$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: RWi2hVq75WQaWKK7XZYnak9clIHu798lRNzx3qExA3c= Subject key identifier: CE:CF:FE:F0:11:83:7B:7B:62:31:2D:66:76:DE:C1:88:90:20:8B:42 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 2394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2373 Signing time: Tue 12 Aug 2025 15:53:55 +0000 Manifest this update: Tue 12 Aug 2025 15:53:55 +0000 Manifest next update: Tue 19 Aug 2025 15:53:55 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: ZAdRKjiq0dUswcQ6J7Bd4w/77B/uQ76QieGrdr6Jwqc=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9108 (0x2394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Aug 12 15:53:55 2025 GMT Not After : Aug 19 15:53:55 2025 GMT Subject: CN=689b6393-08fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:fc:1b:01:6c:50:1d:d5:c0:ef:82:f5:e3: 1a:c5:40:6b:e6:f3:83:e3:59:b7:90:4f:6a:f9:6a: 27:43:be:44:1b:88:18:03:be:78:88:6b:9b:ca:63: 7d:94:70:6d:e7:30:e0:91:7b:ac:33:40:05:01:9d: 24:0d:f8:78:4c:5a:ac:09:db:5c:08:a6:72:d2:c5: 59:3f:5b:8f:bb:9a:25:63:20:e6:ca:6e:8d:33:5c: 68:cb:38:33:9b:88:a4:f9:b6:d1:ff:f3:2b:fd:18: 7d:8c:14:21:9f:d4:ae:33:9e:90:00:d8:aa:58:e3: 20:c0:39:3b:e4:1b:ef:d3:19:c0:44:67:38:85:1c: 29:88:bc:b3:e3:ca:1c:ef:a4:68:47:b0:d2:1b:e4: 14:63:96:9d:1b:15:dd:9b:3e:b7:40:ae:11:ac:62: a8:c0:aa:df:b1:1c:2b:15:74:f9:0f:89:b4:8a:73: 0e:1d:dd:20:25:e9:db:e6:bf:a3:8b:ca:a5:1e:6f: 03:9a:3c:91:b3:e0:3f:0f:f7:41:08:38:f7:83:7e: d4:73:46:97:77:28:12:e8:3a:31:04:c0:52:ed:d8: c0:f5:c8:79:38:c3:24:0f:12:52:b2:68:5d:18:7c: 9a:9f:68:1d:cd:f1:b1:bc:dd:99:bb:6c:1e:e9:31: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CF:FE:F0:11:83:7B:7B:62:31:2D:66:76:DE:C1:88:90:20:8B:42 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:93:07:9e:88:fa:9f:5f:cb:e9:1e:69:93:ff:6f:03:86:62: 90:c1:13:47:e0:1f:15:76:df:ee:9b:21:84:9d:7f:ab:70:57: 00:ca:f3:34:6a:12:7f:c3:85:13:97:a8:39:12:76:9f:e3:45: c1:80:47:7a:20:35:e2:96:04:ec:db:a0:95:b7:d8:6a:1d:43: e8:cc:59:5d:8a:35:15:83:00:5c:d8:a4:3d:9f:1e:87:77:ef: e6:df:5e:fe:7b:27:53:ba:c8:23:59:b4:7b:7a:b5:e6:16:06: 56:28:0f:4c:8b:2e:3d:e5:45:44:2c:a1:cd:7c:68:ec:b8:4f: fa:86:dc:7c:78:72:5d:bb:8a:04:14:fa:0f:5b:a7:41:3a:d5: b1:ed:22:c6:9c:23:63:38:e3:9d:14:f9:26:9d:34:81:85:75: 69:80:37:16:5c:51:30:b1:f9:cb:1e:4c:43:7d:66:6d:48:d6: e5:5b:4c:ba:9e:7e:a5:90:7b:7e:10:d2:16:01:60:7d:f9:ef: bd:29:4f:3e:75:43:ec:3a:70:ed:27:6c:be:e8:56:ea:a7:c1: 72:e9:55:7d:60:40:ae:eb:08:6a:9d:61:52:b1:bb:a9:0b:04: 79:4c:4b:74:bb:20:c4:84:29:6d:4c:0b:36:22:31:f1:16:b9: 70:42:fb:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwODEyMTU1MzU1WhcNMjUwODE5MTU1MzU1WjAYMRYwFAYD VQQDEw02ODliNjM5My0wOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3n8GwFsUB3VwO+C9eMaxUBr5vOD41m3kE9q+WonQ75EG4gYA754iGubymN9 lHBt5zDgkXusM0AFAZ0kDfh4TFqsCdtcCKZy0sVZP1uPu5olYyDmym6NM1xoyzgz m4ik+bbR//Mr/Rh9jBQhn9SuM56QANiqWOMgwDk75Bvv0xnARGc4hRwpiLyz48oc 76RoR7DSG+QUY5adGxXdmz63QK4RrGKowKrfsRwrFXT5D4m0inMOHd0gJenb5r+j i8qlHm8DmjyRs+A/D/dBCDj3g37Uc0aXdygS6DoxBMBS7djA9ch5OMMkDxJSsmhd GHyan2gdzfGxvN2Zu2we6THjIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7P/vAR g3t7YjEtZnbewYiQIItCMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBokweeiPqfX8vpHmmT/28DhmKQwRNH4B8Vdt/umyGEnX+rcFcAyvM0 ahJ/w4UTl6g5Enaf40XBgEd6IDXilgTs26CVt9hqHUPozFldijUVgwBc2KQ9nx6H d+/m317+eydTusgjWbR7erXmFgZWKA9Miy495UVELKHNfGjsuE/6htx8eHJdu4oE FPoPW6dBOtWx7SLGnCNjOOOdFPkmnTSBhXVpgDcWXFEwsfnLHkxDfWZtSNblW0y6 nn6lkHt+ENIWAWB9+e+9KU8+dUPsOnDtJ2y+6Fbqp8Fy6VV9YECu6whqnWFSsbup CwR5TEt0uyDEhCltTAs2IjHxFrlwQvsV -----END CERTIFICATE-----Generated at Wed Aug 13 02:15:44 2025 by rpki-client