$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: Y2COUJX9xXPblg7+vPueK6279ra7Ww/l4diMYnfcG7Q= Subject key identifier: 1D:0C:95:29:61:39:59:0F:61:7B:90:74:A6:79:23:A9:74:EB:30:93 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0472 Signing time: Sat 23 Aug 2025 00:22:36 +0000 Manifest this update: Sat 23 Aug 2025 00:22:36 +0000 Manifest next update: Sat 30 Aug 2025 00:22:36 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: q2Ssb98jgnnxP/oK+qcPWhd9WgWVVL/eYezPWqTwoj0=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Aug 23 00:22:36 2025 GMT Not After : Aug 30 00:22:36 2025 GMT Subject: CN=68a909cc-312e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:63:49:dd:8b:c2:56:23:05:04:14:d8:c5: d0:52:fc:7c:32:67:4f:9b:32:71:c0:75:32:6f:b3: 9b:62:19:bc:67:63:83:81:8d:af:24:66:d3:a0:31: 7f:08:94:e7:56:d4:75:9d:74:c5:45:a2:96:2e:9d: cc:a1:4c:12:e9:19:63:61:e8:f6:e3:cc:54:46:33: 54:aa:c6:12:15:4a:25:c4:89:47:05:f2:8b:de:fe: f9:39:d6:b8:37:b4:0f:6b:0e:b5:f1:64:82:53:65: 50:e6:a1:8e:f1:bc:8a:f2:7a:d9:57:f4:93:4d:e5: 4a:53:94:1e:7a:27:fc:cd:20:0e:9b:db:1c:c2:9e: dc:59:eb:27:2c:52:05:63:8a:6b:96:75:bb:c1:d7: 78:c3:cf:c2:10:12:eb:f2:90:01:f7:7f:97:b8:32: 83:9e:0f:55:a8:5f:04:b2:18:cc:40:ad:2a:2f:6c: 0c:d6:c3:19:02:39:d6:66:83:4f:b8:f1:c0:c6:7d: ec:98:a4:35:ed:7d:fe:e1:33:72:f8:d7:65:7e:b0: 76:ef:f5:bd:bc:a6:55:03:54:25:9f:7c:39:d0:6c: 81:35:5d:e2:a3:63:ba:3e:20:bf:b9:ac:22:fd:51: e5:2d:40:01:4b:77:63:22:7a:e7:9d:f6:b2:5a:8c: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:95:29:61:39:59:0F:61:7B:90:74:A6:79:23:A9:74:EB:30:93 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:79:ad:0f:43:c2:68:43:99:2a:5d:80:a7:f3:82:98:41: 97:a0:58:00:a6:eb:2a:68:c5:3f:41:4d:43:f0:57:5f:0e:48: 12:d9:62:24:fb:05:62:81:a9:91:c4:db:77:36:39:48:65:64: 53:aa:95:99:51:a6:ab:d8:6d:ac:46:21:0e:72:64:1d:3d:bd: d7:87:bd:a5:d5:ac:fc:95:6f:cf:7b:c3:08:47:87:d8:5a:b1: 05:c8:8c:a9:50:ba:92:e9:e0:7c:b4:1c:6e:1b:87:82:99:1e: 93:11:2f:26:35:5d:75:05:64:0c:09:33:6f:62:b2:50:d5:17: 8e:29:f8:43:e5:3e:85:d4:e8:34:6f:be:e5:66:32:b0:2b:17: 92:8d:2b:f8:06:a2:0e:89:fb:b3:4b:44:c5:f1:00:6f:46:f9: 34:76:18:66:31:03:6f:72:b5:a0:16:47:6e:e0:26:a3:fe:73: 07:50:b7:68:a5:91:dd:65:f5:81:c5:6b:5b:4b:97:6b:d7:d5: ec:60:ec:26:49:e9:3b:00:bd:b1:1d:28:70:da:dd:ae:96:04: 50:e9:b7:58:9b:04:a3:24:a9:9f:fc:48:a7:3c:e1:5e:64:bc: df:4b:c0:48:17:2a:28:78:9e:4f:9e:36:9f:31:97:94:fb:44: be:99:18:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUwODIzMDAyMjM2WhcNMjUwODMwMDAyMjM2WjAYMRYwFAYD VQQDEw02OGE5MDljYy0zMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGVjSd2LwlYjBQQU2MXQUvx8MmdPmzJxwHUyb7ObYhm8Z2ODgY2vJGbToDF/ CJTnVtR1nXTFRaKWLp3MoUwS6RljYej248xURjNUqsYSFUolxIlHBfKL3v75Oda4 N7QPaw618WSCU2VQ5qGO8byK8nrZV/STTeVKU5Qeeif8zSAOm9scwp7cWesnLFIF Y4prlnW7wdd4w8/CEBLr8pAB93+XuDKDng9VqF8EshjMQK0qL2wM1sMZAjnWZoNP uPHAxn3smKQ17X3+4TNy+NdlfrB27/W9vKZVA1Qln3w50GyBNV3io2O6PiC/uawi /VHlLUABS3djInrnnfayWoyf0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0MlSlh OVkPYXuQdKZ5I6l06zCTMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABgXmtD0PCaEOZKl2Ap/OCmEGXoFgApusqaMU/QU1D8FdfDkgS2WIk +wVigamRxNt3NjlIZWRTqpWZUaar2G2sRiEOcmQdPb3Xh72l1az8lW/Pe8MIR4fY WrEFyIypULqS6eB8tBxuG4eCmR6TES8mNV11BWQMCTNvYrJQ1ReOKfhD5T6F1Og0 b77lZjKwKxeSjSv4BqIOifuzS0TF8QBvRvk0dhhmMQNvcrWgFkdu4Caj/nMHULdo pZHdZfWBxWtbS5dr19XsYOwmSek7AL2xHShw2t2ulgRQ6bdYmwSjJKmf/EinPOFe ZLzfS8BIFyooeJ5PnjafMZeU+0S+mRhV -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:47 2025 by rpki-client