$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: DPa3Obl5x2+O8gJGoNrD/KwusC+vd8mH3iUCz+/zYX4= Subject key identifier: 9F:6E:D7:39:63:F3:25:14:37:03:8C:D9:B8:6C:E2:73:F0:13:F6:F4 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: EB Signing time: Sat 23 Aug 2025 05:35:38 +0000 Manifest this update: Sat 23 Aug 2025 05:35:37 +0000 Manifest next update: Sat 30 Aug 2025 05:35:37 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: aVv5jRa5jygUrnWYprFsQShiezH2+27pDlx8FytvGEw=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Aug 23 05:35:37 2025 GMT Not After : Aug 30 05:35:37 2025 GMT Subject: CN=68a95329-65c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:44:2f:28:52:02:45:03:17:d6:1a:d1:e8: 75:52:63:09:e5:31:a5:fd:d6:75:a9:82:d9:4c:f9: 25:51:96:0f:80:3f:32:6c:84:95:27:6d:31:2b:aa: 05:11:42:83:03:6c:62:36:e0:76:64:06:38:16:0c: 1e:8e:e0:20:83:e0:90:c7:d7:2a:cc:ac:99:fd:99: a2:b3:1c:49:e4:89:84:aa:75:77:aa:21:2f:7c:bf: ca:f2:1c:7f:7d:e8:a0:4a:c5:03:ea:2c:94:bd:65: f8:77:d8:09:1e:de:40:96:5c:9b:57:13:9f:e7:d5: d0:51:bf:67:a9:72:cc:6d:94:c6:25:c0:fa:3a:b6: c0:bf:e1:59:a2:50:7e:32:01:a7:bb:32:85:72:c0: 58:59:32:c7:73:b4:48:2b:52:3c:88:48:a5:c4:79: b6:ec:23:da:de:29:d2:dd:f3:62:50:e6:34:1f:78: 7f:d8:db:77:a1:72:7e:40:98:97:2e:5c:d1:43:57: e7:9d:83:e5:22:26:fc:40:97:a3:c6:d2:68:29:2b: 95:e7:c1:da:90:f2:55:dc:74:2f:f0:38:89:57:87: a4:fb:89:f0:35:be:75:db:bd:39:67:d6:a4:d5:95: ad:71:f1:58:c8:8d:1c:42:4e:09:3a:b5:67:6e:e3: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6E:D7:39:63:F3:25:14:37:03:8C:D9:B8:6C:E2:73:F0:13:F6:F4 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d5:b3:9b:49:73:b4:a7:ae:4a:49:6d:26:89:40:9d:83:45: b9:4a:94:4a:6b:eb:48:71:51:82:8c:90:0d:6e:2f:82:93:3b: 8f:3b:75:43:5b:5b:e5:59:39:d4:11:f9:0d:f6:5f:a5:63:6b: 2e:79:73:5a:6e:d9:ff:8e:5e:89:cb:7f:d4:f6:08:f1:ee:34: ff:13:68:d9:15:db:52:69:8d:80:f5:c3:d3:ca:28:7c:eb:ca: 5a:04:b2:44:04:3b:bf:f2:82:ee:60:76:d0:21:ac:57:ce:2c: 5c:b0:2c:e0:8b:79:d1:39:09:92:a9:7c:dc:76:b1:be:9b:96: 35:02:c2:62:a8:c4:7e:fc:b0:e0:98:b0:17:f7:34:45:a2:bf: 31:b0:b2:52:b4:9e:55:f3:a9:60:46:2b:4c:d1:8c:24:14:11: e1:77:c9:81:3b:99:df:e4:4e:0c:e5:66:53:68:b7:5a:24:97: b3:ad:28:85:b2:79:d4:ea:ea:61:13:58:9f:59:e7:54:e3:2c: bb:12:90:2d:4c:b1:78:5f:8b:51:90:6b:06:77:87:46:42:44: 78:46:5e:dd:b9:c5:a7:2a:86:35:1f:4c:63:84:b8:da:9f:9e: 47:97:3e:29:48:7f:cc:70:b4:d0:5e:08:b0:78:f3:78:b0:4c: d0:bf:7c:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUwODIzMDUzNTM3WhcNMjUwODMwMDUzNTM3WjAYMRYwFAYD VQQDEw02OGE5NTMyOS02NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxntELyhSAkUDF9Ya0eh1UmMJ5TGl/dZ1qYLZTPklUZYPgD8ybISVJ20xK6oF EUKDA2xiNuB2ZAY4FgwejuAgg+CQx9cqzKyZ/ZmisxxJ5ImEqnV3qiEvfL/K8hx/ feigSsUD6iyUvWX4d9gJHt5AllybVxOf59XQUb9nqXLMbZTGJcD6OrbAv+FZolB+ MgGnuzKFcsBYWTLHc7RIK1I8iEilxHm27CPa3inS3fNiUOY0H3h/2Nt3oXJ+QJiX LlzRQ1fnnYPlIib8QJejxtJoKSuV58HakPJV3HQv8DiJV4ek+4nwNb512705Z9ak 1ZWtcfFYyI0cQk4JOrVnbuOQswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9u1zlj 8yUUNwOM2bhs4nPwE/b0MB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf1bObSXO0p65KSW0miUCdg0W5SpRKa+tIcVGCjJANbi+CkzuPO3VD W1vlWTnUEfkN9l+lY2sueXNabtn/jl6Jy3/U9gjx7jT/E2jZFdtSaY2A9cPTyih8 68paBLJEBDu/8oLuYHbQIaxXzixcsCzgi3nROQmSqXzcdrG+m5Y1AsJiqMR+/LDg mLAX9zRFor8xsLJStJ5V86lgRitM0YwkFBHhd8mBO5nf5E4M5WZTaLdaJJezrSiF snnU6uphE1ifWedU4yy7EpAtTLF4X4tRkGsGd4dGQkR4Rl7ducWnKoY1H0xjhLja n55Hlz4pSH/McLTQXgiwePN4sEzQv3w6 -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:00 2025 by rpki-client