$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json) Hash identifier: 8X2Tp9ELDgaB0Ipr+mxPHI5mQDsW4ZyH4myYNZ2Jn1w= Subject key identifier: EF:F6:E9:DE:85:6C:19:43:E9:EC:DC:37:4A:A1:CD:39:DE:62:74:A8 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft Manifest number: 2B Signing time: Sat 23 Aug 2025 07:59:44 +0000 Manifest this update: Sat 23 Aug 2025 07:59:43 +0000 Manifest next update: Sat 30 Aug 2025 07:59:43 +0000 Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: zlkv+8ncBzmLzaU4fzK1g79dcIeK6HmhyJ35ESHCASE=) 2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: kwHBlGIR+jm5Ej5kABIZ/iPvo1ebkMi20lOVX9QW4oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Aug 23 07:59:43 2025 GMT Not After : Aug 30 07:59:43 2025 GMT Subject: CN=68a974ef-ffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:02:a2:07:0a:53:dd:49:f5:50:28:7d:7a:af: c4:06:80:ee:56:a8:2f:c3:b1:d4:2a:d7:b8:ab:a2: 5e:34:d4:32:bb:2f:2f:2d:1f:b4:00:0e:cd:c0:da: 6a:ef:08:57:a0:c4:de:6a:48:6f:39:80:a8:a9:3e: e2:9d:27:b4:34:32:8a:1e:5f:a5:e6:b0:5b:81:54: b5:c6:32:3e:f3:8c:da:f0:d3:3c:f7:9f:22:2f:ac: bc:fc:03:6b:73:c8:72:53:33:5d:88:58:9b:10:68: 35:28:4d:d9:81:05:c0:42:77:27:0b:cb:b0:39:51: bd:bc:9d:60:bb:3f:fd:22:81:45:bd:2a:1a:c9:06: a0:5a:8d:b8:b7:d7:46:62:95:9b:51:20:97:10:88: bc:f2:2c:42:e8:b8:58:db:29:81:e7:dc:82:01:3c: 50:ef:43:db:2c:f0:fe:97:6b:77:8b:af:d2:46:8a: c3:f6:2c:f5:9d:42:75:e4:70:31:f7:37:9d:66:5b: 89:65:89:20:04:b1:64:a5:2d:a7:70:45:f1:ad:76: 2a:b5:2b:f5:25:a2:ed:ac:83:f4:51:70:19:18:92: 24:0d:e3:50:04:bb:19:47:a6:e4:dc:0a:d3:31:f8: f8:51:7c:f5:c4:6a:30:06:77:42:f6:c1:d6:67:f6: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F6:E9:DE:85:6C:19:43:E9:EC:DC:37:4A:A1:CD:39:DE:62:74:A8 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:41:c9:26:db:f4:7a:15:a3:60:0f:18:00:e9:cd:93:97: 19:15:ed:02:66:c6:62:98:0c:e4:a4:37:0c:96:f4:bb:3f:47: e9:9b:17:ad:bd:72:e3:4f:7d:5e:93:ca:3f:ce:58:7c:6f:a7: 73:0f:67:16:bd:aa:73:14:d6:34:a8:7d:2e:38:e5:32:1a:30: a6:4a:c4:26:d6:97:69:ab:3f:fe:14:49:37:da:e9:ed:62:ee: bf:59:e8:23:af:98:60:c4:a7:cb:00:70:61:3a:95:eb:9e:72: 63:f9:93:25:16:d3:9f:bb:d2:6c:ed:69:38:5c:b5:1c:0f:12: 9a:c4:7a:3e:0a:ef:fd:f6:66:88:9a:eb:05:44:99:80:95:6b: 71:e9:76:ef:2d:18:d4:d9:ea:11:5a:54:83:71:c5:21:c3:2f: 76:8b:5e:4a:b9:e3:78:b8:45:aa:0b:49:ff:0e:89:29:f8:76: b6:1b:0a:8f:ce:00:8e:ca:10:5b:e7:da:fe:e5:b8:0d:42:09: 02:c8:3d:2c:44:3e:e1:26:b2:fa:8d:ca:bd:98:98:64:91:a2: 96:75:52:38:9a:ed:0c:d6:36:fd:61:4d:9b:d6:ac:ea:a2:11: f1:8c:24:96:39:6a:96:7c:70:fb:f4:a4:b1:85:c6:a8:91:8e: de:c0:09:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA4MjMwNzU5NDNaFw0yNTA4MzAwNzU5NDNaMBgxFjAUBgNV BAMTDTY4YTk3NGVmLWZmZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2AqIHClPdSfVQKH16r8QGgO5WqC/DsdQq17irol401DK7Ly8tH7QADs3A2mrv CFegxN5qSG85gKipPuKdJ7Q0MooeX6XmsFuBVLXGMj7zjNrw0zz3nyIvrLz8A2tz yHJTM12IWJsQaDUoTdmBBcBCdycLy7A5Ub28nWC7P/0igUW9KhrJBqBajbi310Zi lZtRIJcQiLzyLELouFjbKYHn3IIBPFDvQ9ss8P6Xa3eLr9JGisP2LPWdQnXkcDH3 N51mW4lliSAEsWSlLadwRfGtdiq1K/Ulou2sg/RRcBkYkiQN41AEuxlHpuTcCtMx +PhRfPXEajAGd0L2wdZn9k31AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7/bp3oVs GUPp7Nw3SqHNOd5idKgwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzgyNDhFOTE0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFO SHFYckUxWUZ0anQ1VUlZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOfQckm2/R6FaNgDxgA6c2TlxkV7QJmxmKYDOSkNwyW9Ls/R+mbF629 cuNPfV6Tyj/OWHxvp3MPZxa9qnMU1jSofS445TIaMKZKxCbWl2mrP/4USTfa6e1i 7r9Z6COvmGDEp8sAcGE6leuecmP5kyUW05+70mztaThctRwPEprEej4K7/32Zoia 6wVEmYCVa3Hpdu8tGNTZ6hFaVINxxSHDL3aLXkq543i4RaoLSf8OiSn4drYbCo/O AI7KEFvn2v7luA1CCQLIPSxEPuEmsvqNyr2YmGSRopZ1Ujia7QzWNv1hTZvWrOqi EfGMJJY5apZ8cPv0pLGFxqiRjt7ACcE= -----END CERTIFICATE-----Generated at Sat Aug 23 11:01:14 2025 by rpki-client