$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: NcvZGOWnJi4lo2FaoTgSFVfyQs+Frh7Aa85ISmYBGNY= Subject key identifier: 67:BE:05:7E:D9:FB:89:15:22:BC:C2:D2:33:39:14:60:78:27:0B:6F Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 1926 Signing time: Tue 22 Jul 2025 16:34:22 +0000 Manifest this update: Tue 22 Jul 2025 16:34:21 +0000 Manifest next update: Tue 29 Jul 2025 16:34:21 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: xp8G16eEmj1IjGOSo1YN1SgTXOLHy4DTMKBfmun+V4c=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6452 (0x1934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: Jul 22 16:34:21 2025 GMT Not After : Jul 29 16:34:21 2025 GMT Subject: CN=687fbd8d-a99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:aa:22:40:47:42:07:f2:08:db:05:d2:8a: 15:29:31:c5:62:a8:99:41:c5:b7:2a:b7:24:d5:c2: 58:ac:65:ec:6d:87:fd:70:a7:9a:f6:f7:73:b8:13: 9c:f8:63:0a:f3:79:1f:8b:1b:56:5b:7d:5d:70:a4: a8:67:00:e1:f1:e5:56:01:3b:13:60:8f:d1:61:89: 21:63:bd:9e:86:cd:58:28:5e:c7:ad:07:e2:55:2b: 0a:2a:87:b5:0d:9a:7f:24:82:03:3c:07:22:b8:51: 2f:e2:3a:fc:83:4d:dc:e4:b3:d2:cc:0a:18:d4:18: 23:90:dc:9d:f1:ba:4c:05:e1:d6:61:11:ec:ee:50: 0a:42:b3:38:32:f2:38:fc:b6:16:3a:c2:70:54:ed: 63:3d:a7:08:cb:57:19:7c:93:b5:58:66:5e:c9:25: e9:ef:be:49:b6:05:43:60:1f:eb:46:1c:0f:d8:12: 41:3d:c8:bb:72:1b:7d:a8:4c:30:43:a9:78:7e:d5: 4e:22:6a:ff:62:2b:82:76:40:6b:ab:f0:e6:0d:56: 12:91:c5:63:a3:f9:f4:17:2b:f5:01:d9:85:e1:dd: 7c:1d:58:f4:e4:80:da:bd:3d:7c:61:37:bb:66:81: fc:9a:5f:c3:10:35:e8:03:68:de:a2:c3:89:35:74: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:05:7E:D9:FB:89:15:22:BC:C2:D2:33:39:14:60:78:27:0B:6F X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:46:a9:49:3e:43:0d:c8:1a:3a:69:d2:ca:e7:ad:84:03:31: cb:02:43:c4:28:02:bb:e1:06:bb:1b:56:ac:e1:64:b0:4e:5a: e7:2d:ab:77:94:d4:57:aa:be:ad:26:bf:ec:57:8e:a0:32:6d: 63:c1:10:86:15:ef:26:37:90:5c:02:ae:6a:f4:d4:53:92:b0: f3:1e:04:3b:e6:cf:81:6d:cd:42:f0:9d:2d:00:b5:e9:df:47: b8:5a:3d:cf:bd:fe:28:1d:9a:35:b9:08:4b:8f:e2:29:6d:fc: 1a:a9:f6:d0:23:ce:54:24:b7:47:4c:39:36:21:ae:1e:92:45: da:08:f5:0d:96:7c:0d:0c:31:ef:9c:13:97:d0:66:e3:25:fd: 4b:44:73:01:88:5f:62:91:c5:7e:08:cd:75:ae:5b:89:f8:ea: b6:82:4e:d4:a9:b9:d3:fe:a4:66:09:2d:19:59:ba:06:1b:87: f7:52:37:91:2c:90:0b:d0:ce:e1:7a:1a:a4:92:a1:d8:fc:fa: 1f:8f:27:02:6c:d9:ea:fc:76:07:17:f6:be:44:05:a4:2f:17: 56:99:5f:d9:f1:b6:fa:70:94:ed:ce:37:6f:21:f7:c2:6b:16: ee:ad:8c:49:70:0a:44:b2:cc:a5:56:f2:1b:38:33:0a:35:78: a7:fc:40:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNzIyMTYzNDIxWhcNMjUwNzI5MTYzNDIxWjAYMRYwFAYD VQQDEw02ODdmYmQ4ZC1hOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIOqIkBHQgfyCNsF0ooVKTHFYqiZQcW3Krck1cJYrGXsbYf9cKea9vdzuBOc +GMK83kfixtWW31dcKSoZwDh8eVWATsTYI/RYYkhY72ehs1YKF7HrQfiVSsKKoe1 DZp/JIIDPAciuFEv4jr8g03c5LPSzAoY1BgjkNyd8bpMBeHWYRHs7lAKQrM4MvI4 /LYWOsJwVO1jPacIy1cZfJO1WGZeySXp775JtgVDYB/rRhwP2BJBPci7cht9qEww Q6l4ftVOImr/YiuCdkBrq/DmDVYSkcVjo/n0Fyv1AdmF4d18HVj05IDavT18YTe7 ZoH8ml/DEDXoA2jeosOJNXRS/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe+BX7Z +4kVIrzC0jM5FGB4JwtvMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzRqlJPkMNyBo6adLK562EAzHLAkPEKAK74Qa7G1as4WSwTlrnLat3 lNRXqr6tJr/sV46gMm1jwRCGFe8mN5BcAq5q9NRTkrDzHgQ75s+Bbc1C8J0tALXp 30e4Wj3Pvf4oHZo1uQhLj+IpbfwaqfbQI85UJLdHTDk2Ia4ekkXaCPUNlnwNDDHv nBOX0GbjJf1LRHMBiF9ikcV+CM11rluJ+Oq2gk7UqbnT/qRmCS0ZWboGG4f3UjeR LJAL0M7hehqkkqHY/PofjycCbNnq/HYHF/a+RAWkLxdWmV/Z8bb6cJTtzjdvIffC axburYxJcApEssylVvIbODMKNXin/EAc -----END CERTIFICATE-----Generated at Wed Jul 23 05:35:20 2025 by rpki-client