$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json) Hash identifier: L6Y6F7sMEXVBHsofSmU5hi4Rf2H0dg+EkYe8P7sCjAU= Subject key identifier: A9:28:48:92:71:3C:3A:F1:E4:E2:08:48:4B:1B:5D:45:8A:A8:53:53 Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft Manifest number: 1376 Signing time: Fri 22 Aug 2025 18:03:12 +0000 Manifest this update: Fri 22 Aug 2025 18:03:11 +0000 Manifest next update: Fri 29 Aug 2025 18:03:11 +0000 Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: BU0LPZVfK2h+h+m55wrwUjguGy/tpJ8fl/YS2BCD7bs=) 2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: Aug 22 18:03:11 2025 GMT Not After : Aug 29 18:03:11 2025 GMT Subject: CN=68a8b0e0-999f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:39:d5:15:17:58:50:56:d6:d6:74:f1:ce: aa:4b:ed:e4:90:70:73:82:51:1c:2d:c7:02:e4:25: 8c:ed:d9:3e:3c:cf:e3:2e:d3:f7:2a:8f:10:64:3a: 32:bf:a3:a6:8a:90:e9:b3:f3:28:4e:c1:75:9b:52: 15:4a:d7:5c:55:4f:61:f5:8d:97:89:a4:a6:bc:b5: be:48:70:93:b8:9e:cc:e4:8b:a1:60:ec:3c:e8:20: dc:9b:b4:23:6d:18:44:d5:62:70:76:6f:e6:97:01: a1:fd:66:a6:8e:dc:81:6a:35:ca:49:e3:a1:cf:6c: 79:a3:3a:0d:36:8a:3a:d5:1c:fb:75:19:51:a2:05: 92:b6:ee:39:09:dc:12:10:b5:42:a4:ac:aa:f1:3b: 1b:59:1f:8b:2c:f4:ea:4f:bc:e8:98:e2:db:f6:23: fb:93:41:77:3b:ed:f5:50:c3:d9:8c:c8:1d:88:36: a1:57:64:c3:9e:a2:21:cf:77:12:7b:71:fe:5c:86: ac:48:09:58:ea:ac:74:00:ae:3a:a9:89:36:d9:28: dd:c8:f2:ab:42:9c:b1:cc:28:cd:c4:e1:9b:3c:83: 85:78:05:cc:45:77:46:9d:df:a6:7c:8d:f8:0c:1c: 80:ab:d4:66:6f:7b:24:ac:35:94:a6:ce:48:59:bc: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:48:92:71:3C:3A:F1:E4:E2:08:48:4B:1B:5D:45:8A:A8:53:53 X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fa:b4:e2:b9:d0:33:fc:cf:5f:4f:3d:f7:67:11:4a:90:f8: ed:d6:9d:0f:e1:f6:a9:a4:5d:6e:b9:67:f5:7d:ff:d2:b3:93: 1b:91:c8:5c:19:3b:94:64:72:16:46:54:0c:0a:22:99:64:ad: 72:69:12:e9:e8:f8:9d:b6:40:f1:9d:92:a1:69:8d:fe:24:94: 31:d2:ac:43:64:3d:a4:fd:c3:46:78:04:92:4b:e5:c6:3e:e4: 90:e7:22:5c:8e:2e:3d:aa:5d:a7:9d:a5:96:eb:32:dd:9d:07: 8f:36:f3:69:7b:4c:67:5e:7f:a1:86:d6:9e:00:71:f5:b5:cf: 42:4a:3e:14:ea:8e:4b:05:f0:9f:49:3a:7d:e9:ea:3d:cb:c9: 95:15:4b:db:00:be:6b:72:cf:96:03:a6:09:25:c3:66:58:9e: b8:e8:1f:ed:14:85:8a:da:c3:d9:49:fe:19:16:9a:4f:c0:b4: 86:b1:7b:27:25:f4:ed:a3:88:64:09:dd:94:88:e2:9d:07:6a: 0a:d0:d2:35:75:d5:d7:52:75:9f:25:ea:17:d5:c8:d8:02:0f: 1b:0b:53:ed:41:c1:e6:d1:03:4e:d7:73:33:fb:47:77:5e:a8: 64:29:e2:26:2f:8a:b8:c1:85:d4:49:58:97:7a:3d:04:28:9b: 11:25:9c:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKDE0QzQ3NUNGRDI4Qjc3RUMxMTUyQzJFRjMzRTVFNDNF MTc1QUMyMjEwHhcNMjUwODIyMTgwMzExWhcNMjUwODI5MTgwMzExWjAYMRYwFAYD VQQDEw02OGE4YjBlMC05OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Sg51RUXWFBW1tZ08c6qS+3kkHBzglEcLccC5CWM7dk+PM/jLtP3Ko8QZDoy v6OmipDps/MoTsF1m1IVStdcVU9h9Y2XiaSmvLW+SHCTuJ7M5IuhYOw86CDcm7Qj bRhE1WJwdm/mlwGh/WamjtyBajXKSeOhz2x5ozoNNoo61Rz7dRlRogWStu45CdwS ELVCpKyq8TsbWR+LLPTqT7zomOLb9iP7k0F3O+31UMPZjMgdiDahV2TDnqIhz3cS e3H+XIasSAlY6qx0AK46qYk22SjdyPKrQpyxzCjNxOGbPIOFeAXMRXdGnd+mfI34 DByAq9Rmb3skrDWUps5IWbz0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkoSJJx PDrx5OIISEsbXUWKqFNTMB8GA1UdIwQYMBaAFBTEdc/Si3fsEVLC7zPl5D4XWsIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQtd1JVc0x2TS1Ya1BoZGF3 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQt d1JVc0x2TS1Ya1BoZGF3aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9+rTiudAz/M9fTz33ZxFKkPjt1p0P4fappF1uuWf1ff/Ss5Mbkchc GTuUZHIWRlQMCiKZZK1yaRLp6PidtkDxnZKhaY3+JJQx0qxDZD2k/cNGeASSS+XG PuSQ5yJcji49ql2nnaWW6zLdnQePNvNpe0xnXn+hhtaeAHH1tc9CSj4U6o5LBfCf STp96eo9y8mVFUvbAL5rcs+WA6YJJcNmWJ646B/tFIWK2sPZSf4ZFppPwLSGsXsn JfTto4hkCd2UiOKdB2oK0NI1ddXXUnWfJeoX1cjYAg8bC1PtQcHm0QNO13Mz+0d3 XqhkKeImL4q4wYXUSViXej0EKJsRJZz/ -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:33 2025 by rpki-client