$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: G1K6zrKjnx8Cs/7SH8Kt8rhnzZ3IF0leDp9DWvLW+e4= Subject key identifier: 59:BB:D0:CA:1F:2C:22:F9:02:10:2B:CB:1B:02:13:C7:E9:A2:C3:33 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0677 Signing time: Fri 22 Aug 2025 17:00:08 +0000 Manifest this update: Fri 22 Aug 2025 17:00:08 +0000 Manifest next update: Fri 29 Aug 2025 17:00:08 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: gRWxKm0sSW2ua3xTu5PNzc+TTVEIdpkv3K5GOETCMlU=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Aug 22 17:00:08 2025 GMT Not After : Aug 29 17:00:08 2025 GMT Subject: CN=68a8a218-9477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:36:ca:47:86:a4:2f:d7:92:5b:f3:03:27: 04:f7:75:b6:45:4f:0a:91:e6:84:db:61:b2:12:f2: 9b:69:a8:db:b4:e5:4f:1d:93:50:dd:22:33:cd:dd: ac:8f:62:5c:a4:45:65:a7:8d:f5:06:77:b6:f9:7a: a7:26:57:fb:c9:19:1d:a2:4d:f0:ab:bc:41:23:5a: d2:40:28:d0:30:42:4e:13:b3:2e:be:83:d7:b1:31: 94:27:56:12:ab:db:a2:fe:e5:ac:01:2b:57:93:60: ca:bb:c3:e8:4b:0e:83:98:31:d1:21:6c:64:4d:cb: b3:d2:23:f7:56:1e:73:ba:46:a8:aa:0e:f9:c8:fb: fc:26:0b:75:77:10:4b:24:ab:d5:06:01:75:a1:df: 6e:6f:27:6f:fa:e5:6d:c3:4e:d6:a3:a2:a2:7d:27: c4:51:b1:ce:de:01:8e:25:ad:75:ef:c3:df:b8:f0: 54:1d:9b:ce:14:7d:e9:7e:d2:8b:8c:f2:6f:0e:a1: 99:28:dc:cb:f9:0d:8d:da:17:e2:cb:37:6b:b3:0c: eb:c8:49:87:ba:7a:54:59:c3:98:f6:b8:5b:c6:0a: 60:4a:e8:b2:d5:01:04:30:d4:0a:a3:7c:e5:da:96: 66:70:e7:22:8a:0c:94:cf:a8:ae:9f:76:2f:72:89: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:D0:CA:1F:2C:22:F9:02:10:2B:CB:1B:02:13:C7:E9:A2:C3:33 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:41:ad:80:c7:96:cc:d9:08:6c:b3:e3:02:11:c5:9a:95: 91:26:50:86:aa:ef:3f:21:ee:51:f7:21:93:21:4d:b6:9d:22: 21:f1:d1:74:80:1b:f6:14:63:31:38:d8:06:c8:7e:d7:f1:e4: c5:ce:03:e0:32:62:74:7c:c3:04:dc:0c:93:05:c0:b1:d3:f1: 46:03:d2:8f:1e:1b:11:a1:51:29:5b:45:a9:6a:40:a2:f7:e8: d2:a2:fe:fc:76:98:d4:e4:62:03:20:f3:6c:41:c8:b0:92:0a: f3:9d:c9:7b:de:c4:59:36:35:85:28:c1:be:81:d0:15:a5:08: 72:ea:30:97:ff:d8:d0:c2:41:8b:f4:5a:a5:51:c8:ea:24:c5: 6d:f9:09:51:bf:1e:38:dd:bc:3a:66:23:10:f3:d3:82:a3:63: d8:c6:1f:50:7b:aa:e8:ac:13:ef:17:e9:1a:0f:e9:f3:19:a6: 0e:d0:ca:99:65:69:53:f3:c6:fd:ce:2a:cb:d8:c5:5b:e2:7d: 86:4c:5d:93:6a:e6:0b:ba:40:d1:6b:1c:97:5b:2b:d7:72:15: bc:c7:c9:17:6f:c0:03:4b:cc:18:80:c4:d1:2e:76:a5:24:4b: 03:f8:88:3d:d9:f9:da:a6:5b:e4:61:e1:38:1b:d8:4e:96:bf: f4:3c:df:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwODIyMTcwMDA4WhcNMjUwODI5MTcwMDA4WjAYMRYwFAYD VQQDEw02OGE4YTIxOC05NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kw2ykeGpC/XklvzAycE93W2RU8KkeaE22GyEvKbaajbtOVPHZNQ3SIzzd2s j2JcpEVlp431Bne2+XqnJlf7yRkdok3wq7xBI1rSQCjQMEJOE7MuvoPXsTGUJ1YS q9ui/uWsAStXk2DKu8PoSw6DmDHRIWxkTcuz0iP3Vh5zukaoqg75yPv8Jgt1dxBL JKvVBgF1od9ubydv+uVtw07Wo6KifSfEUbHO3gGOJa1178PfuPBUHZvOFH3pftKL jPJvDqGZKNzL+Q2N2hfiyzdrswzryEmHunpUWcOY9rhbxgpgSuiy1QEEMNQKo3zl 2pZmcOciigyUz6iun3YvconSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm70Mof LCL5AhAryxsCE8fposMzMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZUGtgMeWzNkIbLPjAhHFmpWRJlCGqu8/Ie5R9yGTIU22nSIh8dF0 gBv2FGMxONgGyH7X8eTFzgPgMmJ0fMME3AyTBcCx0/FGA9KPHhsRoVEpW0WpakCi 9+jSov78dpjU5GIDIPNsQciwkgrzncl73sRZNjWFKMG+gdAVpQhy6jCX/9jQwkGL 9FqlUcjqJMVt+QlRvx443bw6ZiMQ89OCo2PYxh9Qe6rorBPvF+kaD+nzGaYO0MqZ ZWlT88b9zirL2MVb4n2GTF2TauYLukDRaxyXWyvXchW8x8kXb8ADS8wYgMTRLnal JEsD+Ig92fnaplvkYeE4G9hOlr/0PN/w -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:01 2025 by rpki-client