$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: 3oJMsyPOEcjBq5EXwBmYbM4pUibTTchqvutIXoMzIz4= Subject key identifier: 20:C4:7A:80:6E:6A:F8:72:5C:86:2E:7D:1B:78:8E:B8:A2:CC:1E:71 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0551 Signing time: Fri 22 Aug 2025 23:45:21 +0000 Manifest this update: Fri 22 Aug 2025 23:45:21 +0000 Manifest next update: Fri 29 Aug 2025 23:45:21 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: qUs9udytCEGMleco06VK7YglFk88ft0e+O/dIRtDk3Q=) 2: 1CE5552C6D3B11F0AA825533C4F9AE02.roa (hash: jDQvCTpMcft9Y6vTZ/KCcWn5HK48OaJzX4vFOC3gRbU=) 3: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 4: B4018F066D3C11F08004E139C4F9AE02.roa (hash: mkXVXjWOhZ0DUz/i0E5riYkh07lG0BNhsP2Vdoc5P0U=) 5: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 6: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Aug 22 23:45:21 2025 GMT Not After : Aug 29 23:45:21 2025 GMT Subject: CN=68a90111-85b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:28:aa:7d:07:b0:49:e9:e1:61:fd:b5:58: 30:a8:bf:e8:1b:cd:c1:03:91:96:30:1b:41:31:63: c6:61:cd:ad:1d:91:d2:a9:07:98:fa:69:58:d6:c4: f4:1f:24:0a:95:b7:57:b3:e9:ba:41:0b:47:53:fc: 70:42:9d:c6:69:09:e4:ab:f1:ef:e9:a4:7b:a5:39: cc:30:2b:32:30:cd:51:54:aa:f4:f5:c3:48:7d:ef: 1c:39:a2:b8:d7:fd:02:be:bc:1b:33:77:4f:c1:ef: c2:f2:f6:df:2d:73:2f:fc:b1:49:e0:fc:81:c7:6e: 9b:51:2e:b9:1c:bf:8b:3a:b0:d0:14:e1:8c:ef:ba: 2f:9d:0e:e1:fd:39:d8:45:14:7a:f9:56:bb:d2:c3: a2:2c:6e:d0:8e:88:da:20:93:20:ea:81:66:7c:f5: 13:c0:15:94:f6:7f:cd:20:db:ca:80:05:a6:d2:49: 0a:ff:94:82:d0:5a:f9:c5:61:61:1e:18:4f:2f:c4: fb:73:0a:2f:00:4d:8a:69:b8:28:10:09:c7:0c:df: 39:5d:5e:f9:95:49:27:f4:9e:c3:85:5c:3b:1f:2f: 50:d2:90:ce:69:57:52:2c:f6:97:16:a8:70:62:de: 4e:44:2f:0c:de:c8:bd:17:1f:b8:25:88:2f:14:51: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:7A:80:6E:6A:F8:72:5C:86:2E:7D:1B:78:8E:B8:A2:CC:1E:71 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6a:da:0d:9f:ab:5c:6a:71:67:c0:a8:c5:51:53:f2:be:ea: e4:a3:ab:87:ea:90:11:d1:82:14:48:2d:81:47:ae:61:5d:ff: 7f:fe:93:82:f5:63:10:f5:0e:b9:42:b3:c8:e4:a3:95:67:7d: 3e:04:85:54:52:7d:c9:af:c2:a8:c8:6a:a6:93:d3:6c:51:0a: 34:e8:2f:65:0a:9b:58:8b:6a:70:30:7b:eb:93:71:8d:1f:9e: b2:a6:de:ca:e7:4f:9d:53:2f:5e:14:26:cc:25:6d:c0:84:57: 43:0c:ba:95:30:69:6d:5a:88:0f:6e:27:d2:82:50:79:49:67: 98:1f:59:37:ca:c1:6d:78:16:bd:ca:3d:a3:35:e8:1f:ea:81: f5:d7:5b:f2:5f:94:3e:45:41:2a:d0:cb:3d:d7:1d:ea:35:18: 76:82:48:e9:21:f5:9f:02:3c:86:3a:c0:d8:fe:b7:bd:53:53: 95:b4:30:07:48:87:5a:2f:17:2c:6a:43:69:ff:15:94:8b:c2: 13:c4:14:0f:e5:59:e9:ac:65:f2:ab:52:77:21:51:c8:86:ed: 1b:ee:1d:5b:df:52:8d:d8:a1:11:0a:55:c2:52:fb:54:ff:55: d0:0b:69:cc:82:91:93:b7:13:29:a4:04:95:23:db:fd:18:ef: e7:1f:20:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwODIyMjM0NTIxWhcNMjUwODI5MjM0NTIxWjAYMRYwFAYD VQQDEw02OGE5MDExMS04NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6Uoqn0HsEnp4WH9tVgwqL/oG83BA5GWMBtBMWPGYc2tHZHSqQeY+mlY1sT0 HyQKlbdXs+m6QQtHU/xwQp3GaQnkq/Hv6aR7pTnMMCsyMM1RVKr09cNIfe8cOaK4 1/0CvrwbM3dPwe/C8vbfLXMv/LFJ4PyBx26bUS65HL+LOrDQFOGM77ovnQ7h/TnY RRR6+Va70sOiLG7QjojaIJMg6oFmfPUTwBWU9n/NINvKgAWm0kkK/5SC0Fr5xWFh HhhPL8T7cwovAE2KabgoEAnHDN85XV75lUkn9J7DhVw7Hy9Q0pDOaVdSLPaXFqhw Yt5ORC8M3si9Fx+4JYgvFFFg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDEeoBu avhyXIYufRt4jriizB5xMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4atoNn6tcanFnwKjFUVPyvurko6uH6pAR0YIUSC2BR65hXf9//pOC 9WMQ9Q65QrPI5KOVZ30+BIVUUn3Jr8KoyGqmk9NsUQo06C9lCptYi2pwMHvrk3GN H56ypt7K50+dUy9eFCbMJW3AhFdDDLqVMGltWogPbifSglB5SWeYH1k3ysFteBa9 yj2jNegf6oH111vyX5Q+RUEq0Ms91x3qNRh2gkjpIfWfAjyGOsDY/re9U1OVtDAH SIdaLxcsakNp/xWUi8ITxBQP5VnprGXyq1J3IVHIhu0b7h1b31KN2KERClXCUvtU /1XQC2nMgpGTtxMppASVI9v9GO/nHyCs -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:08 2025 by rpki-client