$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: sApnTjdTauIOzqhxe4C7vt2dvT25Cu8E3OE06/6OMLE= Subject key identifier: 0E:3A:0C:3A:A2:BC:B8:ED:4D:AC:AE:E5:B2:F8:8F:26:1F:A4:10:A4 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 016C Signing time: Mon 11 Aug 2025 03:57:27 +0000 Manifest this update: Mon 11 Aug 2025 03:57:26 +0000 Manifest next update: Mon 18 Aug 2025 03:57:26 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: BFdjmqKv5c6WM1y8P5j4l7fTcfMhTITOOoNDXDqlLpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Aug 11 03:57:26 2025 GMT Not After : Aug 18 03:57:26 2025 GMT Subject: CN=68996a27-bed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:c3:a5:9b:81:b8:b5:4e:60:5a:8f:84:2f: 96:a9:36:5d:0a:14:de:a3:d5:45:9c:bb:17:ce:c6: 4d:63:f0:a2:bf:74:14:b1:2c:ce:4d:42:74:3e:75: d5:aa:58:59:80:eb:fb:da:d9:10:b0:87:f1:75:f9: aa:b7:d6:12:bb:ce:4d:76:18:e3:19:f6:e9:8d:2a: 2b:07:37:0d:3b:05:f2:ba:27:af:41:7e:b7:a0:67: af:61:76:29:b4:0d:ac:32:52:8d:4a:ba:d4:c9:d6: 80:26:65:ef:ec:d6:66:3e:8c:98:c2:a2:3c:1e:80: 3d:cb:dc:3f:12:be:16:a5:bb:37:03:30:fa:df:a8: 06:60:86:46:ee:1d:4c:bb:ee:35:d6:6c:bc:f2:23: 1c:b9:fb:9a:10:cd:5f:ee:c7:8e:65:26:0b:cb:56: 91:65:d4:ed:23:91:c8:2a:98:a4:b6:ba:0a:c2:bb: 83:83:f2:44:9e:b1:17:75:a0:dd:3b:c8:b7:d5:36: d9:26:45:5a:10:06:e6:fa:3c:15:2b:f1:a0:58:5d: af:34:ba:56:ab:43:1b:8f:f2:15:b9:dd:a4:66:fb: 00:fb:b0:2c:cf:a5:a4:11:1f:61:f2:59:54:20:7d: cf:a2:99:32:e0:61:0b:f6:85:a2:c4:f8:3e:34:39: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:0C:3A:A2:BC:B8:ED:4D:AC:AE:E5:B2:F8:8F:26:1F:A4:10:A4 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1d:8b:4b:20:1d:03:f9:41:33:4c:f9:3e:66:70:7f:68:89: af:3e:d3:10:88:73:6f:3d:0e:69:75:28:61:02:47:83:d6:1d: cb:ff:71:5a:c4:2f:90:88:94:16:81:a7:0c:7a:11:ee:31:9f: 47:0c:48:62:13:42:31:1f:d2:9b:1f:29:2f:32:b8:0a:8f:95: ab:2b:01:e6:cf:ba:8b:c0:f8:84:4f:d5:a7:38:ef:41:46:e3: 38:52:6c:a3:0e:2e:b5:2a:dd:c0:4a:d0:d5:c6:92:28:68:57: 78:aa:bb:f9:31:61:75:1f:0f:dc:03:86:d8:8f:8e:79:33:32: 19:2b:d4:00:20:1f:8f:bc:f0:e6:82:d0:7b:b0:2c:ac:b6:11: 65:b0:78:55:67:96:dc:1c:37:c2:44:76:b6:a3:4b:bb:26:e3: 6d:3d:a4:51:d7:19:5c:e7:dd:06:16:68:fd:9e:69:eb:3a:48: 78:73:ee:e3:d1:63:68:7c:ed:a2:d4:02:e3:d4:26:0d:d3:b9: 68:5d:32:a2:3a:07:93:ce:19:f3:aa:6d:13:93:28:98:f6:27: 38:7e:6e:be:fe:4e:28:a8:42:8b:03:15:df:d8:85:ad:08:34: c2:04:6e:86:d7:1d:e7:fb:be:22:0d:21:64:91:0d:0b:4e:c1: 4f:e6:0f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUwODExMDM1NzI2WhcNMjUwODE4MDM1NzI2WjAYMRYwFAYD VQQDEw02ODk5NmEyNy1iZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J/DpZuBuLVOYFqPhC+WqTZdChTeo9VFnLsXzsZNY/Civ3QUsSzOTUJ0PnXV qlhZgOv72tkQsIfxdfmqt9YSu85NdhjjGfbpjSorBzcNOwXyuievQX63oGevYXYp tA2sMlKNSrrUydaAJmXv7NZmPoyYwqI8HoA9y9w/Er4Wpbs3AzD636gGYIZG7h1M u+411my88iMcufuaEM1f7seOZSYLy1aRZdTtI5HIKpiktroKwruDg/JEnrEXdaDd O8i31TbZJkVaEAbm+jwVK/GgWF2vNLpWq0Mbj/IVud2kZvsA+7Asz6WkER9h8llU IH3Popky4GEL9oWixPg+NDmJaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA46DDqi vLjtTayu5bL4jyYfpBCkMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuHYtLIB0D+UEzTPk+ZnB/aImvPtMQiHNvPQ5pdShhAkeD1h3L/3Fa xC+QiJQWgacMehHuMZ9HDEhiE0IxH9KbHykvMrgKj5WrKwHmz7qLwPiET9WnOO9B RuM4UmyjDi61Kt3AStDVxpIoaFd4qrv5MWF1Hw/cA4bYj455MzIZK9QAIB+PvPDm gtB7sCysthFlsHhVZ5bcHDfCRHa2o0u7JuNtPaRR1xlc590GFmj9nmnrOkh4c+7j 0WNofO2i1ALj1CYN07loXTKiOgeTzhnzqm0TkyiY9ic4fm6+/k4oqEKLAxXf2IWt CDTCBG6G1x3n+74iDSFkkQ0LTsFP5g+9 -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:14 2025 by rpki-client