$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: MHFp3xlldVE6kl4FPJPTOHO6pO6rQS/3M6eE1YPMkqQ= Subject key identifier: F9:49:31:75:79:A3:C6:22:7B:85:58:C4:68:03:E1:7D:31:1C:45:EE Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 0329 Signing time: Sat 09 Aug 2025 01:39:56 +0000 Manifest this update: Sat 09 Aug 2025 01:39:55 +0000 Manifest next update: Sat 16 Aug 2025 01:39:55 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: t3T4GEhCXyq28g4SXoP3H4PoR7xE1uhzDY8mBRDqfIw=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Aug 9 01:39:55 2025 GMT Not After : Aug 16 01:39:55 2025 GMT Subject: CN=6896a6eb-2bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:b8:db:0b:c3:60:ad:c0:c9:81:75:07:cd: a9:6d:cd:09:3d:e9:80:96:b8:77:68:7e:9f:2b:03: a0:b9:96:05:b9:11:a6:a0:dd:81:d6:37:09:58:ab: 3b:c3:e5:c3:64:26:58:a1:72:3f:f0:e4:b4:65:93: ac:86:1b:f7:4e:da:09:1e:43:82:2a:95:77:52:6c: 04:de:18:c3:9c:a6:48:17:ef:65:3f:61:49:17:0e: 0f:49:23:6b:2a:ed:49:78:e3:26:97:34:2c:e0:ef: 33:bf:62:11:f0:13:9f:90:6b:46:f0:98:14:6d:fc: d0:f8:d1:97:15:10:70:c8:3c:f3:e7:4e:37:bc:a7: 27:ec:76:ee:c8:37:11:9c:ab:fa:7a:7b:58:a8:99: fa:2c:a8:01:d6:f5:bb:4d:10:22:17:cf:fe:9e:24: 6e:06:c7:a3:01:32:11:d1:f9:3d:eb:ef:5d:a2:e9: e1:3a:f2:43:c4:b2:15:0a:5b:fa:b9:a6:d4:10:f0: c6:1a:eb:bc:fc:9b:63:b6:37:f5:74:3c:65:88:47: 3c:bb:21:bf:11:9a:88:88:6e:98:93:2f:a2:81:fc: dc:c2:b5:da:fe:59:9d:67:8c:fc:58:fe:a9:82:d6: 0c:99:71:2a:20:79:bd:da:53:2b:28:88:bf:a4:df: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:49:31:75:79:A3:C6:22:7B:85:58:C4:68:03:E1:7D:31:1C:45:EE X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3e:4d:6f:d0:a4:0c:db:1d:60:47:b4:4f:e8:49:b7:34:ba: 95:35:54:da:29:36:b7:4f:d3:ff:39:57:66:e7:51:38:48:f2: 54:49:2d:ba:28:3c:c3:ab:25:28:d6:ef:52:d8:04:19:4b:95: 7f:9d:24:af:df:f4:83:70:10:cf:d0:16:b5:7d:7d:16:a9:3e: 2b:c2:47:a3:2d:3e:93:d3:70:1a:99:d3:12:f0:c7:0b:7a:50: 5f:a4:04:93:fa:46:52:61:d1:23:16:d6:99:7a:22:e1:1f:3f: 49:35:a1:06:03:92:02:15:37:bb:80:b9:20:8f:78:e9:96:43: 56:f5:86:cc:07:6f:ba:ec:95:bc:d2:55:7e:cb:8f:fb:c3:73: f7:53:b6:29:fc:79:c7:5a:67:8b:6d:a9:3b:43:38:2f:9a:e2: 28:5f:e3:2f:36:4f:db:31:87:93:5f:e3:38:da:19:af:02:50: e1:9a:20:cb:54:0f:74:18:8c:da:6b:1e:30:3d:7a:a3:9d:ed: 56:34:51:b2:c3:b5:2b:3c:6a:a4:98:30:6a:c5:07:df:90:6d: ca:ce:90:a6:43:e3:93:d5:d8:01:c5:f0:8b:70:56:c6:7f:2e: 1a:1d:24:2f:9f:4d:a3:18:1a:cd:5a:1a:1b:ae:cb:52:69:f2: 5b:1d:b3:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUwODA5MDEzOTU1WhcNMjUwODE2MDEzOTU1WjAYMRYwFAYD VQQDEw02ODk2YTZlYi0yYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdS42wvDYK3AyYF1B82pbc0JPemAlrh3aH6fKwOguZYFuRGmoN2B1jcJWKs7 w+XDZCZYoXI/8OS0ZZOshhv3TtoJHkOCKpV3UmwE3hjDnKZIF+9lP2FJFw4PSSNr Ku1JeOMmlzQs4O8zv2IR8BOfkGtG8JgUbfzQ+NGXFRBwyDzz5043vKcn7HbuyDcR nKv6entYqJn6LKgB1vW7TRAiF8/+niRuBsejATIR0fk96+9dounhOvJDxLIVClv6 uabUEPDGGuu8/Jtjtjf1dDxliEc8uyG/EZqIiG6Yky+igfzcwrXa/lmdZ4z8WP6p gtYMmXEqIHm92lMrKIi/pN8lbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlJMXV5 o8Yie4VYxGgD4X0xHEXuMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhPk1v0KQM2x1gR7RP6Em3NLqVNVTaKTa3T9P/OVdm51E4SPJUSS26 KDzDqyUo1u9S2AQZS5V/nSSv3/SDcBDP0Ba1fX0WqT4rwkejLT6T03AamdMS8McL elBfpAST+kZSYdEjFtaZeiLhHz9JNaEGA5ICFTe7gLkgj3jplkNW9YbMB2+67JW8 0lV+y4/7w3P3U7Yp/HnHWmeLbak7QzgvmuIoX+MvNk/bMYeTX+M42hmvAlDhmiDL VA90GIzaax4wPXqjne1WNFGyw7UrPGqkmDBqxQffkG3KzpCmQ+OT1dgBxfCLcFbG fy4aHSQvn02jGBrNWhobrstSafJbHbMK -----END CERTIFICATE-----Generated at Sun Aug 10 16:08:30 2025 by rpki-client