$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: 6cw4T5p1mreZ8+fXVGiMAMhugOhA1gKRuXQJc3NX6KE= Subject key identifier: 29:7D:A1:A2:18:0A:A5:E8:C4:C3:0C:E0:54:5E:60:00:CA:61:B2:89 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 0459 Signing time: Sat 23 Aug 2025 00:26:33 +0000 Manifest this update: Sat 23 Aug 2025 00:26:32 +0000 Manifest next update: Sat 30 Aug 2025 00:26:32 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: 2CYWaa6DuAZ1pfOkXY+Su+kv+CliDQQoW4ukdjY2moE=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Aug 23 00:26:32 2025 GMT Not After : Aug 30 00:26:32 2025 GMT Subject: CN=68a90ab9-a128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:4a:9d:58:90:30:de:b4:4e:37:3b:26:1a: 2f:b6:85:99:2b:f1:34:d8:c7:7c:e3:3f:ce:1a:21: 42:03:24:35:ea:28:c5:60:05:61:c8:44:96:5d:64: 05:d0:77:0d:4c:f2:29:a4:92:96:95:91:18:b7:1c: 31:16:bb:a5:56:32:ac:3a:83:73:51:44:d6:9c:54: c6:46:f3:3c:80:24:29:e1:fa:b0:a0:c2:bb:b6:45: d3:99:e9:32:81:af:c5:bd:eb:3c:cb:a4:82:04:80: 0a:9c:6c:ff:79:7e:c8:95:94:f4:9a:d0:27:80:6f: cc:14:87:ab:e6:40:48:66:42:54:a7:e0:76:5a:83: d4:a1:b9:15:23:1e:f9:20:b6:82:ec:2e:a8:41:74: ed:f3:ae:c6:3e:1b:5e:68:68:38:1e:a4:df:c2:ef: c5:73:5a:4e:64:c1:98:a1:1c:2a:72:1e:6e:ae:36: 24:c4:5f:6f:26:54:08:11:74:1d:75:e6:2b:69:ae: 5f:0b:ab:55:f6:28:7f:41:13:e2:74:8b:fe:05:2e: 34:3a:18:bf:2c:b0:2b:f0:f9:07:d8:f4:f0:b6:e1: 99:be:ea:97:6e:8f:14:f7:d0:18:55:4b:28:19:b5: 86:c2:a4:dc:f2:cb:cd:e7:74:5f:1c:75:f8:ab:7f: c2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:A1:A2:18:0A:A5:E8:C4:C3:0C:E0:54:5E:60:00:CA:61:B2:89 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:db:82:66:93:7e:d2:69:77:ec:d1:1b:7b:e6:85:2d:cf:57: 4a:fe:bd:cd:5d:81:7d:be:54:c1:ea:16:ca:66:dd:0e:8a:90: f9:c8:dd:f3:82:3d:ef:85:be:be:5a:dd:c2:8a:34:4a:0c:c1: 11:d5:66:c9:e3:81:cf:c2:16:bf:41:be:1a:9b:10:95:86:cf: c6:a6:16:77:7c:5a:a1:52:48:36:cd:09:dc:59:93:9e:5f:60: 16:23:39:3e:90:d7:43:61:47:f6:2e:ae:28:a2:c3:d4:cd:9e: fb:39:ef:3f:20:80:a4:59:bf:fd:80:67:d2:62:bc:d7:dc:d2: 98:e4:93:24:b7:9e:4e:d2:07:11:c4:b8:a1:31:a0:bd:8c:41: 64:ab:a7:27:25:ad:a7:ed:76:6d:00:41:a8:b7:d9:7f:01:ea: 44:b1:5a:e6:0c:e5:ad:a5:ae:ea:83:c2:39:de:19:67:c3:23: 14:8f:49:4c:98:2d:20:ca:31:2b:29:93:9c:c8:24:61:9e:7f: 64:6c:95:e0:dd:67:90:72:7f:03:1b:cf:c6:5b:f5:d9:8a:90: 41:11:de:88:e7:ca:aa:c8:cf:64:70:3e:b8:82:ae:f7:19:a9: f9:8a:8e:38:3c:45:41:16:a2:91:e5:a1:5e:14:cf:d4:a1:e0: 48:c7:0e:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjUwODIzMDAyNjMyWhcNMjUwODMwMDAyNjMyWjAYMRYwFAYD VQQDEw02OGE5MGFiOS1hMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXhKnViQMN60Tjc7JhovtoWZK/E02Md84z/OGiFCAyQ16ijFYAVhyESWXWQF 0HcNTPIppJKWlZEYtxwxFrulVjKsOoNzUUTWnFTGRvM8gCQp4fqwoMK7tkXTmeky ga/Fves8y6SCBIAKnGz/eX7IlZT0mtAngG/MFIer5kBIZkJUp+B2WoPUobkVIx75 ILaC7C6oQXTt867GPhteaGg4HqTfwu/Fc1pOZMGYoRwqch5urjYkxF9vJlQIEXQd deYraa5fC6tV9ih/QRPidIv+BS40Ohi/LLAr8PkH2PTwtuGZvuqXbo8U99AYVUso GbWGwqTc8svN53RfHHX4q3/CtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl9oaIY CqXoxMMM4FReYADKYbKJMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF24Jmk37SaXfs0Rt75oUtz1dK/r3NXYF9vlTB6hbKZt0OipD5yN3z gj3vhb6+Wt3CijRKDMER1WbJ44HPwha/Qb4amxCVhs/GphZ3fFqhUkg2zQncWZOe X2AWIzk+kNdDYUf2Lq4oosPUzZ77Oe8/IICkWb/9gGfSYrzX3NKY5JMkt55O0gcR xLihMaC9jEFkq6cnJa2n7XZtAEGot9l/AepEsVrmDOWtpa7qg8I53hlnwyMUj0lM mC0gyjErKZOcyCRhnn9kbJXg3WeQcn8DG8/GW/XZipBBEd6I58qqyM9kcD64gq73 Gan5io44PEVBFqKR5aFeFM/UoeBIxw4u -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:41 2025 by rpki-client