$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json) Hash identifier: s7Nt2SwhIa0GwC1/gmNP2Gulc/67U45tDW0NFfwVZrI= Subject key identifier: 5E:A4:44:B4:D9:3D:42:81:8C:7D:78:82:98:52:13:03:4D:93:61:5E Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft Manifest number: 0200 Signing time: Sat 23 Aug 2025 02:27:52 +0000 Manifest this update: Sat 23 Aug 2025 02:27:51 +0000 Manifest next update: Sat 30 Aug 2025 02:27:51 +0000 Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: zbWABd2ZPWYcC111aw+s6vkXYKaaFwmaEbZU7hOxZfQ=) 2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Validity Not Before: Aug 23 02:27:51 2025 GMT Not After : Aug 30 02:27:51 2025 GMT Subject: CN=68a92727-48ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:1f:a5:a1:f6:84:b9:e1:23:e7:c7:cc:36: 82:50:d1:07:72:98:13:f3:c4:aa:30:f0:5e:3b:5d: fb:f5:1b:2e:c4:4c:28:37:00:ec:10:d1:56:94:21: 9a:93:03:a0:7f:84:18:ac:3a:29:b2:cb:45:48:67: 61:15:dd:b2:00:74:b3:b3:94:85:48:d5:dd:de:c2: c4:67:94:f4:f7:c9:aa:0d:67:9d:9c:0a:7e:61:12: 2f:a4:36:52:40:36:e3:32:bc:e1:cb:15:e8:53:56: d6:dc:0a:0a:7b:f7:aa:38:ab:c6:c7:95:0b:c3:ef: df:86:0d:ea:11:c6:7a:f9:23:77:7d:cf:05:02:67: 8b:1b:85:88:1d:28:44:bb:ad:fa:99:23:be:36:9f: 87:e9:ee:2d:17:51:2e:35:10:ab:32:f4:ca:1d:c7: 04:4a:34:84:e8:37:2b:75:c2:6b:62:a5:df:db:b2: ee:bc:64:4a:de:5b:9b:61:02:7a:83:91:24:90:a3: 2f:a0:84:aa:43:7e:00:d9:90:d3:d3:97:4e:28:41: 6d:83:f3:3a:00:d2:98:9d:38:ce:7a:e4:68:3c:2e: f3:7c:4f:f4:41:60:5d:46:e8:8c:8a:ed:b1:4e:c7: bf:0d:11:a7:21:5f:55:a8:1b:18:b4:96:93:5c:f4: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:44:B4:D9:3D:42:81:8C:7D:78:82:98:52:13:03:4D:93:61:5E X509v3 Authority Key Identifier: keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0a:0e:15:28:31:41:2c:97:a4:ba:04:b4:15:6a:f8:39:dc: 6e:9d:00:db:cb:7b:fc:e7:6f:f4:ee:3a:67:82:a6:9b:fa:3c: 4f:ad:23:74:0d:e2:c3:23:62:b6:e5:e2:47:10:ec:e2:83:b8: 1c:74:42:9e:31:9d:14:a3:96:32:22:b2:04:c6:32:7b:ac:f0: 3b:71:12:88:e7:bd:76:85:64:67:6f:24:e2:e7:9f:2d:86:95: 23:9b:d9:78:12:ef:f8:6d:e0:d0:c6:50:d3:97:8c:bf:e3:e4: 8c:61:ae:36:5e:1f:c4:b1:25:e4:75:03:55:6e:85:3b:5e:71: 18:e6:bd:38:96:38:96:bd:b9:a6:0a:e0:51:14:59:38:72:c7: 42:a7:67:9f:e6:10:19:4d:f1:39:fb:8b:98:e8:a9:27:53:1b: 75:be:8a:b3:71:3e:22:6a:0d:9d:3f:c7:ea:92:95:86:5e:d3: cc:01:e2:c3:ce:b8:8f:40:b9:50:13:71:da:77:6b:a4:cc:96: 26:a6:36:1c:7e:df:d8:4a:5a:1b:cb:8d:24:89:cc:1c:09:d6: 4c:6f:ed:44:25:03:c7:a4:98:cc:b3:a1:69:dd:fc:7b:77:a6: 84:6e:e2:55:0f:24:bc:78:37:53:b5:c2:91:4f:ef:31:b0:bc: 10:aa:3d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC OTNBNTk1MjEwHhcNMjUwODIzMDIyNzUxWhcNMjUwODMwMDIyNzUxWjAYMRYwFAYD VQQDEw02OGE5MjcyNy00OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq00fpaH2hLnhI+fHzDaCUNEHcpgT88SqMPBeO1379RsuxEwoNwDsENFWlCGa kwOgf4QYrDopsstFSGdhFd2yAHSzs5SFSNXd3sLEZ5T098mqDWednAp+YRIvpDZS QDbjMrzhyxXoU1bW3AoKe/eqOKvGx5ULw+/fhg3qEcZ6+SN3fc8FAmeLG4WIHShE u636mSO+Np+H6e4tF1EuNRCrMvTKHccESjSE6DcrdcJrYqXf27LuvGRK3lubYQJ6 g5EkkKMvoISqQ34A2ZDT05dOKEFtg/M6ANKYnTjOeuRoPC7zfE/0QWBdRuiMiu2x Tse/DRGnIV9VqBsYtJaTXPTC5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6kRLTZ PUKBjH14gphSEwNNk2FeMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Cg4VKDFBLJekugS0FWr4OdxunQDby3v852/07jpngqab+jxPrSN0 DeLDI2K25eJHEOzig7gcdEKeMZ0Uo5YyIrIExjJ7rPA7cRKI5712hWRnbyTi558t hpUjm9l4Eu/4beDQxlDTl4y/4+SMYa42Xh/EsSXkdQNVboU7XnEY5r04ljiWvbmm CuBRFFk4csdCp2ef5hAZTfE5+4uY6KknUxt1voqzcT4iag2dP8fqkpWGXtPMAeLD zriPQLlQE3Had2ukzJYmpjYcft/YSloby40kicwcCdZMb+1EJQPHpJjMs6Fp3fx7 d6aEbuJVDyS8eDdTtcKRT+8xsLwQqj1F -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:08 2025 by rpki-client