$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: 4tbasxT5ASN1vPhQxVzec5Jzvrh5XRlJfx5plrOohZY= Subject key identifier: 7F:1F:5C:66:22:79:9E:32:C5:78:5A:5B:DF:3B:13:0A:D1:C6:A5:77 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 073D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 0730 Signing time: Fri 22 Aug 2025 21:57:32 +0000 Manifest this update: Fri 22 Aug 2025 21:57:31 +0000 Manifest next update: Fri 29 Aug 2025 21:57:31 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: 4RgHc3sKEPURmwFSVNOF3pbRpij8iv9A8YURrj2IaPk=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1853 (0x73d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Aug 22 21:57:31 2025 GMT Not After : Aug 29 21:57:31 2025 GMT Subject: CN=68a8e7cc-6109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:04:f6:c1:ce:f5:c8:a1:3f:d3:9d:f6:c5: 3e:6e:21:1c:22:16:de:ff:45:1e:7d:90:53:a3:13: 47:04:25:f9:1a:1a:f3:8b:49:8d:5f:cf:ae:06:1e: 7a:d1:7f:24:79:66:50:bd:c5:3c:8d:c2:9a:9f:83: d4:02:eb:61:20:b9:54:45:90:e2:b1:84:07:96:1c: 3d:29:e6:51:ce:2f:a6:2f:b4:e9:d1:8f:ac:d9:66: b6:be:fd:22:17:d5:67:30:e0:89:97:af:44:f1:4d: 09:e7:47:db:a5:34:9a:27:7c:36:6f:68:d6:0f:04: f6:4d:33:a2:48:a3:9f:e6:33:17:ba:87:79:98:1d: 9f:ce:c0:20:fd:3a:2c:6a:ec:84:9c:b4:7a:be:55: c5:c1:05:0d:7a:85:e2:e0:80:ec:94:a4:58:e8:05: c4:25:3d:2a:78:da:c3:16:b7:c4:eb:88:82:e1:a4: 7a:f6:c9:74:5c:5d:97:4a:17:b7:31:0a:80:00:28: 49:a2:3c:e1:35:55:0d:5a:f4:e2:dc:29:19:4b:36: 4b:ab:cb:cc:a9:18:b4:e1:87:7a:54:cd:3d:9d:45: 32:76:d3:07:1e:0d:97:25:07:b6:ee:2d:6d:e3:68: b9:24:b8:ab:d9:07:72:76:7f:41:b1:c5:7d:31:99: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1F:5C:66:22:79:9E:32:C5:78:5A:5B:DF:3B:13:0A:D1:C6:A5:77 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:9e:13:12:4f:5a:73:e5:49:8f:7f:12:1c:02:7b:4d:98:b7: e8:50:95:75:e0:d4:81:68:63:ea:83:e6:b3:73:70:52:15:a9: 06:f2:7b:14:b4:2c:e1:33:5b:26:93:90:e9:3e:17:20:ef:f8: 31:46:ad:c1:7b:c3:7e:61:de:5a:a8:cf:3c:d9:ee:15:2d:50: 10:ac:31:ed:8b:69:c0:d3:48:9a:7c:8e:49:e9:87:b2:86:c1: 0d:e1:26:56:ea:bd:50:63:72:97:85:39:91:93:cf:e5:55:55: 8a:6f:a0:c7:b8:34:bf:dd:52:6d:a6:4a:a0:b6:81:05:9f:88: df:f5:51:59:90:66:c7:b5:f5:4c:52:9b:cb:75:cd:0a:5a:ae: c9:13:86:ff:93:2d:79:75:13:12:37:1e:72:3f:a3:c1:9e:9f: 96:72:5e:f5:eb:d9:76:08:d1:09:21:b7:82:a4:c2:a9:53:3f: 26:d6:76:0a:7d:33:4c:95:72:58:2a:02:d5:66:3a:6d:62:2f: d4:db:de:c1:4e:8a:84:80:0e:cc:a2:85:ce:0a:a0:bc:5d:3c: 37:f0:2e:cb:be:e5:41:c4:f1:36:2a:da:a2:a8:fd:a5:00:55: 1c:ad:37:dd:6d:b7:a5:87:1c:09:d2:f8:c7:8f:90:19:ee:b2: cf:6d:6f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwODIyMjE1NzMxWhcNMjUwODI5MjE1NzMxWjAYMRYwFAYD VQQDEw02OGE4ZTdjYy02MTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqi8E9sHO9cihP9Od9sU+biEcIhbe/0UefZBToxNHBCX5Ghrzi0mNX8+uBh56 0X8keWZQvcU8jcKan4PUAuthILlURZDisYQHlhw9KeZRzi+mL7Tp0Y+s2Wa2vv0i F9VnMOCJl69E8U0J50fbpTSaJ3w2b2jWDwT2TTOiSKOf5jMXuod5mB2fzsAg/Tos auyEnLR6vlXFwQUNeoXi4IDslKRY6AXEJT0qeNrDFrfE64iC4aR69sl0XF2XShe3 MQqAAChJojzhNVUNWvTi3CkZSzZLq8vMqRi04Yd6VM09nUUydtMHHg2XJQe27i1t 42i5JLir2Qdydn9BscV9MZl4LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8fXGYi eZ4yxXhaW987EwrRxqV3MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgnhMST1pz5UmPfxIcAntNmLfoUJV14NSBaGPqg+azc3BSFakG8nsU tCzhM1smk5DpPhcg7/gxRq3Be8N+Yd5aqM882e4VLVAQrDHti2nA00iafI5J6Yey hsEN4SZW6r1QY3KXhTmRk8/lVVWKb6DHuDS/3VJtpkqgtoEFn4jf9VFZkGbHtfVM UpvLdc0KWq7JE4b/ky15dRMSNx5yP6PBnp+Wcl7169l2CNEJIbeCpMKpUz8m1nYK fTNMlXJYKgLVZjptYi/U297BToqEgA7MooXOCqC8XTw38C7LvuVBxPE2KtqiqP2l AFUcrTfdbbelhxwJ0vjHj5AZ7rLPbW8a -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:30 2025 by rpki-client