$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: NJykItL/Kvhu1H03ISjWtZyvtjcXiICzz6odU3JJcF8= Subject key identifier: C7:D8:AA:E3:A3:D7:2E:7E:0E:FC:1E:A0:BD:65:23:8F:0E:28:36:1D Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 8A Signing time: Sat 23 Aug 2025 06:48:14 +0000 Manifest this update: Sat 23 Aug 2025 06:48:13 +0000 Manifest next update: Sat 30 Aug 2025 06:48:13 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: SMY1lWBStHGChyAQDcsB1FbDSHHfBfO6KqfKRC3IexI=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Aug 23 06:48:13 2025 GMT Not After : Aug 30 06:48:13 2025 GMT Subject: CN=68a9642e-2c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:95:17:9b:a0:d1:8c:86:53:ea:46:ed:1c:7d: 6f:01:ff:62:b7:8e:50:25:de:3d:fa:60:8f:59:c0: b2:bb:8e:30:ba:5a:64:8f:31:cb:76:ab:93:45:b3: e1:d6:dd:a7:3e:75:b7:ff:58:50:a0:04:53:1d:36: d5:97:78:de:15:d2:89:22:95:c4:d4:f9:20:24:1c: 94:cd:cf:cd:5c:fd:16:d1:ba:bd:d3:91:8e:e4:d6: 88:cf:a8:82:ec:f6:21:ad:4c:10:61:1b:8a:17:87: 87:da:8e:8a:ae:ad:ec:bb:af:2d:7a:ec:75:b2:ba: 70:23:8d:20:45:49:0b:c0:6a:46:d7:dd:5f:63:12: 8f:75:20:22:8e:1d:48:8a:f1:6e:f5:46:be:56:42: 5a:4f:ce:2a:97:53:21:b9:e2:40:20:6c:29:04:c6: a2:b0:d2:dc:22:36:f2:8a:3d:28:a9:7b:74:e7:e2: 5b:53:d6:78:a5:72:cb:8e:ef:0c:91:65:cc:cb:5f: c0:11:b3:39:f7:1c:da:a0:be:f0:27:48:8f:f8:a0: 3e:59:f0:7c:3f:3c:63:11:1a:c5:bd:13:1b:a5:b3: 1a:32:bd:3f:db:d5:33:16:c9:5b:31:bb:8c:ac:4a: cd:6f:6f:0c:44:5c:2f:71:d2:cc:24:80:72:51:84: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D8:AA:E3:A3:D7:2E:7E:0E:FC:1E:A0:BD:65:23:8F:0E:28:36:1D X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d3:51:eb:d1:c9:1e:32:33:0f:72:71:f9:93:42:79:c9:5d: c1:a7:d7:81:dd:e5:ed:d8:eb:4b:3d:c9:bb:bc:32:53:a2:12: 57:f6:6c:c8:57:87:a8:93:e5:15:6c:76:41:e1:7a:0d:95:6e: bd:7b:2a:55:39:bb:47:97:c3:ab:08:26:45:95:83:0e:2e:e2: c4:a2:c1:bc:00:c5:d5:88:f8:34:f8:85:8c:31:e7:d0:a3:5e: 6d:ec:8c:a3:af:eb:b2:98:90:71:0c:26:a4:9d:2f:e3:c3:ab: 72:76:9c:b1:cf:5e:de:de:4a:7d:28:a4:60:3c:e5:a7:ca:29: 9b:ce:80:c1:51:19:dc:68:82:1e:60:e1:fb:13:0a:ee:49:1e: 59:60:ae:64:09:c5:8e:42:1a:72:55:35:ac:b1:9f:cc:66:ef: 40:79:f2:bc:86:18:04:6f:7f:fe:aa:f5:bd:cb:cb:20:fd:7a: 41:ba:1f:d3:3e:04:44:b7:49:c9:31:5b:94:35:c4:cd:c5:53: 54:c2:89:e6:bc:16:62:de:23:1d:63:c2:77:ef:f1:3c:d6:09: ed:0b:79:4c:92:22:1a:25:42:ae:83:37:fa:b4:3f:a1:4f:e2: 2e:ac:ca:a7:51:24:df:38:b9:12:f6:e1:65:0e:f2:3a:df:72: 4a:d0:99:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0MjAxMTAvBgNVBAUTKDdFM0FBNDhENjdFQjk5Njk5QzAyQjgxRjcxNjk2REY0 NjVBOEE2RTUwHhcNMjUwODIzMDY0ODEzWhcNMjUwODMwMDY0ODEzWjAYMRYwFAYD VQQDEw02OGE5NjQyZS0yYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZUXm6DRjIZT6kbtHH1vAf9it45QJd49+mCPWcCyu44wulpkjzHLdquTRbPh 1t2nPnW3/1hQoARTHTbVl3jeFdKJIpXE1PkgJByUzc/NXP0W0bq905GO5NaIz6iC 7PYhrUwQYRuKF4eH2o6Krq3su68teux1srpwI40gRUkLwGpG191fYxKPdSAijh1I ivFu9Ua+VkJaT84ql1MhueJAIGwpBMaisNLcIjbyij0oqXt05+JbU9Z4pXLLju8M kWXMy1/AEbM59xzaoL7wJ0iP+KA+WfB8PzxjERrFvRMbpbMaMr0/29UzFslbMbuM rErNb28MRFwvcdLMJIByUYTT4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfYquOj 1y5+DvweoL1lI48OKDYdMB8GA1UdIwQYMBaAFH46pI1n65lpnAK4H3FpbfRlqKbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQyMC9DNDJCMzNENEFD OEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1XbWNBcmdmY1dsdDlHV29w dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQyMC9DNDJCMzNENEFDOEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1X bWNBcmdmY1dsdDlHV29wdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa01Hr0ckeMjMPcnH5k0J5yV3Bp9eB3eXt2OtLPcm7vDJTohJX9mzI V4eok+UVbHZB4XoNlW69eypVObtHl8OrCCZFlYMOLuLEosG8AMXViPg0+IWMMefQ o15t7Iyjr+uymJBxDCaknS/jw6tydpyxz17e3kp9KKRgPOWnyimbzoDBURncaIIe YOH7EwruSR5ZYK5kCcWOQhpyVTWssZ/MZu9AefK8hhgEb3/+qvW9y8sg/XpBuh/T PgREt0nJMVuUNcTNxVNUwonmvBZi3iMdY8J37/E81gntC3lMkiIaJUKugzf6tD+h T+IurMqnUSTfOLkS9uFlDvI633JK0Jlv -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:39 2025 by rpki-client