$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: zTT3GCmnCrr0P8JmSZBhBrF9IDwAX1n4NxOUDFET8GA= Subject key identifier: 2B:A0:F7:5F:A2:9E:04:9F:A1:8F:28:89:32:2B:74:23:3B:A6:FA:06 Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 34 Signing time: Tue 05 Aug 2025 08:17:44 +0000 Manifest this update: Tue 05 Aug 2025 08:17:44 +0000 Manifest next update: Tue 12 Aug 2025 08:17:44 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: mT9flBgHaiDnHqpMemer04xIbJ806BaJe0Uy3XCzZ4c=) 2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) 3: 7F09FC70323611F0AB3FA70BC4F9AE02.roa (hash: e5UjmqUjbahnofPOK94PTOrYf4VsadI2aqpgREwVS7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Aug 5 08:17:44 2025 GMT Not After : Aug 12 08:17:44 2025 GMT Subject: CN=6891be28-58ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:2e:e3:02:ff:22:c5:87:ee:88:3a:c2:ea: a6:97:3a:0e:4f:ca:f0:e4:b1:fd:12:ff:a1:ad:4f: fe:ea:44:5b:11:99:12:b2:19:a4:a6:02:f3:53:fe: 9d:ce:05:a1:ca:50:8a:50:4e:ab:c2:ea:5a:d7:89: e7:0a:96:50:c8:ed:c5:82:56:d6:00:94:9d:e3:fb: 44:79:1b:64:89:07:26:91:a6:9e:91:15:3c:8a:06: b3:58:3a:e7:61:ac:b9:a5:0d:fa:4f:c5:59:01:13: 4c:1f:fc:2c:5b:eb:b0:40:26:87:c0:65:9a:ea:37: 96:20:32:af:24:78:72:6c:3e:32:1a:91:80:5f:60: 1a:d7:e6:f9:2b:e6:bf:75:5d:a9:63:2c:d9:76:19: cf:c1:b3:72:7d:a3:16:ff:23:0f:2a:8a:51:d4:67: 53:ec:56:e0:c7:3d:2b:66:86:35:64:68:39:46:16: a7:b2:c3:dc:04:e4:7e:d6:c8:04:a9:54:fb:1d:94: 9d:07:70:a7:a7:81:5f:f8:1c:1a:2f:91:77:b4:7f: 21:1d:2a:55:42:3c:40:1a:4a:9b:ae:bd:29:41:ce: d3:f1:c2:9f:a9:e2:fa:3e:6c:85:10:86:66:63:08: b4:01:a1:37:83:05:70:5e:0c:46:a3:1a:d9:2f:7f: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:F7:5F:A2:9E:04:9F:A1:8F:28:89:32:2B:74:23:3B:A6:FA:06 X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:3d:25:9f:d0:5c:9a:aa:cd:5a:ba:3f:a4:02:8d:34:80:a5: fc:93:3c:5d:ee:e1:30:27:b7:f1:81:49:dc:5e:d0:4c:5d:b3: 85:31:0b:19:a7:28:62:87:34:12:e8:c1:62:a5:f2:a7:f9:88: 17:f6:f8:94:03:c0:9c:7c:94:cb:86:8a:0c:ca:e3:57:ea:17: af:39:22:6a:90:8f:46:6a:cf:34:a9:6d:29:27:c3:6e:ed:6d: d1:f3:6b:0b:8f:c8:65:40:6d:8a:99:e0:fc:99:74:20:b2:93: 55:9c:84:c0:d5:1e:8d:12:1d:b2:56:3b:4e:55:e2:23:a2:70: 18:24:42:89:2b:c7:86:f8:27:de:1b:fc:93:03:6b:95:29:1b: 6c:9a:34:e4:5a:b7:f3:60:e5:53:b1:be:74:2b:b8:f6:47:1e: 00:35:d0:a4:aa:ec:be:5c:97:6e:72:3a:dc:f4:43:31:a6:95: 2c:42:cb:de:10:a4:ae:08:59:32:79:b0:ca:50:e3:a1:03:3b: 7b:86:d4:8f:75:8a:02:01:e8:3e:c9:86:d0:64:06:ca:2b:5f: 44:14:f1:12:8d:51:d2:61:49:1d:6e:0a:64:2c:6e:31:52:6b: c1:e6:fd:63:84:57:ac:a0:c0:d5:af:ee:d8:fb:5a:e9:d7:14: 48:4d:cd:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ5QjExMC8GA1UEBRMoN0YwMzk3QzZBOTRFNTI1OTc2ODM0QkJGRDU4MDJGMTVC Nzk1RkI4RTAeFw0yNTA4MDUwODE3NDRaFw0yNTA4MTIwODE3NDRaMBgxFjAUBgNV BAMTDTY4OTFiZTI4LTU4Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC45y7jAv8ixYfuiDrC6qaXOg5PyvDksf0S/6GtT/7qRFsRmRKyGaSmAvNT/p3O BaHKUIpQTqvC6lrXiecKllDI7cWCVtYAlJ3j+0R5G2SJByaRpp6RFTyKBrNYOudh rLmlDfpPxVkBE0wf/Cxb67BAJofAZZrqN5YgMq8keHJsPjIakYBfYBrX5vkr5r91 XaljLNl2Gc/Bs3J9oxb/Iw8qilHUZ1PsVuDHPStmhjVkaDlGFqeyw9wE5H7WyASp VPsdlJ0HcKengV/4HBovkXe0fyEdKlVCPEAaSpuuvSlBztPxwp+p4vo+bIUQhmZj CLQBoTeDBXBeDEajGtkvfwofAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK6D3X6Ke BJ+hjyiJMit0Izum+gYwHwYDVR0jBBgwFoAUfwOXxqlOUll2g0u/1YAvFbeV+44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDlCL0IyQTU3N0MyMjc0 NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZndPWHhxbE9VbGwyZzB1XzFZQXZGYmVWLTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDlCL0IyQTU3N0MyMjc0NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxs MmcwdV8xWUF2RmJlVi00NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGE9JZ/QXJqqzVq6P6QCjTSApfyTPF3u4TAnt/GBSdxe0Exds4UxCxmn KGKHNBLowWKl8qf5iBf2+JQDwJx8lMuGigzK41fqF685ImqQj0ZqzzSpbSknw27t bdHzawuPyGVAbYqZ4PyZdCCyk1WchMDVHo0SHbJWO05V4iOicBgkQokrx4b4J94b /JMDa5UpG2yaNORat/Ng5VOxvnQruPZHHgA10KSq7L5cl25yOtz0QzGmlSxCy94Q pK4IWTJ5sMpQ46EDO3uG1I91igIB6D7JhtBkBsorX0QU8RKNUdJhSR1uCmQsbjFS a8Hm/WOEV6ygwNWv7tj7WunXFEhNzUo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:36 2025 by rpki-client