$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft File: Fp97ebHLC9YNnChOysqKz1dZgFE.mft (raw, json) Hash identifier: FXdDiy9V7YKQwoLGacUr2/0/UrOLluf8dL/3rWTxuts= Subject key identifier: F7:33:A8:C6:04:1E:41:65:38:F7:94:D2:94:0F:9B:CB:BC:25:C4:E7 Authority key identifier: 16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51 Certificate issuer: /CN=A9137627/serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft Manifest number: 8F Signing time: Sat 23 Aug 2025 06:45:38 +0000 Manifest this update: Sat 23 Aug 2025 06:45:37 +0000 Manifest next update: Sat 30 Aug 2025 06:45:37 +0000 Files and hashes: 1: Fp97ebHLC9YNnChOysqKz1dZgFE.crl (hash: n7V/bb7hrTtKNE4jKZdhLqr3GMEcb1tPgKfN95/JPFY=) 2: 3C249D62A89211EF881C732EC4F9AE02.roa (hash: 16sFKWaBVI982QZ/6/KmLXMiB3r2iqeJrJq3Bgjp0jI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=169F7B79B1CB0BD60D9C284ECACA8ACF57598051 Validity Not Before: Aug 23 06:45:37 2025 GMT Not After : Aug 30 06:45:37 2025 GMT Subject: CN=68a96392-5c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:55:a6:09:28:b2:c6:8a:ed:ed:2d:a1:83: f8:6b:a7:a1:2c:02:66:de:2a:fd:9c:28:fe:90:7b: 9d:fd:d4:6f:fe:26:38:42:8d:31:53:c8:95:f5:f0: 74:e1:e0:e6:d7:6e:21:22:ea:d4:09:42:47:39:ed: f6:41:e4:c4:a4:40:50:16:e1:c9:25:0c:77:48:b3: 04:98:fb:a6:54:8f:dd:41:60:fd:4f:d4:b6:84:40: 78:8b:d8:e5:32:fe:ba:5d:59:5e:77:bd:fe:d5:40: b2:d0:4c:4f:d2:c5:35:53:28:73:f6:e5:1e:ff:b9: 4d:53:5b:8d:d1:ad:72:b0:cf:85:c7:1a:4a:63:05: 70:96:84:24:8e:a1:01:2f:92:83:e4:fa:80:d9:a9: 15:c9:0d:70:1e:55:6e:24:a0:4c:91:bd:d3:63:75: 45:5e:da:b9:1b:e8:75:b3:bf:1a:b2:79:b9:be:3d: dc:f1:4c:5f:30:9f:62:a3:02:36:72:a4:e0:1d:a8: 1c:fa:88:a6:e2:f4:4a:e2:44:fd:24:54:e7:c1:cd: d1:a0:2e:0c:e6:bc:2c:b4:70:a1:28:45:91:88:a1: ea:b0:61:4a:85:0e:eb:35:03:98:d0:2b:5d:17:ab: 10:b5:cb:b1:d1:ab:e5:cf:fd:d6:92:4b:d6:53:76: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:33:A8:C6:04:1E:41:65:38:F7:94:D2:94:0F:9B:CB:BC:25:C4:E7 X509v3 Authority Key Identifier: keyid:16:9F:7B:79:B1:CB:0B:D6:0D:9C:28:4E:CA:CA:8A:CF:57:59:80:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fp97ebHLC9YNnChOysqKz1dZgFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/DF82F5AEA89111EF92688B2BC4F9AE02/Fp97ebHLC9YNnChOysqKz1dZgFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:46:b7:e3:4a:f0:ac:34:d9:a5:22:35:f6:4f:35:77:82:44: cb:fd:47:5c:45:13:78:26:00:9a:83:61:21:ab:2a:9c:94:19: b0:96:aa:a2:ac:e9:ed:84:f0:21:58:27:b8:1b:81:45:6d:2d: ea:69:c9:f6:dc:d0:e6:5e:ac:ff:44:e1:5f:66:47:18:83:2b: 79:1c:5f:63:57:ee:fb:b5:38:0e:11:82:21:2f:2b:0e:b7:c2: 90:03:96:a6:d6:1c:64:4e:4b:a6:72:86:39:4f:ff:28:71:01: 8c:4b:6f:b2:36:5c:88:f9:2a:3f:ad:00:d7:94:5f:22:05:26: 29:99:4f:bb:bc:ba:a8:87:2d:df:5a:21:45:a8:18:ae:48:f7: 2e:6c:c4:17:c6:d2:6f:92:ad:94:8a:5d:69:7a:6e:66:f0:ad: ea:d5:42:ad:42:4b:6a:3b:00:ea:28:01:18:e8:1e:7c:9d:ff: 61:fa:e8:98:e6:0d:39:42:6f:97:47:e9:0f:6c:40:5e:5b:f4: 23:1e:c8:2a:66:3b:e0:69:1d:a2:fd:b4:6a:46:eb:8f:9f:31: 33:2a:c3:a9:7d:ee:16:0e:3a:86:fc:c3:74:3b:e3:b5:e6:07: 03:08:25:14:43:2d:2c:ea:6c:99:47:b1:9c:f2:30:1e:43:7d: 21:9d:61:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDE2OUY3Qjc5QjFDQjBCRDYwRDlDMjg0RUNBQ0E4QUNG NTc1OTgwNTEwHhcNMjUwODIzMDY0NTM3WhcNMjUwODMwMDY0NTM3WjAYMRYwFAYD VQQDEw02OGE5NjM5Mi01YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuVVpgkossaK7e0toYP4a6ehLAJm3ir9nCj+kHud/dRv/iY4Qo0xU8iV9fB0 4eDm124hIurUCUJHOe32QeTEpEBQFuHJJQx3SLMEmPumVI/dQWD9T9S2hEB4i9jl Mv66XVled73+1UCy0ExP0sU1Uyhz9uUe/7lNU1uN0a1ysM+FxxpKYwVwloQkjqEB L5KD5PqA2akVyQ1wHlVuJKBMkb3TY3VFXtq5G+h1s78asnm5vj3c8UxfMJ9iowI2 cqTgHagc+oim4vRK4kT9JFTnwc3RoC4M5rwstHChKEWRiKHqsGFKhQ7rNQOY0Ctd F6sQtcux0avlz/3WkkvWU3YSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPczqMYE HkFlOPeU0pQPm8u8JcTnMB8GA1UdIwQYMBaAFBafe3mxywvWDZwoTsrKis9XWYBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9ERjgyRjVBRUE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9GcDk3ZWJITEM5WU5uQ2hPeXNxS3oxZFpn RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZwOTdlYkhMQzlZTm5DaE95c3FLejFkWmdGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9ERjgyRjVBRUE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9GcDk3ZWJITEM5 WU5uQ2hPeXNxS3oxZFpnRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkRrfjSvCsNNmlIjX2TzV3gkTL/UdcRRN4JgCag2EhqyqclBmwlqqi rOnthPAhWCe4G4FFbS3qacn23NDmXqz/ROFfZkcYgyt5HF9jV+77tTgOEYIhLysO t8KQA5am1hxkTkumcoY5T/8ocQGMS2+yNlyI+So/rQDXlF8iBSYpmU+7vLqohy3f WiFFqBiuSPcubMQXxtJvkq2Uil1pem5m8K3q1UKtQktqOwDqKAEY6B58nf9h+uiY 5g05Qm+XR+kPbEBeW/QjHsgqZjvgaR2i/bRqRuuPnzEzKsOpfe4WDjqG/MN0O+O1 5gcDCCUUQy0s6myZR7Gc8jAeQ30hnWHs -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:44 2025 by rpki-client