$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: UHNaEMGeVpbsMgA8390jxeUYL1PZiwmKXPLcLwdjcXk= Subject key identifier: BC:C8:98:CE:D6:54:F5:6D:B6:A8:66:D1:10:49:B9:D6:5E:98:53:88 Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1944 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 1936 Signing time: Fri 22 Aug 2025 16:31:21 +0000 Manifest this update: Fri 22 Aug 2025 16:31:21 +0000 Manifest next update: Fri 29 Aug 2025 16:31:21 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: PHp/fCUuwSUPE3DfvF0svFBHXqABzBF+/jRFqVH5ubc=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6468 (0x1944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: Aug 22 16:31:21 2025 GMT Not After : Aug 29 16:31:21 2025 GMT Subject: CN=68a89b59-2a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:71:48:03:26:7d:8b:ec:f4:07:8a:2e:bb: 12:1f:f4:7e:6d:67:6b:14:ac:b4:1b:ad:c2:a9:24: 7d:15:ae:5e:0c:d5:e3:72:cd:9b:1f:04:78:88:bb: 88:ef:eb:16:5b:76:a9:d4:26:0a:ff:a4:ad:ae:14: 3e:c2:87:2a:85:2e:e5:88:b4:0f:d1:b7:ad:99:e5: 18:a4:2a:99:70:37:a8:bd:e7:f8:82:89:f4:37:47: 42:91:41:1a:2e:9f:00:b6:39:75:f9:70:35:d3:05: 7f:a7:96:83:36:08:e4:a4:22:b2:4d:8d:53:78:d4: 29:9e:6c:6f:97:bf:7a:da:b1:0e:e2:be:e6:d3:21: 27:f6:6e:88:29:80:10:9b:a9:5a:67:4f:f4:3a:22: ec:55:23:29:f2:47:1c:a9:1f:90:6e:f3:5b:de:11: 89:ca:4d:71:23:bf:f6:0e:02:d5:df:3c:bf:cb:ba: eb:90:de:5e:65:bb:53:d2:b5:0a:b2:30:89:56:48: 34:b4:06:c2:f5:db:98:a9:8e:99:63:68:7a:54:93: 08:f2:f9:89:11:41:1a:34:f2:d9:3c:b4:a0:14:bc: a4:ef:ec:78:17:b8:33:e5:16:7d:4d:14:c2:4f:cb: a7:17:fc:a4:df:d6:ab:15:8e:78:c6:61:8c:b8:f0: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:98:CE:D6:54:F5:6D:B6:A8:66:D1:10:49:B9:D6:5E:98:53:88 X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:03:24:ae:24:51:76:a0:16:a7:6b:35:fe:63:42:6f:b9: 1c:fc:ab:02:08:54:dc:2c:25:59:48:c8:29:c2:b3:7c:bf:6d: c8:b4:25:48:82:ac:1f:e9:63:26:65:2c:52:24:c7:33:dd:e2: bb:d7:fa:a3:ee:12:e6:76:ca:5d:af:06:93:1e:ec:dc:cd:6b: 1d:a4:db:70:bb:b7:02:f6:65:7c:46:0c:d8:44:4c:6f:56:43: 08:85:e9:2f:e0:22:89:0e:8e:b6:34:44:a2:37:a0:c2:bc:2f: 3f:38:78:a6:28:89:9f:82:98:88:f6:62:83:f5:5f:23:45:04: d6:96:90:52:2c:29:88:16:ed:4d:e2:61:4a:a0:78:5b:d4:55: 0b:37:21:a2:f6:0e:d5:b0:88:7a:80:8a:f6:f0:1d:00:55:70: d3:db:86:dd:ac:5c:23:16:5d:9d:e9:44:6f:33:d9:fe:7f:0e: 47:de:69:90:6a:1e:e8:75:00:eb:aa:30:f2:95:6e:76:76:d8: 21:ed:e0:60:c1:2d:5c:4e:95:70:ec:c2:40:fa:09:9e:78:a8: 88:ba:9b:57:0c:58:66:ae:d7:6e:5a:34:37:04:52:ab:13:b7: 72:83:19:32:94:c7:a7:fe:f8:45:f5:37:38:6a:23:21:d3:c3: ca:d5:0e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwODIyMTYzMTIxWhcNMjUwODI5MTYzMTIxWjAYMRYwFAYD VQQDEw02OGE4OWI1OS0yYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4JxSAMmfYvs9AeKLrsSH/R+bWdrFKy0G63CqSR9Fa5eDNXjcs2bHwR4iLuI 7+sWW3ap1CYK/6StrhQ+wocqhS7liLQP0betmeUYpCqZcDeovef4gon0N0dCkUEa Lp8Atjl1+XA10wV/p5aDNgjkpCKyTY1TeNQpnmxvl7962rEO4r7m0yEn9m6IKYAQ m6laZ0/0OiLsVSMp8kccqR+QbvNb3hGJyk1xI7/2DgLV3zy/y7rrkN5eZbtT0rUK sjCJVkg0tAbC9duYqY6ZY2h6VJMI8vmJEUEaNPLZPLSgFLyk7+x4F7gz5RZ9TRTC T8unF/yk39arFY54xmGMuPBtXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzImM7W VPVttqhm0RBJudZemFOIMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy9AMkriRRdqAWp2s1/mNCb7kc/KsCCFTcLCVZSMgpwrN8v23ItCVI gqwf6WMmZSxSJMcz3eK71/qj7hLmdspdrwaTHuzczWsdpNtwu7cC9mV8RgzYRExv VkMIhekv4CKJDo62NESiN6DCvC8/OHimKImfgpiI9mKD9V8jRQTWlpBSLCmIFu1N 4mFKoHhb1FULNyGi9g7VsIh6gIr28B0AVXDT24bdrFwjFl2d6URvM9n+fw5H3mmQ ah7odQDrqjDylW52dtgh7eBgwS1cTpVw7MJA+gmeeKiIuptXDFhmrtduWjQ3BFKr E7dygxkylMen/vhF9Tc4aiMh08PK1Q7L -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:11 2025 by rpki-client