$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: lwLMtAtX4j+4dbuC0cGB1JCP9gqlaMJQg7gUyDfgyDA= Subject key identifier: 54:55:5F:36:D2:9E:23:40:62:3F:94:29:F6:A8:55:A3:3E:F1:DF:5E Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0197 Signing time: Sat 23 Aug 2025 03:33:52 +0000 Manifest this update: Sat 23 Aug 2025 03:33:52 +0000 Manifest next update: Sat 30 Aug 2025 03:33:52 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: l4LvzWofMxDqAvEGZnkhByghSO1XQTlMnTf7gK1Ei+w=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: IU2n2x/NVgQOUwGjqFagszzivCXrq63+ZL+OISFLwDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Aug 23 03:33:52 2025 GMT Not After : Aug 30 03:33:52 2025 GMT Subject: CN=68a936a0-e8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:70:dc:f0:51:2f:6d:8d:73:19:cb:2f:e5: 7e:59:ff:c6:b7:53:bf:16:57:75:e7:b1:84:c1:5b: 4f:3e:ba:e7:fa:07:b6:9e:23:8f:58:96:4a:a9:1e: ed:b6:b7:f9:47:05:95:23:24:e0:c1:f5:65:9b:72: 17:50:b1:c7:e0:bc:97:c2:68:bc:c7:42:7f:c8:65: 89:0f:11:6b:91:ce:1a:51:db:9b:e0:92:bf:eb:40: 09:ca:86:72:fb:a5:93:93:2a:45:72:23:66:ab:3b: aa:51:79:fd:b2:36:6b:41:cc:37:5d:61:77:60:92: ba:62:33:43:8c:3c:b4:0f:54:f2:55:a7:14:e5:15: 45:bd:61:4f:d5:f3:00:d9:b0:87:39:8e:70:f0:bb: ba:44:79:06:d9:d1:2c:d2:05:b4:70:88:f2:16:8b: ca:db:0d:49:d3:ec:1f:8f:8d:79:c1:6c:79:ba:fe: 21:da:4b:f0:7a:51:2d:4a:64:5e:cc:02:ea:b6:02: 15:55:63:4d:ee:a3:0b:ad:24:2b:c7:a6:2e:9c:96: c9:07:4e:2c:8d:c3:39:0e:92:89:da:98:6e:74:42: af:98:8a:86:60:41:27:53:7d:23:0a:10:74:be:60: 0f:a8:cb:74:ff:49:e8:77:d8:95:65:f4:76:de:30: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:55:5F:36:D2:9E:23:40:62:3F:94:29:F6:A8:55:A3:3E:F1:DF:5E X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a2:af:d4:fc:22:d9:40:4f:35:d9:0a:fa:56:0d:ac:23:e0: 53:33:10:24:6f:a5:b2:4c:de:ef:bc:a3:f1:46:3c:f8:14:d6: 88:51:af:dc:62:ac:b9:31:c5:fe:f9:1d:a7:65:ac:05:4c:1f: 1a:f7:b0:38:a7:02:38:d2:b4:97:0b:df:8e:6e:d3:fc:6e:9b: 84:39:d5:20:df:71:30:97:42:0e:85:e2:32:ec:68:11:a8:a9: 52:ab:04:5d:3c:90:35:48:58:f2:e4:bc:1b:b8:b0:84:a5:8d: 55:3e:0c:f2:d0:d4:70:64:c1:1a:88:cb:8c:50:63:19:8e:31: c6:dc:e7:fb:4e:e5:47:88:6e:8d:06:b1:5b:0d:82:a5:1c:6a: 02:21:85:8e:17:89:3e:93:d9:26:4d:2b:c1:ed:1d:c4:7a:0f: 1d:b6:68:17:e1:84:99:29:f0:43:c8:6a:00:f9:b6:41:db:4b: 02:be:f2:6e:b0:36:54:09:6b:41:b9:22:c9:91:99:03:fb:bb: a1:86:30:1a:14:00:d0:2a:9e:7c:8c:28:3b:2b:5e:eb:6a:b1: 81:03:1d:d5:8f:cb:54:80:58:b9:d6:25:7f:90:5c:4d:51:a2: 3e:58:bb:9a:8f:ec:6e:41:c2:a1:92:e7:aa:9e:d1:b3:f8:cf: cf:ea:61:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwODIzMDMzMzUyWhcNMjUwODMwMDMzMzUyWjAYMRYwFAYD VQQDEw02OGE5MzZhMC1lOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Bw3PBRL22NcxnLL+V+Wf/Gt1O/Fld157GEwVtPPrrn+ge2niOPWJZKqR7t trf5RwWVIyTgwfVlm3IXULHH4LyXwmi8x0J/yGWJDxFrkc4aUdub4JK/60AJyoZy +6WTkypFciNmqzuqUXn9sjZrQcw3XWF3YJK6YjNDjDy0D1TyVacU5RVFvWFP1fMA 2bCHOY5w8Lu6RHkG2dEs0gW0cIjyFovK2w1J0+wfj415wWx5uv4h2kvwelEtSmRe zALqtgIVVWNN7qMLrSQrx6YunJbJB04sjcM5DpKJ2phudEKvmIqGYEEnU30jChB0 vmAPqMt0/0nod9iVZfR23jDacQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRVXzbS niNAYj+UKfaoVaM+8d9eMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADoq/U/CLZQE812Qr6Vg2sI+BTMxAkb6WyTN7vvKPxRjz4FNaIUa/c Yqy5McX++R2nZawFTB8a97A4pwI40rSXC9+ObtP8bpuEOdUg33Ewl0IOheIy7GgR qKlSqwRdPJA1SFjy5LwbuLCEpY1VPgzy0NRwZMEaiMuMUGMZjjHG3Of7TuVHiG6N BrFbDYKlHGoCIYWOF4k+k9kmTSvB7R3Eeg8dtmgX4YSZKfBDyGoA+bZB20sCvvJu sDZUCWtBuSLJkZkD+7uhhjAaFADQKp58jCg7K17rarGBAx3Vj8tUgFi51iV/kFxN UaI+WLuaj+xuQcKhkueqntGz+M/P6mHD -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:23 2025 by rpki-client