$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: owb0lmkZm9Du9LxCw2U9M8d7beHJPhmSPsD15vvjfpw= Subject key identifier: 5C:91:F9:DA:14:A4:0A:A4:AC:1F:FA:B7:03:9D:04:5A:E1:3D:64:BA Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34FA Signing time: Fri 22 Aug 2025 14:46:48 +0000 Manifest this update: Fri 22 Aug 2025 14:46:48 +0000 Manifest next update: Fri 29 Aug 2025 14:46:48 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: VVSjY7kjOddnF8aAa5UH8038Ln4McDs+UjayGlIH0lo=) 2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: blgTc5XvQYnU0ep+sG7C9QHqLwdacO0GP/AFo7Q8RWs=) 3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: ir6EbSttFLUXNeH20jsAyQelAKUJ2g+sCpcB0UwAb9I=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Aug 22 14:46:48 2025 GMT Not After : Aug 29 14:46:48 2025 GMT Subject: CN=68a882d8-f357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:34:16:68:38:66:0e:98:56:ed:7d:a0:b0: e5:d6:5d:28:4e:9a:8f:eb:17:56:77:57:3f:ae:f2: d6:53:c7:8f:53:c9:90:81:16:8a:3f:ac:c6:09:26: 23:37:f7:ed:5d:f1:44:dc:a7:fc:25:64:98:e5:ed: e8:e1:59:ef:28:1c:2f:ec:a5:bf:87:ab:d5:74:54: d8:35:74:3e:94:4b:5e:25:dc:b8:e2:0e:f1:c4:32: 13:52:d1:e7:6f:f7:48:4b:b7:8d:bc:bc:18:be:08: 24:df:ff:b7:88:05:8b:c5:79:2f:3e:4b:a9:c8:25: bd:74:5e:95:05:e0:35:49:68:20:6f:5e:19:69:37: 92:85:e2:76:88:5f:64:02:78:a5:dc:70:db:23:77: 6c:07:42:48:5a:c4:8c:1c:c5:5c:98:69:f7:c2:97: b4:c2:03:41:49:f3:71:e3:f3:b1:e6:6f:67:61:fe: a8:d3:18:07:f1:ff:7d:bf:d7:bf:6b:d9:18:21:3e: 71:e4:ba:86:46:ed:30:f1:07:c0:d8:13:3f:cb:e9: eb:3c:af:e3:50:9e:95:da:3f:ac:f0:25:1b:2b:7c: 77:86:69:08:6c:d4:7e:65:e3:2f:15:28:44:c3:d6: 19:57:e7:8e:5f:0c:e5:51:03:2b:f5:25:10:fe:5c: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:91:F9:DA:14:A4:0A:A4:AC:1F:FA:B7:03:9D:04:5A:E1:3D:64:BA X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:df:5e:1c:87:a1:1f:6c:38:60:3e:fe:a4:bb:2b:74:dd:ba: 7c:20:9f:ce:58:12:23:91:73:a7:f0:ff:4f:09:aa:20:c5:a2: 92:8f:0d:06:c5:bc:0c:76:58:ba:4c:af:df:6a:ca:0f:f3:59: 7d:b2:75:57:7c:14:15:37:f7:28:67:e4:f5:4d:23:5f:7b:d1: ae:3c:fa:e2:75:43:d2:99:6d:16:dd:22:4f:6f:3e:28:0b:66: ed:89:a3:a7:9a:45:30:81:b5:e4:44:b8:84:a1:da:a1:66:58: 03:53:87:b7:a8:2a:3a:52:7a:61:a3:23:b8:eb:31:7f:99:d8: 2c:57:4a:98:ec:8d:d2:99:02:4f:54:32:f4:50:a4:79:be:0d: e3:a3:f7:dd:06:61:eb:40:aa:4d:00:22:6d:9c:0b:0d:13:c7: 80:10:5f:8b:a3:2c:14:14:3b:d4:87:59:b5:01:1d:e4:17:3f: 0c:de:c1:e2:22:4e:5b:2d:4f:62:ff:ed:19:8e:7c:a7:78:9f: d7:c2:68:b6:90:79:bf:05:5a:da:80:71:c3:b4:57:23:f4:f3: b7:f3:b7:aa:7c:69:9e:bf:e3:2b:be:47:db:7a:f0:16:65:4a: f7:d5:05:9b:c9:be:70:bf:07:68:55:f4:78:b9:c2:31:fb:7a: 2c:97:e4:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwODIyMTQ0NjQ4WhcNMjUwODI5MTQ0NjQ4WjAYMRYwFAYD VQQDEw02OGE4ODJkOC1mMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzls0Fmg4Zg6YVu19oLDl1l0oTpqP6xdWd1c/rvLWU8ePU8mQgRaKP6zGCSYj N/ftXfFE3Kf8JWSY5e3o4VnvKBwv7KW/h6vVdFTYNXQ+lEteJdy44g7xxDITUtHn b/dIS7eNvLwYvggk3/+3iAWLxXkvPkupyCW9dF6VBeA1SWggb14ZaTeSheJ2iF9k Anil3HDbI3dsB0JIWsSMHMVcmGn3wpe0wgNBSfNx4/Ox5m9nYf6o0xgH8f99v9e/ a9kYIT5x5LqGRu0w8QfA2BM/y+nrPK/jUJ6V2j+s8CUbK3x3hmkIbNR+ZeMvFShE w9YZV+eOXwzlUQMr9SUQ/lwpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyR+doU pAqkrB/6twOdBFrhPWS6MB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY314ch6EfbDhgPv6kuyt03bp8IJ/OWBIjkXOn8P9PCaogxaKSjw0G xbwMdli6TK/fasoP81l9snVXfBQVN/coZ+T1TSNfe9GuPPridUPSmW0W3SJPbz4o C2btiaOnmkUwgbXkRLiEodqhZlgDU4e3qCo6UnphoyO46zF/mdgsV0qY7I3SmQJP VDL0UKR5vg3jo/fdBmHrQKpNACJtnAsNE8eAEF+LoywUFDvUh1m1AR3kFz8M3sHi Ik5bLU9i/+0ZjnyneJ/Xwmi2kHm/BVragHHDtFcj9PO387eqfGmev+MrvkfbevAW ZUr31QWbyb5wvwdoVfR4ucIx+3osl+Tj -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:39 2025 by rpki-client