$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: fmgAoLK7weeSL+0caeG/cs1VpPAbf2chfiaJV/CjGBc= Subject key identifier: B5:31:0F:2E:91:58:1B:A0:1A:14:91:9D:0B:67:62:76:9A:66:BA:8C Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0B49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0B34 Signing time: Fri 08 Aug 2025 19:26:29 +0000 Manifest this update: Fri 08 Aug 2025 19:26:29 +0000 Manifest next update: Fri 15 Aug 2025 19:26:29 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: Gv1qs0wSk6122sT2utfsz/Qi5zuzRh6yfmlRtFPCGrQ=) 2: B7BC4714BEF011ED9634C070C4F9AE02.roa (hash: hCJDcBpZnY511Q8RFEjySoDwZo6yKwsip9nLzCPAimM=) 3: DCA05C0E419A11EAA5E2BA6EC4F9AE02.roa (hash: PF9MEJvH0IR25ZTC0vJ/AU9NL74Mubr8N6aNLLIh+tY=) 4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Aug 8 19:26:29 2025 GMT Not After : Aug 15 19:26:29 2025 GMT Subject: CN=68964f65-de89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3d:42:0f:24:66:5d:d1:d8:c6:cc:20:38:7e: 9b:64:b5:51:af:b1:ef:f0:ee:9b:5e:b0:19:73:11: de:0d:d5:4f:2e:09:37:f4:03:61:f6:1d:09:67:91: a6:cd:b6:c8:cc:8b:24:a8:e1:b3:7a:e8:9f:02:ac: 69:56:3a:3d:56:ea:aa:5d:c4:21:e6:9d:d4:81:56: 77:4e:c6:a4:d3:e0:dd:52:34:ea:a7:ed:16:57:c4: a2:2e:78:ec:86:1c:f1:ed:3b:e8:fd:83:7c:40:3d: 27:f6:1e:1f:ff:6e:cb:8f:fc:fe:64:ce:96:6e:53: f9:24:aa:46:14:cd:0b:51:85:ad:5a:7c:ee:f7:22: 9a:1b:c1:c2:49:e9:64:33:ae:04:2e:24:62:c7:29: 12:b6:e2:d4:66:f8:74:30:26:e7:a2:12:1c:de:84: f5:ca:23:12:04:a2:8f:1e:7a:1f:03:75:88:51:66: 87:cb:94:d1:1e:67:9d:fa:2b:21:f8:b5:32:2a:63: 04:65:c5:ab:3e:0c:41:de:f6:2c:7e:0d:8c:1e:cd: 06:d7:c7:7a:c9:e3:be:e0:6b:06:b9:69:d1:7e:02: ec:5d:d9:d5:57:5d:96:04:e9:31:47:71:ef:c9:9e: cf:c3:81:4d:42:d6:db:e8:37:df:2d:29:68:95:d6: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:0F:2E:91:58:1B:A0:1A:14:91:9D:0B:67:62:76:9A:66:BA:8C X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:82:f7:97:5e:9e:1b:65:a4:4c:44:e8:9a:38:0d:19:f3: 22:b3:4d:43:95:01:2f:b8:b4:10:09:68:5b:f9:39:73:0a:e7: d2:4b:56:f4:26:35:bd:4f:b7:8b:e2:33:dd:58:95:e1:a7:5f: 31:b2:e8:b6:fa:54:dd:93:67:14:26:ce:60:12:77:0d:d8:06: f3:d0:70:39:8e:93:9e:8c:11:75:d8:18:b0:74:6d:61:09:ca: d7:95:28:91:0f:cd:fc:a6:6f:d7:f9:34:96:7a:73:61:65:77: 75:f3:3f:0b:18:21:36:13:a2:8b:bb:97:ad:c7:7e:9e:70:ba: 36:ef:d0:81:64:ca:31:49:b7:e2:b2:96:2c:46:d1:af:f8:98: 5d:98:7b:74:83:fd:32:5c:dc:11:c8:81:d0:3e:db:f6:79:ad: ac:15:f7:c1:a9:4b:f2:ea:40:9e:a9:e7:be:fc:5a:7f:97:74: 0c:b8:82:a0:11:cf:ae:59:f9:71:fe:86:1e:20:61:97:fe:38: 1e:43:0b:ba:40:6b:a6:4a:d1:d5:2f:df:d9:a4:e9:f9:2f:4b: e2:5e:ef:21:50:be:56:a8:f0:eb:38:17:39:0d:18:bb:c9:84: ec:54:ab:c2:05:db:b6:7f:7b:7e:6a:b9:7e:63:f2:4c:0d:e4: de:09:6b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjUwODA4MTkyNjI5WhcNMjUwODE1MTkyNjI5WjAYMRYwFAYD VQQDEw02ODk2NGY2NS1kZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9j1CDyRmXdHYxswgOH6bZLVRr7Hv8O6bXrAZcxHeDdVPLgk39ANh9h0JZ5Gm zbbIzIskqOGzeuifAqxpVjo9VuqqXcQh5p3UgVZ3Tsak0+DdUjTqp+0WV8SiLnjs hhzx7Tvo/YN8QD0n9h4f/27Lj/z+ZM6WblP5JKpGFM0LUYWtWnzu9yKaG8HCSelk M64ELiRixykStuLUZvh0MCbnohIc3oT1yiMSBKKPHnofA3WIUWaHy5TRHmed+ish +LUyKmMEZcWrPgxB3vYsfg2MHs0G18d6yeO+4GsGuWnRfgLsXdnVV12WBOkxR3Hv yZ7Pw4FNQtbb6DffLSloldaU9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUxDy6R WBugGhSRnQtnYnaaZrqMMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgEoL3l16eG2WkTETomjgNGfMis01DlQEvuLQQCWhb+TlzCufSS1b0 JjW9T7eL4jPdWJXhp18xsui2+lTdk2cUJs5gEncN2Abz0HA5jpOejBF12BiwdG1h CcrXlSiRD838pm/X+TSWenNhZXd18z8LGCE2E6KLu5etx36ecLo279CBZMoxSbfi spYsRtGv+JhdmHt0g/0yXNwRyIHQPtv2ea2sFffBqUvy6kCeqee+/Fp/l3QMuIKg Ec+uWflx/oYeIGGX/jgeQwu6QGumStHVL9/ZpOn5L0viXu8hUL5WqPDrOBc5DRi7 yYTsVKvCBdu2f3t+arl+Y/JMDeTeCWsW -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:27 2025 by rpki-client