$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json) Hash identifier: wkBojdF5w9/9la2Dc7gNynXHIcOox3DX5U7YHf8DBIE= Subject key identifier: D7:8A:14:F7:0D:94:2A:A0:51:89:1F:54:50:5F:15:20:A2:E4:A6:F4 Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft Manifest number: 0A36 Signing time: Fri 22 Aug 2025 19:53:00 +0000 Manifest this update: Fri 22 Aug 2025 19:52:59 +0000 Manifest next update: Fri 29 Aug 2025 19:52:59 +0000 Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: fF8kjbi0xYUiUKEI6K/+fwHB7Y0C4Ppff6dVJE53TVU=) 2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Validity Not Before: Aug 22 19:52:59 2025 GMT Not After : Aug 29 19:52:59 2025 GMT Subject: CN=68a8ca9b-5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:ac:bb:da:28:82:d4:57:fa:ac:32:4d:50: 35:de:4a:16:ca:b5:a4:92:c5:d8:19:db:3c:7c:31: e9:95:2d:b0:53:31:82:dc:fb:dd:8e:12:08:f8:49: 90:f9:fc:fd:5f:d7:2a:5f:04:d1:81:32:34:27:71: f3:d8:cd:7a:12:35:db:29:00:d2:16:7d:8f:5e:43: e1:da:d5:4d:fc:1f:27:cb:12:01:f6:ec:fe:41:0a: ff:fc:69:ec:22:3d:5f:be:3d:35:38:0c:08:99:a8: 64:2b:f6:01:e2:b7:dc:5b:93:1d:59:d6:06:e0:10: 71:e4:be:81:2f:db:50:a8:12:7e:54:5a:6a:94:1e: 70:67:b6:53:f4:90:51:7b:51:ac:b6:89:4e:06:da: 34:b3:70:13:62:39:fb:55:6d:9b:ab:5c:5d:35:4e: 16:32:bd:3f:74:1d:4b:55:08:ad:b1:41:5d:2b:29: 9c:01:58:56:49:d9:1d:0a:ef:af:3f:e2:4c:5b:66: 01:8c:ef:06:15:3d:a3:f5:70:58:61:db:52:77:e5: c7:f0:76:c9:de:c1:46:97:d2:10:30:b9:a2:c4:7a: 34:e2:f1:8c:64:d3:a1:2e:17:4e:d8:56:be:7c:d2: 77:eb:45:3c:44:10:b6:f1:76:5d:e2:78:2f:67:ac: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8A:14:F7:0D:94:2A:A0:51:89:1F:54:50:5F:15:20:A2:E4:A6:F4 X509v3 Authority Key Identifier: keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bb:4f:f7:c7:b6:d3:23:25:fc:78:17:9f:c9:f8:fc:8f:5d: da:1e:2b:6b:55:d1:6b:27:1f:f3:df:ff:8c:1a:e1:59:c6:63: db:4f:f5:cb:eb:c2:de:9b:20:51:79:40:8e:60:f7:8d:6a:4c: c0:8f:91:38:a5:82:b4:5a:17:49:cb:fe:bb:8b:25:f3:c9:f5: 46:b5:5a:49:72:75:81:15:a1:a5:eb:e7:21:2d:46:31:7f:53: d7:5f:7b:18:29:21:2e:84:eb:23:37:63:b6:50:76:67:c6:d5: 7d:ba:d3:f4:d1:55:63:0b:12:ad:ee:44:7c:a8:83:a6:26:f3: 55:75:bf:19:48:c5:96:be:d7:35:57:ea:c8:94:c0:13:8e:5a: 46:12:c4:60:34:49:b8:44:5e:3c:6a:18:95:b4:29:ba:f0:86: f1:6c:10:4d:47:65:c0:dc:da:b6:b8:60:2a:e3:6e:27:a3:1d: fe:3a:a0:3e:1f:97:cc:ba:20:da:8d:e0:71:79:01:21:0f:a1: 88:da:e4:e7:0a:80:54:b1:c5:a3:c9:6f:b0:ce:f1:4a:0e:1c: 0a:45:6d:2a:fb:1a:c8:90:82:57:0f:e1:ba:4f:76:16:f5:78: c6:75:c6:73:48:5c:b2:ec:38:18:24:45:41:d8:6d:4d:66:8d: 62:8b:ec:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE QjIzMTFCNEYwHhcNMjUwODIyMTk1MjU5WhcNMjUwODI5MTk1MjU5WjAYMRYwFAYD VQQDEw02OGE4Y2E5Yi01MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywKsu9oogtRX+qwyTVA13koWyrWkksXYGds8fDHplS2wUzGC3PvdjhII+EmQ +fz9X9cqXwTRgTI0J3Hz2M16EjXbKQDSFn2PXkPh2tVN/B8nyxIB9uz+QQr//Gns Ij1fvj01OAwImahkK/YB4rfcW5MdWdYG4BBx5L6BL9tQqBJ+VFpqlB5wZ7ZT9JBR e1GstolOBto0s3ATYjn7VW2bq1xdNU4WMr0/dB1LVQitsUFdKymcAVhWSdkdCu+v P+JMW2YBjO8GFT2j9XBYYdtSd+XH8HbJ3sFGl9IQMLmixHo04vGMZNOhLhdO2Fa+ fNJ360U8RBC28XZd4ngvZ6yjfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeKFPcN lCqgUYkfVFBfFSCi5Kb0MB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0 MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1u0/3x7bTIyX8eBefyfj8j13aHitrVdFrJx/z3/+MGuFZxmPbT/XL 68LemyBReUCOYPeNakzAj5E4pYK0WhdJy/67iyXzyfVGtVpJcnWBFaGl6+chLUYx f1PXX3sYKSEuhOsjN2O2UHZnxtV9utP00VVjCxKt7kR8qIOmJvNVdb8ZSMWWvtc1 V+rIlMATjlpGEsRgNEm4RF48ahiVtCm68IbxbBBNR2XA3Nq2uGAq424nox3+OqA+ H5fMuiDajeBxeQEhD6GI2uTnCoBUscWjyW+wzvFKDhwKRW0q+xrIkIJXD+G6T3YW 9XjGdcZzSFyy7DgYJEVB2G1NZo1ii+wF -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:57 2025 by rpki-client