$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: t8ncTsy89K74fq+ijEPEOprTybgOc7gq/D5C+N++km0= Subject key identifier: 35:6C:5F:C0:37:E8:05:FC:0F:A6:A6:E0:9F:A9:98:6D:4E:69:3C:01 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:22:08 +0000 Manifest this update: Sat 23 Aug 2025 04:22:07 +0000 Manifest next update: Sat 30 Aug 2025 04:22:07 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: IOUKcexM4N56akHIr/9Xn80Zl7JBY4RGUWhI3i7co2c=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Aug 23 04:22:07 2025 GMT Not After : Aug 30 04:22:07 2025 GMT Subject: CN=68a941ef-31f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:b5:33:eb:67:c5:3e:22:a2:8b:b7:77:59: f2:9b:80:dd:aa:47:48:4c:58:01:ed:ed:1b:f3:bf: 8a:34:a5:54:69:c7:a2:62:8a:be:c9:04:a1:10:81: bc:98:88:44:b4:91:12:42:1b:c9:cb:35:76:c0:d3: a4:35:f3:d8:ec:6d:40:4d:14:42:0d:ff:b5:3f:39: 1d:ea:c4:a8:bc:fd:a5:e6:0b:22:be:7f:59:8d:2e: 95:13:e1:bc:53:82:ca:1a:48:ec:55:69:c0:be:bd: 56:33:25:7c:74:9f:6b:81:62:df:93:07:9d:38:64: 3d:b5:b2:c9:ff:d0:02:02:66:5c:7c:45:5f:96:81: c5:02:30:78:f3:4f:00:a0:89:7a:09:74:7b:aa:f5: 1c:a4:3b:73:14:5c:73:1e:9f:4b:1b:0e:6a:a7:51: 40:3a:67:47:61:e8:c6:2d:8a:53:e0:9b:45:1b:04: 93:73:14:38:79:d2:09:9a:d6:6a:76:0f:52:05:6b: 54:e1:4d:43:57:f6:48:5e:05:51:42:86:74:a4:1e: ec:95:f9:fc:56:3a:c5:69:f1:cd:a5:b7:dd:bc:f8: e1:a4:6e:1d:48:60:4a:75:ce:b6:93:3c:4c:11:f7: 64:44:92:c5:77:87:ea:52:0b:ee:ae:6d:b1:82:ab: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6C:5F:C0:37:E8:05:FC:0F:A6:A6:E0:9F:A9:98:6D:4E:69:3C:01 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e5:2d:84:42:06:9b:94:73:d7:ed:68:33:ce:45:ed:76:f3: 29:22:5a:a7:d4:66:a4:ea:a0:6f:56:fe:75:83:30:84:33:ce: bb:cd:bd:3d:22:e2:0e:a0:55:c5:85:10:9b:ec:e8:4a:01:dc: f8:bd:67:38:00:37:d3:bf:37:86:12:af:56:f3:13:cb:97:b8: 64:92:eb:5f:cc:24:68:46:5c:cb:ea:32:cf:a8:89:cb:60:ca: 5c:cf:95:4d:28:40:45:61:c4:fb:d3:4b:5c:56:32:5b:a1:82: 4b:3c:29:37:a7:89:11:63:49:9a:ce:20:7f:f3:d9:be:ed:9b: 21:ec:87:ea:4b:6b:56:db:c4:a0:a3:c2:f8:28:31:0f:ed:79: b5:38:95:b2:0d:5d:f7:91:eb:39:88:e9:66:7d:9e:c6:f9:fe: e9:08:3f:d8:32:dd:ea:f6:19:0f:c9:db:6e:c2:d1:38:24:6e: dc:4e:82:75:6e:a1:17:7d:47:51:c0:bb:81:d7:f9:a3:2a:ee: 7f:60:9e:04:c6:74:e8:1c:32:1e:4c:6c:30:8a:e1:5d:3d:03: c6:cc:84:39:ea:e8:91:f2:8d:17:67:c9:a0:c1:f1:84:e3:e9: 8a:2d:24:e3:05:4c:89:8e:b2:33:a3:ee:c1:56:56:29:4b:ce: 8f:0b:79:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwODIzMDQyMjA3WhcNMjUwODMwMDQyMjA3WjAYMRYwFAYD VQQDEw02OGE5NDFlZi0zMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67a1M+tnxT4ioou3d1nym4DdqkdITFgB7e0b87+KNKVUaceiYoq+yQShEIG8 mIhEtJESQhvJyzV2wNOkNfPY7G1ATRRCDf+1Pzkd6sSovP2l5gsivn9ZjS6VE+G8 U4LKGkjsVWnAvr1WMyV8dJ9rgWLfkwedOGQ9tbLJ/9ACAmZcfEVfloHFAjB4808A oIl6CXR7qvUcpDtzFFxzHp9LGw5qp1FAOmdHYejGLYpT4JtFGwSTcxQ4edIJmtZq dg9SBWtU4U1DV/ZIXgVRQoZ0pB7slfn8VjrFafHNpbfdvPjhpG4dSGBKdc62kzxM EfdkRJLFd4fqUgvurm2xgquewwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVsX8A3 6AX8D6am4J+pmG1OaTwBMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+5S2EQgablHPX7WgzzkXtdvMpIlqn1Gak6qBvVv51gzCEM867zb09 IuIOoFXFhRCb7OhKAdz4vWc4ADfTvzeGEq9W8xPLl7hkkutfzCRoRlzL6jLPqInL YMpcz5VNKEBFYcT700tcVjJboYJLPCk3p4kRY0maziB/89m+7Zsh7IfqS2tW28Sg o8L4KDEP7Xm1OJWyDV33kes5iOlmfZ7G+f7pCD/YMt3q9hkPydtuwtE4JG7cToJ1 bqEXfUdRwLuB1/mjKu5/YJ4ExnToHDIeTGwwiuFdPQPGzIQ56uiR8o0XZ8mgwfGE 4+mKLSTjBUyJjrIzo+7BVlYpS86PC3k/ -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:03 2025 by rpki-client