$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: 2xvLE7PqcRWmRoZnMck41mIat+gFKil8iNP778Afhts= Subject key identifier: FE:D1:51:67:E3:64:89:66:9C:AB:7B:E0:F3:81:3E:91:A4:57:6B:11 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: 0127 Signing time: Sat 09 Aug 2025 05:02:23 +0000 Manifest this update: Sat 09 Aug 2025 05:02:23 +0000 Manifest next update: Sat 16 Aug 2025 05:02:23 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: +IOUqAzLN7uUMdqJzFhMtWHT7UvpgjgwW3iSMxAr7oA=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: lR8Bw6f2BJOLO8ooe7J/r1W5noPvKu/D4s9lgSl+fj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD, serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Validity Not Before: Aug 9 05:02:23 2025 GMT Not After : Aug 16 05:02:23 2025 GMT Subject: CN=6896d65f-e6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0b:26:ea:e3:0d:c7:ce:db:89:9b:48:4b:16: a5:2b:58:f2:fc:7e:f3:0f:c2:49:5d:61:94:68:1d: 98:55:0f:75:8d:91:31:41:3b:ed:32:2e:8d:6d:78: 14:b8:5c:43:23:b7:79:5e:42:ed:61:4c:10:f3:ae: a1:b9:5a:40:ca:a4:e8:1a:cb:da:ad:35:9c:89:5e: 9a:cd:df:ba:4f:31:1f:4b:ea:63:47:c8:fc:ee:a5: 33:4c:a1:62:2f:10:c0:b2:75:d0:aa:de:ea:53:90: f8:7b:cb:eb:8f:6c:d8:fc:b4:03:4e:57:b6:ca:b1: f4:a9:0e:3a:03:5d:c9:88:54:d5:9e:ae:89:83:72: 81:e7:9d:e2:29:69:52:09:a2:b3:a0:17:9d:57:d9: 23:a2:b2:d8:d9:10:5c:d8:9e:78:0a:15:24:fc:22: 44:10:76:a9:18:61:2f:dd:32:2c:30:63:ed:54:4b: 48:e0:b2:82:f8:83:f0:9d:95:24:a4:c7:a0:1c:71: 11:a1:36:56:02:fc:5a:5e:0f:24:c1:3a:70:37:ec: 8e:af:0d:5a:bf:0c:eb:aa:6c:2e:58:d8:1d:bf:4e: fd:04:00:0b:4c:93:89:4e:b5:b6:49:4f:ed:c3:59: 00:cf:78:8c:63:3f:fe:db:70:fb:9d:26:1b:4b:93: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D1:51:67:E3:64:89:66:9C:AB:7B:E0:F3:81:3E:91:A4:57:6B:11 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d8:42:5f:77:99:98:ee:a3:c8:27:6d:57:42:c1:c2:a6:fa: 32:cf:84:de:77:c9:d5:b7:8f:89:7f:e0:1e:62:9a:20:42:5b: 43:22:c2:de:0e:77:2c:1d:dc:ed:55:f2:0f:7f:1e:b4:c2:57: db:55:c0:45:7b:8f:88:3b:81:de:49:f1:78:b3:57:6d:10:08: 9e:6a:e1:d6:55:73:26:d9:29:a0:f3:35:ef:af:41:ad:10:57: 6a:23:e0:72:91:ca:81:89:15:6b:9c:a2:73:c0:f2:81:57:be: 4a:94:e4:fd:6c:56:62:46:cf:44:96:50:d3:fe:39:94:e3:6a: 27:aa:56:a5:e9:d0:75:8e:4e:67:d5:9c:2f:14:1c:87:fa:d8: bd:45:be:d7:d5:f1:e6:9d:e0:b7:9e:58:6b:79:fb:33:5a:31: 9f:19:1c:1c:41:ff:5c:62:88:51:a7:6a:94:7a:db:2e:0f:fe: b1:63:4b:5c:fd:33:21:de:c2:a6:24:96:95:35:2f:d5:62:34: d5:f6:7e:57:fe:b1:3e:6a:9f:98:a5:00:99:e8:0f:6d:d2:90: 0f:51:e2:03:75:cd:05:f6:4c:16:e0:5b:fe:8d:e0:9d:22:1b: 2c:bd:2d:63:0f:d8:23:b1:f7:83:5b:c1:8d:56:37:25:24:82: 4c:83:fe:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKDE2N0Q2RUMzMkFEMEIzNTgxNUYyODg0N0FERDc5NzBF QjY3RjJEQkEwHhcNMjUwODA5MDUwMjIzWhcNMjUwODE2MDUwMjIzWjAYMRYwFAYD VQQDEw02ODk2ZDY1Zi1lNmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gsm6uMNx87biZtISxalK1jy/H7zD8JJXWGUaB2YVQ91jZExQTvtMi6NbXgU uFxDI7d5XkLtYUwQ866huVpAyqToGsvarTWciV6azd+6TzEfS+pjR8j87qUzTKFi LxDAsnXQqt7qU5D4e8vrj2zY/LQDTle2yrH0qQ46A13JiFTVnq6Jg3KB553iKWlS CaKzoBedV9kjorLY2RBc2J54ChUk/CJEEHapGGEv3TIsMGPtVEtI4LKC+IPwnZUk pMegHHERoTZWAvxaXg8kwTpwN+yOrw1avwzrqmwuWNgdv079BAALTJOJTrW2SU/t w1kAz3iMYz/+23D7nSYbS5N7tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7RUWfj ZIlmnKt74POBPpGkV2sRMB8GA1UdIwQYMBaAFBZ9bsMq0LNYFfKIR63Xlw62fy26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zRTQwMDY5OEIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMxZ1Y4b2hIcmRlWERyWl9M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zRTQwMDY5OEIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMx Z1Y4b2hIcmRlWERyWl9MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf2EJfd5mY7qPIJ21XQsHCpvoyz4Ted8nVt4+Jf+AeYpogQltDIsLe DncsHdztVfIPfx60wlfbVcBFe4+IO4HeSfF4s1dtEAieauHWVXMm2Smg8zXvr0Gt EFdqI+BykcqBiRVrnKJzwPKBV75KlOT9bFZiRs9EllDT/jmU42onqlal6dB1jk5n 1ZwvFByH+ti9Rb7X1fHmneC3nlhrefszWjGfGRwcQf9cYohRp2qUetsuD/6xY0tc /TMh3sKmJJaVNS/VYjTV9n5X/rE+ap+YpQCZ6A9t0pAPUeIDdc0F9kwW4Fv+jeCd IhssvS1jD9gjsfeDW8GNVjclJIJMg/7H -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:35 2025 by rpki-client