$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: uvNEGvXLTH6vNXtUSqudp68fOR2mHydgI0luhWrtyw4= Subject key identifier: A0:85:F5:4C:63:DE:93:A0:85:F7:E5:67:3C:32:1D:C2:0C:CF:DF:02 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 0330 Signing time: Sat 23 Aug 2025 01:21:22 +0000 Manifest this update: Sat 23 Aug 2025 01:21:21 +0000 Manifest next update: Sat 30 Aug 2025 01:21:21 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: nV+dUpGXFj4Q9kcf/j3kDx6ssJ3EnFwEKwcavCjipNM=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Aug 23 01:21:21 2025 GMT Not After : Aug 30 01:21:21 2025 GMT Subject: CN=68a91792-ab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:84:a0:53:81:9e:4f:82:61:e0:ff:d7:6a: 72:55:0a:c0:5e:e1:57:f9:d6:9b:6c:4d:3e:87:62: f4:b8:58:92:b4:b1:67:2b:c6:0a:39:90:4d:b8:ba: a9:7f:1d:04:61:e7:e1:a4:0b:61:c6:a0:ec:da:00: 78:1f:a9:92:1c:1f:e6:ee:88:ed:50:e4:76:ca:da: f2:bd:93:38:da:74:99:06:f0:9c:db:75:80:1e:b9: 87:9c:91:d6:39:81:c3:6b:a1:63:63:79:0b:c3:f7: 2e:2a:b1:8f:a9:ed:0d:c6:4e:07:b0:df:ba:39:5a: e1:9b:cd:7d:5b:c8:9a:00:b9:eb:98:45:6f:72:5f: 2f:9c:8b:be:f6:57:be:5f:ae:c7:0b:ad:fc:6e:65: eb:49:32:41:45:bc:7b:15:59:99:b3:49:77:1e:9b: 63:97:62:ae:5e:b5:d3:0a:5d:e1:3a:b2:df:3c:a9: ee:5a:32:f7:26:2d:76:e6:54:9f:21:f3:db:f1:1b: 1d:3e:ef:91:ae:f4:b3:cd:ff:f9:04:11:28:74:33: 6a:ce:09:d4:67:58:68:85:87:b9:e9:33:c5:b1:9f: b6:8d:eb:1d:64:2d:ec:b8:69:ef:ef:a8:40:29:5d: 94:6d:b3:6d:4f:d7:db:81:96:70:5b:6a:14:7d:b3: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:85:F5:4C:63:DE:93:A0:85:F7:E5:67:3C:32:1D:C2:0C:CF:DF:02 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:75:95:91:11:2e:8c:8e:45:ae:39:a2:28:72:ce:1a:a8: ef:36:19:70:f4:57:20:ef:59:27:51:0c:a1:a5:d6:53:dd:0f: 41:6e:97:d9:c9:b9:58:e1:43:91:46:a0:e1:ec:b1:01:0e:e7: 5b:7f:06:5b:d7:3c:86:c8:ff:ef:19:40:49:5e:91:d2:d5:bd: a1:94:06:6b:47:3b:c8:b4:bb:2f:3c:5c:8b:ab:5d:95:83:09: 41:ed:5e:3b:56:a9:9f:0f:0e:63:a6:fa:f2:d7:c8:38:dc:52: 46:a4:13:83:31:24:d5:11:60:6c:97:4b:43:c7:59:67:3a:34: 28:3f:06:68:87:b6:d0:e9:ad:36:8c:cd:75:5f:9b:c3:0b:6f: 77:aa:50:4a:ed:fd:ee:d9:ca:a2:59:b6:e0:02:e8:ca:f2:a3: a8:fc:9c:b7:ec:4a:fe:ee:e5:9b:5a:e8:94:4c:b9:c2:e5:d7: b3:5d:55:6a:b0:b8:03:f2:34:38:d5:b4:d0:a9:c9:d8:b1:05: 6f:32:8c:fa:f6:d1:17:58:4e:0b:f0:8d:dd:76:8e:62:d2:ab: be:b3:76:cb:7b:5c:11:c7:00:95:ef:1e:f8:91:d8:0f:ea:29: cb:87:30:cc:e5:c5:63:57:84:b7:d4:10:1b:df:00:3a:dd:03: 37:9d:9c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUwODIzMDEyMTIxWhcNMjUwODMwMDEyMTIxWjAYMRYwFAYD VQQDEw02OGE5MTc5Mi1hYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxciEoFOBnk+CYeD/12pyVQrAXuFX+dabbE0+h2L0uFiStLFnK8YKOZBNuLqp fx0EYefhpAthxqDs2gB4H6mSHB/m7ojtUOR2ytryvZM42nSZBvCc23WAHrmHnJHW OYHDa6FjY3kLw/cuKrGPqe0Nxk4HsN+6OVrhm819W8iaALnrmEVvcl8vnIu+9le+ X67HC638bmXrSTJBRbx7FVmZs0l3Hptjl2KuXrXTCl3hOrLfPKnuWjL3Ji125lSf IfPb8RsdPu+RrvSzzf/5BBEodDNqzgnUZ1hohYe56TPFsZ+2jesdZC3suGnv76hA KV2UbbNtT9fbgZZwW2oUfbOdMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCF9Uxj 3pOghfflZzwyHcIMz98CMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2r3WVkREujI5FrjmiKHLOGqjvNhlw9Fcg71knUQyhpdZT3Q9BbpfZ yblY4UORRqDh7LEBDudbfwZb1zyGyP/vGUBJXpHS1b2hlAZrRzvItLsvPFyLq12V gwlB7V47VqmfDw5jpvry18g43FJGpBODMSTVEWBsl0tDx1lnOjQoPwZoh7bQ6a02 jM11X5vDC293qlBK7f3u2cqiWbbgAujK8qOo/Jy37Er+7uWbWuiUTLnC5dezXVVq sLgD8jQ41bTQqcnYsQVvMoz69tEXWE4L8I3ddo5i0qu+s3bLe1wRxwCV7x74kdgP 6inLhzDM5cVjV4S31BAb3wA63QM3nZyd -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:43 2025 by rpki-client