$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: giA1mwscnsogkvbsh2D2ToQV4bXhx/k3/kvteUzFlPg= Subject key identifier: F8:0E:F4:03:D6:43:FB:DF:9B:A1:ED:26:C4:F2:1F:6A:B6:CA:57:9F Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 3D Signing time: Sat 23 Aug 2025 07:46:31 +0000 Manifest this update: Sat 23 Aug 2025 07:46:30 +0000 Manifest next update: Sat 30 Aug 2025 07:46:30 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: kIoOhxh0cCk6FPIjrvMEyjD6ZBuIM0w9D97vmHSo8Z8=) 2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) 3: 7F09FC70323611F0AB3FA70BC4F9AE02.roa (hash: e5UjmqUjbahnofPOK94PTOrYf4VsadI2aqpgREwVS7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Aug 23 07:46:30 2025 GMT Not After : Aug 30 07:46:30 2025 GMT Subject: CN=68a971d6-0cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:03:78:99:ab:ee:2e:07:9c:5b:33:96:45: b2:b1:02:3d:58:5d:d9:b4:1c:cc:d3:6f:1d:f8:e6: 6e:3c:bb:c1:ab:ef:60:4f:00:65:16:cd:ca:7f:46: a4:76:99:21:c4:36:59:54:b8:52:69:72:01:8b:2e: ad:9f:f6:5c:6a:25:be:b9:63:fd:1a:2d:24:15:3e: fd:29:bc:0d:33:0d:a1:0b:11:68:35:f0:aa:01:33: 7f:bf:c9:0f:af:58:d8:69:69:ea:6b:50:7d:25:e2: fd:01:fb:38:8d:67:79:ea:1a:90:a8:1f:85:96:aa: 48:4a:74:64:03:be:16:d3:f1:e6:73:c1:71:cc:c9: 09:70:72:ed:d0:ad:ff:92:10:cf:3d:c8:48:6c:e0: 98:ae:b8:b9:7a:1a:ff:02:4e:1f:e1:5e:10:51:6b: 63:46:7e:2b:8e:d5:9c:8b:f5:5a:87:de:e0:76:a1: 75:3f:a8:b5:62:4e:af:0d:81:25:33:ea:02:b3:5e: 52:8a:3c:99:42:93:c7:64:3d:45:0d:b3:84:14:60: ad:0d:df:fa:c4:55:e7:a6:82:21:eb:f8:e8:71:3a: 7b:72:4d:43:4d:63:c5:d6:bc:49:35:24:2c:92:1e: bd:b9:bb:7b:6d:99:de:70:8c:60:1d:f2:06:5d:30: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0E:F4:03:D6:43:FB:DF:9B:A1:ED:26:C4:F2:1F:6A:B6:CA:57:9F X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1d:42:65:7a:16:8f:a0:ef:86:18:a2:17:89:8b:b9:35:6f: 75:ff:ce:55:8d:af:b2:a0:5d:47:7f:c1:44:50:dc:3a:e8:5c: b1:24:16:bb:14:b9:3d:7b:4c:d5:e0:25:b3:db:2f:2d:3a:19: 20:f6:cc:1a:28:6a:84:02:ec:e2:36:82:c2:63:13:fc:97:3f: a9:03:c0:de:18:17:27:f5:8e:3b:81:bf:41:e4:3d:2d:2b:8e: f6:ed:b0:32:3d:7c:fc:fa:ee:87:38:67:04:76:69:8a:0b:4b: 15:dc:12:91:bf:c6:b9:e9:df:51:d7:c0:38:71:f6:76:5f:07: 46:9c:9d:6c:fc:24:be:5b:bb:c9:9d:30:1d:d5:57:35:f9:e5: aa:4d:67:5f:c2:6b:0d:d6:d5:9d:21:7b:7c:92:bf:19:f4:ed: 67:a9:d6:1e:c3:12:31:cc:49:4f:0d:37:e3:e5:b7:6e:97:af: 74:25:31:2b:d6:0a:59:75:ab:10:f1:61:b7:eb:5a:bc:48:47: fc:b0:c0:70:a1:5b:6e:4b:cf:63:a7:2e:d0:92:f5:a8:bd:d0: db:59:88:8c:34:3f:1a:ab:c0:86:e0:82:08:85:84:aa:7d:fd: c9:57:14:65:4f:00:6c:bf:12:c8:ac:46:5f:51:84:b5:0e:f3: 75:c0:0a:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ5QjExMC8GA1UEBRMoN0YwMzk3QzZBOTRFNTI1OTc2ODM0QkJGRDU4MDJGMTVC Nzk1RkI4RTAeFw0yNTA4MjMwNzQ2MzBaFw0yNTA4MzAwNzQ2MzBaMBgxFjAUBgNV BAMTDTY4YTk3MWQ2LTBjZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHVAN4mavuLgecWzOWRbKxAj1YXdm0HMzTbx345m48u8Gr72BPAGUWzcp/RqR2 mSHENllUuFJpcgGLLq2f9lxqJb65Y/0aLSQVPv0pvA0zDaELEWg18KoBM3+/yQ+v WNhpaeprUH0l4v0B+ziNZ3nqGpCoH4WWqkhKdGQDvhbT8eZzwXHMyQlwcu3Qrf+S EM89yEhs4JiuuLl6Gv8CTh/hXhBRa2NGfiuO1ZyL9VqH3uB2oXU/qLViTq8NgSUz 6gKzXlKKPJlCk8dkPUUNs4QUYK0N3/rEVeemgiHr+OhxOntyTUNNY8XWvEk1JCyS Hr25u3ttmd5wjGAd8gZdMGylAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+A70A9ZD +9+boe0mxPIfarbKV58wHwYDVR0jBBgwFoAUfwOXxqlOUll2g0u/1YAvFbeV+44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDlCL0IyQTU3N0MyMjc0 NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZndPWHhxbE9VbGwyZzB1XzFZQXZGYmVWLTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDlCL0IyQTU3N0MyMjc0NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxs MmcwdV8xWUF2RmJlVi00NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYdQmV6Fo+g74YYoheJi7k1b3X/zlWNr7KgXUd/wURQ3DroXLEkFrsU uT17TNXgJbPbLy06GSD2zBooaoQC7OI2gsJjE/yXP6kDwN4YFyf1jjuBv0HkPS0r jvbtsDI9fPz67oc4ZwR2aYoLSxXcEpG/xrnp31HXwDhx9nZfB0acnWz8JL5bu8md MB3VVzX55apNZ1/Caw3W1Z0he3ySvxn07Wep1h7DEjHMSU8NN+Plt26Xr3QlMSvW Cll1qxDxYbfrWrxIR/ywwHChW25Lz2OnLtCS9ai90NtZiIw0PxqrwIbgggiFhKp9 /clXFGVPAGy/EsisRl9RhLUO83XACtQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:34 2025 by rpki-client