$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: E8slMdZOFHTuUgpNKGMfE232R8rrx2lIzyUAyEdM8MY= Subject key identifier: 70:08:28:E5:55:68:50:F4:18:D1:F6:81:4E:1C:03:3F:9A:64:A3:23 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 0172 Signing time: Sat 23 Aug 2025 03:53:43 +0000 Manifest this update: Sat 23 Aug 2025 03:53:42 +0000 Manifest next update: Sat 30 Aug 2025 03:53:42 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: mcEBI2hz0+Ja0GvdtddiHOKjZDiAIc7sg3fDLNap4lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Aug 23 03:53:42 2025 GMT Not After : Aug 30 03:53:42 2025 GMT Subject: CN=68a93b46-bf34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:f0:bb:ba:72:34:dd:0d:42:2b:51:bb:c4: 19:3d:11:d7:aa:fa:60:8e:c0:90:00:2e:f8:5e:33: 2c:48:66:f0:35:09:24:51:53:bc:fa:61:0a:6c:fb: 60:d3:9d:11:cc:d7:8d:d9:ee:5d:eb:8f:4d:10:c2: d5:13:5e:97:fb:d0:9a:94:ff:6f:5e:8f:60:ef:f8: c4:ab:8d:bc:e5:d2:5f:5f:0a:35:48:7b:a1:39:fc: 49:2c:ba:25:09:00:66:ab:c5:d8:79:db:6d:2d:fa: 06:9d:b1:3d:9a:1b:be:a4:6a:6f:79:d1:a7:cf:1f: 19:a5:5b:a8:71:98:8d:d8:bf:4c:89:d9:e0:6c:73: 3a:98:99:9a:30:03:b4:e7:df:0d:15:3f:fd:70:93: 8b:47:00:e7:db:a6:98:54:34:80:e0:4b:5c:5a:1a: 6f:0c:7e:c0:75:3d:f1:39:d1:52:76:09:5b:9c:51: 4a:e3:ce:5d:b5:e6:c7:66:33:69:e1:3c:e9:85:a0: c7:1a:0b:63:5a:33:75:e1:ed:f0:2b:b8:72:f5:bf: 43:aa:1b:8d:4e:19:1e:8f:d4:5c:c7:6e:f4:55:ee: e6:54:08:57:ca:e8:58:db:d0:b8:9b:71:72:71:02: a8:6c:28:82:09:1d:46:b4:ce:62:c1:22:d4:1c:a9: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:28:E5:55:68:50:F4:18:D1:F6:81:4E:1C:03:3F:9A:64:A3:23 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ef:91:76:90:1f:f1:b8:41:dc:2a:08:34:b7:e7:b3:1a:25: ac:cf:b6:17:1f:0e:09:5d:13:3e:54:cd:b0:4c:b8:57:b4:b8: bd:30:55:ff:c9:0b:d5:31:d2:be:f1:98:5c:b1:cb:59:88:e3: 3f:e5:ba:30:18:87:d8:ac:10:62:b0:ff:ab:a1:5b:1f:1b:f7: ec:d7:16:0d:ff:fe:96:7b:bb:d7:71:f7:93:03:d0:10:6e:bf: b5:44:b4:20:a4:25:d6:0f:8d:70:31:54:d9:b0:39:45:14:e9: 76:93:e7:7b:28:50:7d:d8:9c:6f:4b:e0:e4:bf:f0:ce:d0:56: 0c:3d:4c:31:77:d9:ee:3c:8a:8a:5c:cb:69:ee:c1:23:15:c0: 14:96:69:5f:01:eb:7e:48:b8:3c:d4:19:b2:f7:cd:75:d1:70: 6e:76:6e:50:6b:19:5a:6a:f8:c7:61:8c:43:41:07:ba:27:8a: 5a:c8:e0:ce:c2:fb:9e:19:f4:23:77:b8:f8:8f:9c:f4:7c:ee: de:75:bc:dc:cc:44:3f:7c:b6:9c:ad:52:f8:fa:7e:97:8f:e5: df:94:62:9c:59:75:c8:f3:6b:b8:40:59:03:2e:8f:71:33:ee: 76:04:b2:0c:02:12:c0:31:80:82:10:54:c7:52:cc:aa:ce:39: 66:1c:f4:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUwODIzMDM1MzQyWhcNMjUwODMwMDM1MzQyWjAYMRYwFAYD VQQDEw02OGE5M2I0Ni1iZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOfwu7pyNN0NQitRu8QZPRHXqvpgjsCQAC74XjMsSGbwNQkkUVO8+mEKbPtg 050RzNeN2e5d649NEMLVE16X+9CalP9vXo9g7/jEq4285dJfXwo1SHuhOfxJLLol CQBmq8XYedttLfoGnbE9mhu+pGpvedGnzx8ZpVuocZiN2L9MidngbHM6mJmaMAO0 598NFT/9cJOLRwDn26aYVDSA4EtcWhpvDH7AdT3xOdFSdglbnFFK485dtebHZjNp 4TzphaDHGgtjWjN14e3wK7hy9b9DqhuNThkej9Rcx270Ve7mVAhXyuhY29C4m3Fy cQKobCiCCR1GtM5iwSLUHKnVcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAIKOVV aFD0GNH2gU4cAz+aZKMjMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ75F2kB/xuEHcKgg0t+ezGiWsz7YXHw4JXRM+VM2wTLhXtLi9MFX/ yQvVMdK+8ZhcsctZiOM/5bowGIfYrBBisP+roVsfG/fs1xYN//6We7vXcfeTA9AQ br+1RLQgpCXWD41wMVTZsDlFFOl2k+d7KFB92JxvS+Dkv/DO0FYMPUwxd9nuPIqK XMtp7sEjFcAUlmlfAet+SLg81Bmy98110XBudm5QaxlaavjHYYxDQQe6J4payODO wvueGfQjd7j4j5z0fO7edbzczEQ/fLacrVL4+n6Xj+XflGKcWXXI82u4QFkDLo9x M+52BLIMAhLAMYCCEFTHUsyqzjlmHPQW -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:49 2025 by rpki-client