$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: dJRJZPnnXZ+0vPFLzzRTvJVlXwljIBuKbWU28vNoLfc= Subject key identifier: 63:DC:8B:5F:31:60:72:15:75:D9:AB:98:73:86:78:EA:E8:6A:35:9A Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 15AC Signing time: Fri 22 Aug 2025 18:35:01 +0000 Manifest this update: Fri 22 Aug 2025 18:35:00 +0000 Manifest next update: Fri 29 Aug 2025 18:35:00 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: OscQert2d/d0V/RVRUkyhumY8VujWgFGJwENeqBnWP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: Aug 22 18:35:00 2025 GMT Not After : Aug 29 18:35:00 2025 GMT Subject: CN=68a8b855-ca45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9d:1b:51:f9:08:16:01:ec:82:28:65:bb:f9: 94:24:3d:a6:d6:57:18:1d:4d:67:6a:ed:35:47:17: ad:9a:7b:0b:f4:d2:17:f5:48:77:3c:aa:b0:5d:13: e7:f7:67:f0:47:6b:90:63:b7:c8:3c:a1:42:5c:1c: 54:60:d0:da:ef:0a:e1:82:62:11:e7:aa:61:df:d4: 47:5c:29:59:2c:01:07:c4:b1:27:d1:62:45:54:0c: d1:3e:f2:f1:5d:a5:bf:5f:af:b5:c0:53:1e:91:a8: b8:02:0a:b9:b7:7c:1b:d4:16:00:ec:3e:a2:da:45: 97:e2:df:bc:dd:aa:aa:7a:60:eb:32:f8:36:6b:38: 8e:5f:c2:9f:2b:69:b8:34:46:16:20:69:de:46:8b: 74:9b:de:3d:da:87:ae:5c:2a:0e:a5:8f:13:f9:c5: f4:0a:23:5c:d5:52:a3:35:41:4c:41:b5:7a:27:09: d0:51:0b:f8:c1:00:f0:fd:00:b9:c3:97:4a:37:ea: 8e:92:d6:c2:14:cd:ef:15:e2:9d:a3:e7:6c:d9:1e: 03:71:ca:b8:f8:1f:0b:a1:3e:cf:66:64:95:dd:ad: c2:d3:76:39:63:3a:1d:f2:40:ef:ea:5e:e8:57:5a: 1b:78:f5:b1:75:66:0e:3b:d0:26:ad:e8:09:04:2c: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DC:8B:5F:31:60:72:15:75:D9:AB:98:73:86:78:EA:E8:6A:35:9A X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c8:6b:0e:58:9d:86:ad:b8:33:35:e3:3d:2e:23:cc:f7:85: 09:4d:57:92:d4:6b:b4:db:22:6e:d6:99:99:fd:07:34:53:40: e8:d8:36:0b:95:89:e2:c1:82:9b:62:09:ac:64:c6:3c:04:9e: f8:6a:a2:5d:a2:17:8b:fc:ac:21:37:31:98:e2:6c:a2:71:ba: 62:c3:70:b0:a8:d7:33:24:b5:92:b2:52:47:5a:41:2c:4d:a2: f5:11:27:32:f3:83:59:7c:77:01:cf:dd:50:3c:56:54:4e:96: 69:67:3b:ad:54:5a:87:da:4c:54:06:7a:ac:b4:ca:e1:3a:fc: 41:1b:bd:2c:12:09:91:d6:a0:4e:b6:d0:f7:01:79:74:b1:12: 62:67:b6:67:57:1e:c5:68:c3:c9:86:22:7f:20:ac:0f:08:74: 3c:03:f2:71:cd:29:ba:85:b0:17:e0:34:7e:e6:f7:98:70:a7: b5:35:bc:52:61:c7:5d:1f:90:8e:93:79:e0:e2:06:90:88:d7: 36:68:c3:5b:34:8a:db:70:a1:3d:cd:d7:cd:ee:15:f1:51:21: 1f:48:08:bd:1e:e6:53:99:7d:22:e1:f3:28:e0:bd:a3:85:14: 32:79:fc:42:ae:a9:7e:65:28:95:87:96:d1:3f:01:e1:1e:5e: 04:9e:de:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjUwODIyMTgzNTAwWhcNMjUwODI5MTgzNTAwWjAYMRYwFAYD VQQDEw02OGE4Yjg1NS1jYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp0bUfkIFgHsgihlu/mUJD2m1lcYHU1nau01RxetmnsL9NIX9Uh3PKqwXRPn 92fwR2uQY7fIPKFCXBxUYNDa7wrhgmIR56ph39RHXClZLAEHxLEn0WJFVAzRPvLx XaW/X6+1wFMekai4Agq5t3wb1BYA7D6i2kWX4t+83aqqemDrMvg2aziOX8KfK2m4 NEYWIGneRot0m9492oeuXCoOpY8T+cX0CiNc1VKjNUFMQbV6JwnQUQv4wQDw/QC5 w5dKN+qOktbCFM3vFeKdo+ds2R4Dccq4+B8LoT7PZmSV3a3C03Y5Yzod8kDv6l7o V1obePWxdWYOO9AmregJBCxZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPci18x YHIVddmrmHOGeOroajWaMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1yGsOWJ2GrbgzNeM9LiPM94UJTVeS1Gu02yJu1pmZ/Qc0U0Do2DYL lYniwYKbYgmsZMY8BJ74aqJdoheL/KwhNzGY4myicbpiw3CwqNczJLWSslJHWkEs TaL1EScy84NZfHcBz91QPFZUTpZpZzutVFqH2kxUBnqstMrhOvxBG70sEgmR1qBO ttD3AXl0sRJiZ7ZnVx7FaMPJhiJ/IKwPCHQ8A/JxzSm6hbAX4DR+5veYcKe1NbxS YcddH5COk3ng4gaQiNc2aMNbNIrbcKE9zdfN7hXxUSEfSAi9HuZTmX0i4fMo4L2j hRQyefxCrql+ZSiVh5bRPwHhHl4Ent7w -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:11 2025 by rpki-client