$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json) Hash identifier: Ow32jYSsXsUTdYHu6cwiZlKx3znwNCbGD5ikVdwGNK0= Subject key identifier: F6:3E:C4:5E:A3:BF:D2:D8:1B:6B:4A:15:B2:9A:2B:A9:EA:30:CF:22 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft Manifest number: 0F Signing time: Thu 03 Jul 2025 08:21:12 +0000 Manifest this update: Thu 03 Jul 2025 08:21:11 +0000 Manifest next update: Thu 10 Jul 2025 08:21:11 +0000 Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: gDORCUeIq7hMJkXWefXPPVLZ1dDv7QwOTFzNvQdCGNE=) 2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: yO04AY7QLHjRPUPcniLxzPjcVxS3CSh7vc358kz20Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Jul 3 08:21:11 2025 GMT Not After : Jul 10 08:21:11 2025 GMT Subject: CN=68663d77-0a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:d0:ab:23:bc:41:53:09:4a:d2:06:ea:8c: c3:37:e6:df:a8:99:ea:fe:aa:eb:cd:74:ae:00:de: 1e:9b:e5:6c:72:88:e8:b2:54:c3:ce:21:a8:2c:c0: 35:ab:2c:40:18:1a:cf:6d:da:8f:05:da:e0:5c:19: 41:88:b5:6b:47:79:dd:31:c4:65:ab:aa:61:49:00: cb:1c:32:6e:d1:73:09:35:ae:06:b7:a7:6e:4e:dc: fb:ca:8e:fb:21:3a:e6:ff:5d:06:57:be:3c:5c:15: 57:61:2e:49:87:72:bf:bf:ba:15:84:15:bd:60:ba: 81:1a:88:f1:f1:8f:06:bb:ad:2d:ea:36:c9:87:f8: 7c:33:78:4e:22:4f:f3:10:ca:ee:e2:44:aa:1f:85: 61:8a:76:0e:af:de:0d:dc:c4:63:6f:39:0e:ca:31: e0:b0:8b:f9:c4:6b:c2:c2:c4:d2:b5:9e:d6:c8:2e: b5:60:cb:9b:58:62:a3:d6:29:fc:d7:b6:04:2d:70: 86:5c:fe:a7:bf:8c:a8:2b:7c:f2:0d:7d:16:99:ec: d4:14:65:f0:b3:dc:ee:9b:b3:de:02:3e:63:76:1b: f8:c2:37:1a:4d:4d:80:23:0e:d1:90:e4:7c:ac:d9: e3:01:57:e7:3a:47:f9:aa:5f:d3:12:f4:ff:b6:9a: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3E:C4:5E:A3:BF:D2:D8:1B:6B:4A:15:B2:9A:2B:A9:EA:30:CF:22 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:51:20:a6:c1:e1:da:af:45:8b:ac:66:f3:fd:2a:0a:f4:74: 66:ee:be:b4:52:da:3f:73:86:3a:60:30:e5:2c:64:4f:ea:97: 98:19:48:88:68:87:96:a0:8b:77:d8:59:92:45:e2:07:06:54: d6:9e:2a:e2:2b:40:0f:46:99:ee:43:a5:26:ee:b1:28:63:4f: 6d:18:28:93:1b:28:9f:cd:5e:6c:80:ed:8a:3f:59:59:fc:f5: 37:94:98:23:8a:80:ef:d2:52:aa:de:cd:55:9f:34:85:e8:16: 03:13:40:50:89:71:71:92:ca:55:f5:c3:a2:ac:0b:5c:88:66: ae:ff:54:8e:07:b6:f3:86:c9:ff:3f:b8:fd:c3:fd:9a:93:3b: 9b:17:02:e0:3b:7b:d9:a9:24:15:1e:ec:3f:48:d1:00:33:a3: ad:12:15:6c:f1:90:e3:3d:d7:86:ec:44:1f:9c:a8:8d:44:8a: cf:52:b4:d5:84:77:cc:d9:35:a9:9f:81:d1:16:6a:c5:ef:cb: 76:83:07:3a:82:72:d1:3a:da:22:38:64:3f:c2:e8:8e:9c:09: e2:92:87:69:1c:8e:e4:85:a4:7a:07:71:29:bc:31:2e:7e:c9: 22:71:3e:c8:a2:98:5a:54:c3:08:7c:71:d7:10:01:1b:4e:38: 55:ca:ff:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA3MDMwODIxMTFaFw0yNTA3MTAwODIxMTFaMBgxFjAUBgNV BAMTDTY4NjYzZDc3LTBhODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUPdCrI7xBUwlK0gbqjMM35t+omer+quvNdK4A3h6b5WxyiOiyVMPOIagswDWr LEAYGs9t2o8F2uBcGUGItWtHed0xxGWrqmFJAMscMm7Rcwk1rga3p25O3PvKjvsh Oub/XQZXvjxcFVdhLkmHcr+/uhWEFb1guoEaiPHxjwa7rS3qNsmH+HwzeE4iT/MQ yu7iRKofhWGKdg6v3g3cxGNvOQ7KMeCwi/nEa8LCxNK1ntbILrVgy5tYYqPWKfzX tgQtcIZc/qe/jKgrfPINfRaZ7NQUZfCz3O6bs94CPmN2G/jCNxpNTYAjDtGQ5Hys 2eMBV+c6R/mqX9MS9P+2mqi7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9j7EXqO/ 0tgba0oVsporqeowzyIwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzgyNDhFOTE0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFO SHFYckUxWUZ0anQ1VUlZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1RIKbB4dqvRYusZvP9Kgr0dGbuvrRS2j9zhjpgMOUsZE/ql5gZSIho h5agi3fYWZJF4gcGVNaeKuIrQA9Gme5DpSbusShjT20YKJMbKJ/NXmyA7Yo/WVn8 9TeUmCOKgO/SUqrezVWfNIXoFgMTQFCJcXGSylX1w6KsC1yIZq7/VI4HtvOGyf8/ uP3D/ZqTO5sXAuA7e9mpJBUe7D9I0QAzo60SFWzxkOM914bsRB+cqI1Eis9StNWE d8zZNamfgdEWasXvy3aDBzqCctE62iI4ZD/C6I6cCeKSh2kcjuSFpHoHcSm8MS5+ ySJxPsiimFpUwwh8cdcQARtOOFXK/+I= -----END CERTIFICATE-----Generated at Fri Jul 4 19:35:15 2025 by rpki-client