$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft File: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft (raw, json) Hash identifier: RK9F7bSutXjCgNSrGjx1UbThSb89Kg5t7fpslRTYVXw= Subject key identifier: 1F:E8:95:D0:16:8F:E1:CE:8D:04:46:01:76:BA:C3:85:98:7B:9D:09 Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft Manifest number: 9A Signing time: Sat 09 Aug 2025 06:49:02 +0000 Manifest this update: Sat 09 Aug 2025 06:49:02 +0000 Manifest next update: Sat 16 Aug 2025 06:49:02 +0000 Files and hashes: 1: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl (hash: sz957nyEKvndlG9Z3Nybe/gNQFEffAfXRHH4NwxR0fs=) 2: 71DD0A968C8311EF81E2B476C4F9AE02.roa (hash: TXrkjJIwjX6s25tb57BHkFJUDyJD9PmCVoOhgLQta9Y=) 3: 8A06894A8C8211EF85B3A572C4F9AE02.roa (hash: k/RSQ+loZKSU/mNG3N6cRjY0FiE79Ik7PHvn92DtyVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Validity Not Before: Aug 9 06:49:02 2025 GMT Not After : Aug 16 06:49:02 2025 GMT Subject: CN=6896ef5e-ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:18:ee:e7:e9:f9:9a:ad:53:8a:63:f9:b3: 7e:b7:1a:ac:49:cb:d6:a9:af:a0:40:7d:0c:12:49: 3a:30:20:94:0c:05:a2:5f:a9:a5:95:a2:de:c6:6c: 35:e4:db:7b:33:82:20:21:96:93:cb:16:1c:80:8a: 35:df:5d:d4:cb:c7:51:d5:c6:2c:c2:f9:34:64:a8: d8:6a:9b:4b:88:48:30:0e:76:d6:f5:86:cf:55:a7: 42:3a:4b:ad:93:ec:b7:84:76:cc:cc:b7:81:d4:42: 53:92:1f:d6:0b:80:55:69:da:99:4f:77:ff:97:e7: f8:a6:be:30:63:ed:9a:6c:c8:ec:a2:94:af:68:25: cb:80:ce:83:09:f3:43:82:6d:5e:f3:0b:f5:1c:82: 5a:97:44:f3:e2:76:d4:e6:04:3d:1c:14:46:55:ac: 8c:f7:c6:25:10:9b:b7:d7:66:ea:56:2d:a9:d8:53: 43:96:e0:6d:a9:ca:46:08:ef:3f:ed:c6:a5:84:45: 92:50:76:5f:02:44:b2:39:f7:18:91:67:41:64:01: a7:f1:3c:81:17:48:5c:2b:5e:0d:cd:c7:44:13:d7: a4:06:5f:cb:1f:df:a2:48:49:8b:9b:10:34:b2:44: 00:52:86:6a:f9:6a:87:1a:8f:13:64:e4:dd:e0:0e: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:95:D0:16:8F:E1:CE:8D:04:46:01:76:BA:C3:85:98:7B:9D:09 X509v3 Authority Key Identifier: keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:64:bc:fe:a1:05:37:f9:75:ca:04:9b:85:e2:a1:7e:f7: c3:4e:a4:fb:12:44:fa:76:c5:52:e0:bc:50:d8:6b:09:b9:e7: b6:66:81:61:bb:05:23:1f:f8:2e:ad:0e:07:7c:22:19:12:b2: d2:49:ec:71:42:20:e5:c0:f4:9a:ca:a8:4d:7a:42:25:f1:2a: 7f:72:f6:1f:4b:f1:49:ab:bd:5e:e2:0a:83:5a:23:51:77:45: 22:77:03:30:81:46:09:ce:c3:1d:e5:a7:39:ce:47:aa:87:06: f7:1d:d9:6f:c3:91:02:46:58:b5:e8:4f:47:ba:63:69:1b:eb: 9a:06:cd:b6:90:b3:a1:f9:24:e5:b3:95:7a:61:ed:02:5d:14: 8e:6f:50:f4:a3:bd:ee:41:7f:aa:a4:c7:c4:aa:c4:25:ad:75: b2:fb:fd:a3:30:46:c0:ed:7c:d8:2d:ae:76:11:2f:e3:79:dd: 09:f7:9c:10:a5:85:e0:97:d8:72:78:a4:70:be:f0:76:c2:d9: 50:04:f1:ed:28:a2:b5:1b:5f:cd:ab:e0:68:bb:64:65:a6:b0: 72:7c:eb:2a:51:7d:ac:42:92:9f:d1:a9:02:db:36:f4:1a:a8: 26:f8:f4:41:d5:48:59:7c:c9:fc:b1:93:cb:6b:d9:05:a9:19: 70:1d:84:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKDE1NDhGMTA5NUYxRTBGOUI3ODRCMUI3RkREOEYwRTc1 OUM4NDJERkUwHhcNMjUwODA5MDY0OTAyWhcNMjUwODE2MDY0OTAyWjAYMRYwFAYD VQQDEw02ODk2ZWY1ZS1hZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsEY7ufp+ZqtU4pj+bN+txqsScvWqa+gQH0MEkk6MCCUDAWiX6mllaLexmw1 5Nt7M4IgIZaTyxYcgIo1313Uy8dR1cYswvk0ZKjYaptLiEgwDnbW9YbPVadCOkut k+y3hHbMzLeB1EJTkh/WC4BVadqZT3f/l+f4pr4wY+2abMjsopSvaCXLgM6DCfND gm1e8wv1HIJal0Tz4nbU5gQ9HBRGVayM98YlEJu312bqVi2p2FNDluBtqcpGCO8/ 7calhEWSUHZfAkSyOfcYkWdBZAGn8TyBF0hcK14NzcdEE9ekBl/LH9+iSEmLmxA0 skQAUoZq+WqHGo8TZOTd4A5qJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/oldAW j+HOjQRGAXa6w4WYe50JMB8GA1UdIwQYMBaAFBVI8QlfHg+beEsbf92PDnWchC3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80QTBGRkE5NjhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9GVWp4Q1Y4ZUQ1dDRTeHRfM1k4T2RaeUVM ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVanhDVjhlRDV0NFN4dF8zWThPZFp5RUxmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80QTBGRkE5NjhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9GVWp4Q1Y4ZUQ1 dDRTeHRfM1k4T2RaeUVMZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPJWS8/qEFN/l1ygSbheKhfvfDTqT7EkT6dsVS4LxQ2GsJuee2ZoFh uwUjH/gurQ4HfCIZErLSSexxQiDlwPSayqhNekIl8Sp/cvYfS/FJq71e4gqDWiNR d0UidwMwgUYJzsMd5ac5zkeqhwb3Hdlvw5ECRli16E9HumNpG+uaBs22kLOh+STl s5V6Ye0CXRSOb1D0o73uQX+qpMfEqsQlrXWy+/2jMEbA7XzYLa52ES/jed0J95wQ pYXgl9hyeKRwvvB2wtlQBPHtKKK1G1/Nq+Bou2RlprByfOsqUX2sQpKf0akC2zb0 Gqgm+PRB1UhZfMn8sZPLa9kFqRlwHYTA -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:17 2025 by rpki-client