:b5:f7:f6:69:d3:4f:2c:2f:a0:47:79:28:38:28:65:bf:bc: 82:ca:18:18:66:9f:87:68:c2:77:94:99:77:22:22:de:a0:04: 45:ba:e2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwODExMDMzNzM3WhcNMjUwODE4MDMzNzM3WjAYMRYwFAYD VQQDEw02ODk5NjU4Mi01ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fmxHo0bV9YpeC7ogPAHFkzX94av5QBm+D7k8AqtgEKzPuxsebL6g2eKSzWF rH+LxKy92ze1GMDg+QxDUL1DMknU6gmrqG5JXzFpa+d3ng4APhnM+V3PATdk0rQl iGaoKKOdzXr89zYND19tELxbXip+iLXd6Id4SQSNPboi7gc4AtvYx8ajvzGTAJKg tL4EM8tQ0I00ykcudeFFvxT8qIrTmIvc7jLBxWQZBSMl/BAaYA9N34RL7Q0egr0W 2+ynuBsu85kPwDDWR60Kx7KVsl1k4ga0c7SY/U9HOqPzCJgiHVx2/nMcU3Z6Lp8S oMMnViN4ENuItBtWWtHGUGP4kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK73tMTe /UkDuEFOWR5e8fEfhyp/MB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC4+fyHln0e193v+tgYhePX9p3AATpVvorqJcxAj30FsXsllBbJ4zc TAxjjpnfK+pWW9AXkvaOtvgmnPJ9ewb+lkdmoymJfMG35sc2aISg0p+akEF+ESFG n9Wjk6HTBAVQhQD2rVvR7zztbk04783iJvWJ6+tTTaeo+YQXFekJikWihfT9sEmn VrIRHs4b5sBJrmVe/7VGhnOpVuhkKmKaY4BGNaNdsNJfLIeogabaxcr6yOsBx6Z5 QnTPtmkiagQ7vBUsZzMfx2x/ZU/9jh4wg2UPwpW8UNYMtff2adNPLC+gR3koOChl v7yCyhgYZp+HaMJ3lJl3IiLeoARFuuIn -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:38 2025 by rpki-client