$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: XTGXWF1OkdmhRyHUmnr8TRjDFQgMi/O85ANaLUkdJJk= Subject key identifier: 51:32:A4:31:E4:15:79:40:F2:2C:F1:92:32:91:62:38:8E:8D:15:01 Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 0616 Signing time: Fri 22 Aug 2025 22:59:52 +0000 Manifest this update: Fri 22 Aug 2025 22:59:51 +0000 Manifest next update: Fri 29 Aug 2025 22:59:51 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: Fo7bQHYR3EoBoGdhCEyTd7z1vCZJNAH4h3zq+MOC8uo=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Aug 22 22:59:51 2025 GMT Not After : Aug 29 22:59:51 2025 GMT Subject: CN=68a8f667-3415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:43:ca:84:bd:ca:ee:4e:1e:17:20:04:5b:07: ee:88:e4:eb:b1:65:bf:32:f2:3a:4b:0e:e4:f9:8b: c1:17:19:b1:c4:3f:c6:a9:00:d8:70:30:78:39:d5: e0:78:d1:b5:2f:e7:d0:c6:1e:93:b6:88:b4:16:09: f2:a1:0c:c1:56:d5:b8:06:ab:ee:7f:76:06:cf:72: 94:1f:42:6e:94:44:6f:1e:f2:f4:6b:dd:0e:40:53: dd:6e:d9:2f:b3:08:3b:63:70:30:1d:90:4a:8d:3f: d5:31:78:33:8b:1c:48:31:88:49:ca:4c:21:0f:d4: be:03:e3:fa:d8:93:66:bd:f4:2f:24:2b:e0:d4:f1: 98:33:24:31:99:c9:00:46:94:bf:93:ca:69:e4:6a: 2e:d7:6f:ac:61:b0:56:94:c6:73:50:f0:f9:98:8b: 0e:55:d3:cf:39:7a:60:33:f4:bc:43:ac:f6:ca:11: 9d:18:68:cf:f8:c6:78:e7:cd:ad:48:9c:46:89:2c: 6f:48:b9:22:49:70:21:84:e1:55:68:04:f0:e5:47: 4c:b6:e9:57:74:87:ed:54:25:dc:bd:97:af:90:d7: c7:f2:d7:63:7a:e0:11:74:6b:58:8e:b5:b5:6f:2e: 50:21:eb:e5:27:c2:57:ca:14:17:d8:7c:8c:1f:23: 39:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:32:A4:31:E4:15:79:40:F2:2C:F1:92:32:91:62:38:8E:8D:15:01 X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:06:2b:ef:4b:41:c2:a9:56:83:3c:0c:8c:02:40:1f:5c:fd: 90:52:e9:24:0b:37:44:5f:31:18:de:33:0d:0f:66:27:25:b8: db:1e:10:6f:a0:02:db:7d:c3:52:31:fb:91:9f:9f:38:9e:f7: 2a:91:2b:8a:dc:88:1c:d5:32:f8:30:0d:7f:02:fa:40:30:37: e7:e0:73:c9:8e:59:e6:69:59:70:a7:4c:4a:29:b8:48:8a:87: 60:17:40:ae:f5:31:af:d5:8a:9b:f4:f3:19:3c:a7:bd:ea:ca: ba:16:47:e3:f0:d7:fd:97:8e:0c:8b:53:1b:aa:dc:68:13:89: 7c:36:a3:23:72:98:1c:eb:b4:0e:e4:6a:60:e8:2f:65:8d:04: bc:41:c2:6b:02:58:73:10:a3:4c:32:c9:43:69:e3:d0:93:f8: 69:26:01:43:ae:47:0b:98:cc:0c:6d:70:27:b4:de:c2:77:b5: 16:49:de:c0:07:70:b2:91:c0:ae:87:09:df:e2:21:60:38:6f: 27:30:0a:e5:95:50:c6:27:93:20:78:9a:72:ad:e5:79:de:79: ca:29:73:95:d0:91:ca:4f:b5:8c:90:f7:56:e4:9e:94:7b:02: b4:82:7b:21:1e:b9:df:1f:67:39:dc:1d:be:df:3a:3a:1c:23: e0:70:a4:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjUwODIyMjI1OTUxWhcNMjUwODI5MjI1OTUxWjAYMRYwFAYD VQQDEw02OGE4ZjY2Ny0zNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EPKhL3K7k4eFyAEWwfuiOTrsWW/MvI6Sw7k+YvBFxmxxD/GqQDYcDB4OdXg eNG1L+fQxh6Ttoi0FgnyoQzBVtW4Bqvuf3YGz3KUH0JulERvHvL0a90OQFPdbtkv swg7Y3AwHZBKjT/VMXgzixxIMYhJykwhD9S+A+P62JNmvfQvJCvg1PGYMyQxmckA RpS/k8pp5Gou12+sYbBWlMZzUPD5mIsOVdPPOXpgM/S8Q6z2yhGdGGjP+MZ4582t SJxGiSxvSLkiSXAhhOFVaATw5UdMtulXdIftVCXcvZevkNfH8tdjeuARdGtYjrW1 by5QIevlJ8JXyhQX2HyMHyM5ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEypDHk FXlA8izxkjKRYjiOjRUBMB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3BivvS0HCqVaDPAyMAkAfXP2QUukkCzdEXzEY3jMND2YnJbjbHhBv oALbfcNSMfuRn584nvcqkSuK3Igc1TL4MA1/AvpAMDfn4HPJjlnmaVlwp0xKKbhI iodgF0Cu9TGv1Yqb9PMZPKe96sq6Fkfj8Nf9l44Mi1MbqtxoE4l8NqMjcpgc67QO 5Gpg6C9ljQS8QcJrAlhzEKNMMslDaePQk/hpJgFDrkcLmMwMbXAntN7Cd7UWSd7A B3CykcCuhwnf4iFgOG8nMArllVDGJ5MgeJpyreV53nnKKXOV0JHKT7WMkPdW5J6U ewK0gnshHrnfH2c53B2+3zo6HCPgcKQf -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:34 2025 by rpki-client