$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: 1qYn075g2dVW0uCn3sp1B+0jH9zHgah+0KCNsaoEEY4= Subject key identifier: AA:20:8A:4E:4D:F7:E8:D3:D1:F8:F2:B7:53:1B:35:EC:25:E7:C6:E8 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B68 Signing time: Fri 22 Aug 2025 19:13:23 +0000 Manifest this update: Fri 22 Aug 2025 19:13:23 +0000 Manifest next update: Fri 29 Aug 2025 19:13:23 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: nkcDubDVmlKp3+tO+aF7MODE1Xd+TnWhyfHlRIXjoCI=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Aug 22 19:13:23 2025 GMT Not After : Aug 29 19:13:23 2025 GMT Subject: CN=68a8c153-f045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:ef:4c:5e:ed:a1:eb:42:dd:9f:19:51:a8: cd:de:59:70:1d:41:cd:05:10:1b:75:d0:44:c4:3b: 96:d5:34:70:fe:a3:61:dd:2c:51:95:53:60:f3:10: 9e:42:44:70:05:fd:c6:a1:ef:a0:81:64:97:dc:d2: 3a:56:06:0c:df:d2:1c:2c:b0:d8:a0:94:82:6a:69: 28:f3:0e:0e:88:f5:41:91:70:b9:45:ea:b4:79:09: 0e:24:47:11:12:df:09:4f:5f:f4:55:52:7d:3f:0c: f2:b0:9a:62:13:c3:ae:3c:76:c1:ec:ba:2a:d6:65: 40:d3:68:bb:12:f7:48:ab:0c:fc:d3:d2:ce:45:0b: e2:62:a5:3c:58:8c:23:50:68:3c:9a:07:73:e7:d5: 40:b6:67:88:4c:56:2c:c9:05:3d:8a:01:6f:35:4a: f8:ed:85:75:0f:bc:20:a8:c6:2d:07:b1:39:62:ba: 37:4b:a1:00:cf:65:7a:14:f4:d4:e2:e0:20:2a:86: 52:bb:a5:03:1b:45:1e:85:b7:f9:6a:0e:ac:6f:be: 26:b3:2e:0d:d8:1f:ff:28:39:f8:d4:2d:29:53:f2: 86:9b:c1:e1:02:3b:83:e5:e8:61:36:76:3c:88:64: ed:04:3b:a2:7b:c8:22:53:01:2f:d0:ca:71:70:27: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:8A:4E:4D:F7:E8:D3:D1:F8:F2:B7:53:1B:35:EC:25:E7:C6:E8 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:38:e6:d5:bf:2f:9a:a5:24:b9:82:fc:53:64:56:65:9c:e4: 24:64:df:c7:9e:19:d1:7f:80:e5:86:99:8d:58:0d:82:75:de: c5:21:f2:9d:7c:b7:84:d6:0f:a6:d1:29:ad:b2:d2:4f:82:4d: d8:a6:ce:36:2d:75:9a:98:2c:e5:75:a7:55:36:06:fb:92:56: 29:66:57:d8:36:87:7a:f0:44:18:66:c1:af:61:92:37:85:1d: 50:41:8c:3f:2b:31:e3:8d:2e:45:c6:0f:2e:f9:7a:3a:3c:47: 48:68:57:ba:d7:37:7c:5c:0a:68:99:98:fe:8b:66:92:d1:59: 32:b4:82:b5:b9:f1:0e:46:82:23:be:69:e2:66:73:8a:cc:0b: 71:31:f4:fd:33:af:cd:f9:3f:9d:22:98:7e:5d:c5:37:37:a4: 4c:aa:ca:1a:1f:97:08:29:d1:03:b3:2a:65:9f:55:6a:3f:28: a8:ba:ca:64:cb:3e:74:1d:5d:69:2f:9a:3e:65:d0:c8:f0:00: dd:e2:b8:df:bb:b2:b4:9a:9f:78:ba:42:79:c5:8d:f0:09:84: d5:6d:7d:ca:ba:30:db:c7:f1:3d:93:af:71:99:2c:6d:4e:20: d0:31:69:96:fd:d4:e0:fb:6f:cc:8b:75:a2:2d:8a:ad:76:a6: 83:7d:bc:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUwODIyMTkxMzIzWhcNMjUwODI5MTkxMzIzWjAYMRYwFAYD VQQDEw02OGE4YzE1My1mMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvDvTF7toetC3Z8ZUajN3llwHUHNBRAbddBExDuW1TRw/qNh3SxRlVNg8xCe QkRwBf3Goe+ggWSX3NI6VgYM39IcLLDYoJSCamko8w4OiPVBkXC5Req0eQkOJEcR Et8JT1/0VVJ9PwzysJpiE8OuPHbB7Loq1mVA02i7EvdIqwz809LORQviYqU8WIwj UGg8mgdz59VAtmeITFYsyQU9igFvNUr47YV1D7wgqMYtB7E5Yro3S6EAz2V6FPTU 4uAgKoZSu6UDG0Uehbf5ag6sb74msy4N2B//KDn41C0pU/KGm8HhAjuD5ehhNnY8 iGTtBDuie8giUwEv0MpxcCcbVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKogik5N 9+jT0fjyt1MbNewl58boMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASOObVvy+apSS5gvxTZFZlnOQkZN/HnhnRf4DlhpmNWA2Cdd7FIfKd fLeE1g+m0SmtstJPgk3Yps42LXWamCzldadVNgb7klYpZlfYNod68EQYZsGvYZI3 hR1QQYw/KzHjjS5Fxg8u+Xo6PEdIaFe61zd8XApomZj+i2aS0VkytIK1ufEORoIj vmniZnOKzAtxMfT9M6/N+T+dIph+XcU3N6RMqsoaH5cIKdEDsypln1VqPyiouspk yz50HV1pL5o+ZdDI8ADd4rjfu7K0mp94ukJ5xY3wCYTVbX3KujDbx/E9k69xmSxt TiDQMWmW/dTg+2/Mi3WiLYqtdqaDfbz4 -----END CERTIFICATE-----Generated at Sat Aug 23 22:43:10 2025 by rpki-client