$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: 2qNi3sKh3G0Ge2TkuooIQL65JWr1FVK+CxdrkwvV+Vg= Subject key identifier: A2:35:C6:97:E6:A2:43:F8:9B:63:F1:F4:61:F1:1F:C9:5D:7B:01:35 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 2399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2378 Signing time: Fri 22 Aug 2025 15:52:41 +0000 Manifest this update: Fri 22 Aug 2025 15:52:41 +0000 Manifest next update: Fri 29 Aug 2025 15:52:41 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: vTtXp7pHtmqQFac4qJDr0iF4QNXEWOeZfE/vXcUkNSQ=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9113 (0x2399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Aug 22 15:52:41 2025 GMT Not After : Aug 29 15:52:41 2025 GMT Subject: CN=68a89249-ce6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:45:f2:42:9f:ba:54:e1:0d:42:82:23:94: a2:44:f6:bf:70:b2:9c:b2:f6:5f:e0:7a:22:08:29: 7f:79:aa:9c:59:7d:f1:41:9b:1e:bb:6b:c7:37:15: 21:fb:b6:3d:df:91:a3:59:ec:8f:21:2f:3a:81:8f: 89:eb:a7:ff:07:e4:1c:1b:5f:3b:c3:7c:7d:83:95: 35:11:2f:60:32:d2:3a:21:3b:c6:7d:22:8c:89:ac: f2:0d:4b:68:a8:4d:39:16:15:b9:af:75:c0:43:94: e1:60:b1:5a:8f:09:33:c7:ab:a8:eb:67:40:4b:dd: 65:09:b4:3f:30:6a:c9:d9:f7:de:55:80:59:44:e0: db:e5:4b:94:09:92:8f:58:fd:b5:63:bc:05:e3:6b: 02:de:be:f8:06:4a:ac:1f:bb:5b:6c:35:cb:03:af: 12:cb:08:36:01:ba:6e:48:e7:f2:8d:b8:cc:22:eb: c7:6a:40:bf:a7:86:c1:b8:e7:94:93:df:4d:28:c8: 20:cb:34:11:61:be:0a:77:df:fd:1b:5a:07:76:02: ab:22:04:fd:8d:23:bd:3e:b4:1c:87:4c:61:55:70: 01:6c:a4:91:7f:95:fb:7e:3c:35:e0:d3:02:1c:b6: ff:e6:4a:8b:e4:9e:7b:df:07:fc:13:c2:f0:ab:07: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:C6:97:E6:A2:43:F8:9B:63:F1:F4:61:F1:1F:C9:5D:7B:01:35 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3c:b3:3b:af:82:e8:13:f0:d8:f7:05:e0:f1:01:b5:c8:25: 1c:60:c5:76:d9:60:4f:8a:da:54:64:b8:f4:e3:7b:2e:19:de: 31:f1:6b:89:eb:99:35:29:7c:06:6d:3e:81:0a:4d:57:14:2b: 2a:87:8c:c4:b0:60:f8:b0:90:16:a5:c9:61:18:f0:f7:ca:32: 90:43:6e:64:fd:7d:10:c6:ca:a9:06:58:72:7b:4f:e8:9a:5c: 29:27:81:ef:48:78:da:4a:7b:b8:1d:d8:8d:54:25:42:0a:e9: 94:f9:dc:f4:ab:ba:01:87:34:75:1c:6a:bc:4a:62:2f:12:18: 63:4b:c4:5e:fb:c7:db:ac:52:2d:4d:51:4b:26:b1:15:97:71: d0:0c:20:e0:37:9e:fa:63:df:74:fd:db:5b:19:ff:52:78:10: 93:37:a8:5f:53:8c:55:28:08:07:51:a4:d4:84:ff:f2:68:3b: b9:15:72:0c:df:9c:23:26:f8:b0:ed:5d:e1:fe:3d:f4:c4:a5: b6:be:3c:0e:b6:5d:8c:84:21:c6:6d:e8:e2:a6:f4:62:c0:af: 55:49:f2:b6:eb:ed:42:57:6b:26:88:18:84:fb:72:e2:58:33: 70:e0:83:e4:18:15:98:5b:50:1d:93:16:c6:1d:6c:b6:58:af: 64:1a:d6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwODIyMTU1MjQxWhcNMjUwODI5MTU1MjQxWjAYMRYwFAYD VQQDEw02OGE4OTI0OS1jZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu49F8kKfulThDUKCI5SiRPa/cLKcsvZf4HoiCCl/eaqcWX3xQZseu2vHNxUh +7Y935GjWeyPIS86gY+J66f/B+QcG187w3x9g5U1ES9gMtI6ITvGfSKMiazyDUto qE05FhW5r3XAQ5ThYLFajwkzx6uo62dAS91lCbQ/MGrJ2ffeVYBZRODb5UuUCZKP WP21Y7wF42sC3r74BkqsH7tbbDXLA68Sywg2AbpuSOfyjbjMIuvHakC/p4bBuOeU k99NKMggyzQRYb4Kd9/9G1oHdgKrIgT9jSO9PrQch0xhVXABbKSRf5X7fjw14NMC HLb/5kqL5J573wf8E8LwqwdYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI1xpfm okP4m2Px9GHxH8ldewE1MB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPLM7r4LoE/DY9wXg8QG1yCUcYMV22WBPitpUZLj043suGd4x8WuJ 65k1KXwGbT6BCk1XFCsqh4zEsGD4sJAWpclhGPD3yjKQQ25k/X0QxsqpBlhye0/o mlwpJ4HvSHjaSnu4HdiNVCVCCumU+dz0q7oBhzR1HGq8SmIvEhhjS8Re+8fbrFIt TVFLJrEVl3HQDCDgN576Y990/dtbGf9SeBCTN6hfU4xVKAgHUaTUhP/yaDu5FXIM 35wjJviw7V3h/j30xKW2vjwOtl2MhCHGbejipvRiwK9VSfK26+1CV2smiBiE+3Li WDNw4IPkGBWYW1AdkxbGHWy2WK9kGtZj -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:22 2025 by rpki-client