$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: 7NldoAtREfx+8921BgWjwdr7oIEs8O3VxeLFgKWvpfc= Subject key identifier: F5:39:86:75:F1:56:22:A4:C6:8A:3F:63:98:AB:F8:70:F1:46:00:9E Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 05B0 Signing time: Fri 22 Aug 2025 23:22:54 +0000 Manifest this update: Fri 22 Aug 2025 23:22:53 +0000 Manifest next update: Fri 29 Aug 2025 23:22:53 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 6dZoJpCI2Grtq6/EHztMa+AhhljuBfLmfzYjb+saYqs=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Aug 22 23:22:53 2025 GMT Not After : Aug 29 23:22:53 2025 GMT Subject: CN=68a8fbcd-f308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:68:e2:1d:ae:86:6d:0c:70:4d:da:46:ff: 8b:b0:88:8a:de:11:c9:6d:f8:0d:07:17:66:a6:c9: 23:14:83:4a:9b:e9:e7:c0:cc:6a:a6:ea:eb:8d:ba: 3c:4a:b2:d2:ee:ab:4d:42:17:b6:56:e0:7a:f3:47: 50:a6:7b:5a:b9:e6:7a:08:2a:37:36:42:2d:26:42: 9d:66:c5:8b:90:13:36:c3:da:24:b1:09:5f:93:92: 78:58:3f:c8:d3:b5:74:8c:5e:b7:5a:4b:29:f0:93: 78:56:21:6d:fb:06:81:e4:a6:8e:f7:6b:d0:81:6f: f9:72:36:87:85:ba:d5:49:22:6c:02:c4:88:91:bb: 23:67:6a:a3:fe:59:bf:00:a5:aa:35:64:b0:53:b5: c9:e4:2b:0a:1a:3a:05:65:75:a1:fe:22:5e:05:21: 5d:39:11:2b:24:c4:bc:35:87:d7:bd:d8:c6:ce:05: c6:9e:01:67:f5:f2:bf:ef:4f:cf:98:cd:26:c7:ca: b7:ed:83:9c:0c:e6:2a:e1:80:ab:4d:6f:ab:ca:55: 1e:12:78:ef:6c:9c:7e:ec:f1:f3:28:32:5e:b2:57: e6:a6:8e:e5:02:0b:a7:97:b6:b2:e2:5d:66:ca:9b: bc:56:22:e7:0c:ec:ca:3b:30:be:47:f1:8c:56:44: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:39:86:75:F1:56:22:A4:C6:8A:3F:63:98:AB:F8:70:F1:46:00:9E X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fe:ff:1e:78:4f:ad:5a:ca:29:40:81:41:43:0c:a7:16:71: a2:ae:60:18:5d:8d:e0:2f:d6:43:27:27:c3:6d:83:d6:c1:8e: 98:d7:20:ce:ae:aa:ae:d9:d9:76:d6:d7:cd:a4:53:93:9b:d6: a2:38:42:2a:aa:30:22:cc:a3:a9:2f:4f:19:00:e6:a4:39:41: ec:9e:98:ad:fc:61:ae:a7:11:5a:9c:03:07:a5:97:dd:89:54: 8b:bc:3f:59:09:b0:4d:19:dd:81:86:d1:65:e3:01:7e:5f:76: 38:e1:3b:10:ed:d2:12:6c:66:b7:a8:f9:a6:c2:a2:ea:ea:9a: 07:4d:5a:15:38:8d:c8:c5:80:79:1c:63:05:17:f5:62:ad:9e: 7d:ac:43:da:9d:68:7a:c2:c6:b5:29:77:dd:d9:9e:f4:d7:27: 86:93:97:03:f0:17:ef:90:ca:da:59:e0:4b:72:e3:96:b3:a3: d2:b4:90:25:5c:12:fa:78:0b:2c:ee:f9:6d:cd:39:9f:7f:bd: 12:90:56:6d:58:e8:64:9b:a7:4d:3e:43:58:b9:a8:2b:55:b6: fb:ec:1d:ec:b6:6f:d9:b0:f4:b8:6a:5d:76:c6:cd:05:57:0d: 37:01:97:c2:f9:d8:6d:2e:df:ce:04:04:10:90:9e:55:39:20: f6:2d:44:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwODIyMjMyMjUzWhcNMjUwODI5MjMyMjUzWjAYMRYwFAYD VQQDEw02OGE4ZmJjZC1mMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz39o4h2uhm0McE3aRv+LsIiK3hHJbfgNBxdmpskjFINKm+nnwMxqpurrjbo8 SrLS7qtNQhe2VuB680dQpntaueZ6CCo3NkItJkKdZsWLkBM2w9oksQlfk5J4WD/I 07V0jF63Wksp8JN4ViFt+waB5KaO92vQgW/5cjaHhbrVSSJsAsSIkbsjZ2qj/lm/ AKWqNWSwU7XJ5CsKGjoFZXWh/iJeBSFdORErJMS8NYfXvdjGzgXGngFn9fK/70/P mM0mx8q37YOcDOYq4YCrTW+rylUeEnjvbJx+7PHzKDJeslfmpo7lAgunl7ay4l1m ypu8ViLnDOzKOzC+R/GMVkS34QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU5hnXx ViKkxoo/Y5ir+HDxRgCeMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG/v8eeE+tWsopQIFBQwynFnGirmAYXY3gL9ZDJyfDbYPWwY6Y1yDO rqqu2dl21tfNpFOTm9aiOEIqqjAizKOpL08ZAOakOUHsnpit/GGupxFanAMHpZfd iVSLvD9ZCbBNGd2BhtFl4wF+X3Y44TsQ7dISbGa3qPmmwqLq6poHTVoVOI3IxYB5 HGMFF/VirZ59rEPanWh6wsa1KXfd2Z701yeGk5cD8BfvkMraWeBLcuOWs6PStJAl XBL6eAss7vltzTmff70SkFZtWOhkm6dNPkNYuagrVbb77B3stm/ZsPS4al12xs0F Vw03AZfC+dhtLt/OBAQQkJ5VOSD2LUTT -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:43 2025 by rpki-client