$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: J4d0TiNwhNs7/HBw9PuFQ9h3JoafyiqbjshX+ySS8Zc= Subject key identifier: 22:C9:91:BE:9F:2B:9E:51:7C:65:72:CD:AB:08:A4:04:67:74:AB:A3 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0139 Signing time: Mon 21 Jul 2025 04:30:17 +0000 Manifest this update: Mon 21 Jul 2025 04:30:17 +0000 Manifest next update: Mon 28 Jul 2025 04:30:17 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: /vs67NWFOoUs4DHKTyiyGwoVE48LPY3NpcFi9z8wGDs=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Jul 21 04:30:17 2025 GMT Not After : Jul 28 04:30:17 2025 GMT Subject: CN=687dc259-3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:8e:fa:c8:bb:fd:24:70:ed:31:f5:05:9f: 92:2d:e0:4c:66:80:e0:ec:26:bc:ff:72:70:4c:23: 96:2b:1b:12:98:bc:6b:6d:c3:d2:ec:43:3b:6d:c9: ba:f4:c0:c1:c1:84:a2:cc:be:35:3c:a1:e9:b2:39: 25:78:36:ee:e0:8a:c9:06:97:4a:e8:5d:f3:2d:8a: d2:cb:49:24:59:c2:bb:90:f3:38:82:c2:43:ed:c7: 43:41:87:90:dc:36:d3:41:9a:51:f2:86:37:63:5b: 3c:a8:fa:49:e1:7d:d0:01:0c:e0:ff:2d:b2:df:9e: fa:fe:ff:9b:9e:ff:ae:be:72:2a:63:65:44:ff:ed: 5f:82:f6:e0:a2:a8:95:b1:b9:cf:e8:3c:eb:39:20: fe:5b:5e:d3:30:dc:53:de:80:9e:be:d7:67:94:a1: f5:e3:9e:dd:ce:5d:b0:db:94:4d:33:96:b7:7c:80: 6b:f2:9d:06:24:a3:bc:4b:01:c4:4c:61:54:3a:15: 84:d4:74:57:22:34:6f:90:05:0b:f0:ff:84:57:46: 07:57:30:2d:79:74:28:59:bd:33:d8:30:6b:1b:c5: d9:c5:25:87:bf:92:7d:0f:9e:81:d6:0c:8f:16:89: ba:8d:67:60:10:03:d7:0d:1d:a2:e3:d8:6c:43:35: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C9:91:BE:9F:2B:9E:51:7C:65:72:CD:AB:08:A4:04:67:74:AB:A3 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d3:58:9f:15:24:0e:85:7f:33:21:2a:cc:8f:b5:1c:0c:f8: 70:58:1a:4b:93:ab:75:65:39:c8:01:dc:2f:63:3c:f0:1b:65: a2:66:e2:60:06:bd:5b:27:de:8b:7f:03:76:5b:a4:5c:7e:ee: 3d:62:22:00:7d:22:57:48:0d:cd:7c:69:4d:e1:02:f0:45:90: ac:93:9d:42:a9:86:1e:62:70:b3:dd:9c:91:0c:20:5f:61:cf: ca:fb:2e:56:f8:57:19:de:9f:40:54:47:ad:6e:41:25:db:78: 0a:20:24:68:e8:fe:92:de:e4:44:24:64:3e:a7:cd:ee:9c:0c: 17:2e:36:5b:81:c2:8d:c5:cd:23:06:1f:15:a3:f7:53:71:6e: 98:3d:25:4a:3f:76:c4:5f:a9:5c:5b:bd:2c:2a:4c:73:b0:fc: 16:fc:c7:3e:8b:5c:d2:e8:3d:a3:fd:2e:1b:29:94:52:62:9e: d1:cc:52:10:dd:df:8a:af:13:d9:bc:09:cb:19:82:d8:8f:1c: 4e:c3:89:64:b2:48:e7:17:64:07:76:8f:a2:99:5d:8f:52:59: fb:49:a0:6d:64:56:c2:dc:18:ae:f5:d8:9b:c5:58:9b:df:95: 13:32:17:9f:6f:b4:78:41:79:f2:4c:fc:00:6c:d9:56:9e:a8: 6a:31:8c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwNzIxMDQzMDE3WhcNMjUwNzI4MDQzMDE3WjAYMRYwFAYD VQQDEw02ODdkYzI1OS0zMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7eO+si7/SRw7TH1BZ+SLeBMZoDg7Ca8/3JwTCOWKxsSmLxrbcPS7EM7bcm6 9MDBwYSizL41PKHpsjkleDbu4IrJBpdK6F3zLYrSy0kkWcK7kPM4gsJD7cdDQYeQ 3DbTQZpR8oY3Y1s8qPpJ4X3QAQzg/y2y3576/v+bnv+uvnIqY2VE/+1fgvbgoqiV sbnP6DzrOSD+W17TMNxT3oCevtdnlKH1457dzl2w25RNM5a3fIBr8p0GJKO8SwHE TGFUOhWE1HRXIjRvkAUL8P+EV0YHVzAteXQoWb0z2DBrG8XZxSWHv5J9D56B1gyP Fom6jWdgEAPXDR2i49hsQzU/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLJkb6f K55RfGVyzasIpARndKujMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu01ifFSQOhX8zISrMj7UcDPhwWBpLk6t1ZTnIAdwvYzzwG2WiZuJg Br1bJ96LfwN2W6Rcfu49YiIAfSJXSA3NfGlN4QLwRZCsk51CqYYeYnCz3ZyRDCBf Yc/K+y5W+FcZ3p9AVEetbkEl23gKICRo6P6S3uREJGQ+p83unAwXLjZbgcKNxc0j Bh8Vo/dTcW6YPSVKP3bEX6lcW70sKkxzsPwW/Mc+i1zS6D2j/S4bKZRSYp7RzFIQ 3d+KrxPZvAnLGYLYjxxOw4lkskjnF2QHdo+imV2PUln7SaBtZFbC3Biu9dibxVib 35UTMhefb7R4QXnyTPwAbNlWnqhqMYxO -----END CERTIFICATE-----Generated at Mon Jul 21 12:42:39 2025 by rpki-client