$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: CAejjQZQAkUhvBlPD4iq10rpuXrTsDCqLRSva4IROZU= Subject key identifier: AF:D6:A8:BF:2B:3A:DD:AD:11:FA:CE:21:5A:73:DE:A0:CD:A0:90:A7 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 023D Signing time: Mon 21 Jul 2025 02:11:04 +0000 Manifest this update: Mon 21 Jul 2025 02:11:04 +0000 Manifest next update: Mon 28 Jul 2025 02:11:03 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: svnM9Ec6zJ6Nl8ZyUuf4+l2uUHR6GjG76SPFKzgVucs=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Jul 21 02:11:04 2025 GMT Not After : Jul 28 02:11:03 2025 GMT Subject: CN=687da1b8-8219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:7b:5c:90:2a:bb:4a:e8:ee:6c:6c:50:62: 17:7f:86:ff:d2:af:f0:03:d5:79:28:f4:29:4c:9c: 1d:eb:10:83:39:c9:2f:12:e4:f4:f4:d4:25:ae:04: 6a:03:95:c4:15:79:b3:2a:0b:ab:27:03:6d:ad:2f: 15:9e:a9:83:d3:46:22:aa:a0:26:d6:f3:83:cc:dc: 7c:a9:19:fd:63:52:98:ba:79:54:71:d2:3b:dc:90: 63:71:9f:8e:fb:f9:e5:50:5c:22:ef:01:8f:ae:7f: 16:b6:58:c6:bd:a6:4a:b6:7f:29:b2:aa:db:94:26: ac:01:e1:eb:d6:c6:a1:6b:db:40:6a:6f:75:67:38: 08:71:fd:01:ce:d0:95:04:56:cc:51:b1:f2:0d:17: 69:1b:0c:45:3b:10:be:68:00:9b:3c:8d:38:53:4d: 13:ac:ca:71:46:04:f7:1d:96:6d:92:2b:a3:b8:24: 3a:7d:2b:8d:a2:e1:f9:a4:a6:28:e2:85:ab:07:e2: 8b:ef:14:6a:f9:df:0d:50:c2:29:66:55:be:85:17: 12:25:55:11:06:ee:51:3d:ed:23:59:ef:5a:a9:5a: e6:4c:09:36:af:54:a4:bc:9c:a1:03:2b:11:99:e6: 31:5e:ba:79:c1:31:72:e1:b2:04:c8:a6:92:fc:33: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D6:A8:BF:2B:3A:DD:AD:11:FA:CE:21:5A:73:DE:A0:CD:A0:90:A7 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d7:d3:58:25:30:ec:24:99:5a:c7:ea:a8:9a:de:a1:d8:b2: 30:14:7c:94:46:95:a9:4e:34:f7:e2:54:65:87:1a:bb:67:89: 5b:7d:4a:43:2b:bc:13:ad:1a:b2:e8:a9:88:50:20:1d:8c:85: aa:b7:45:e5:a2:45:8d:62:30:ab:f4:00:47:07:8e:4c:4c:74: 42:8b:1a:af:f7:1a:7c:80:69:1d:f9:d5:89:af:ce:39:00:fa: 37:08:77:68:78:bc:e5:bc:59:6f:22:bf:5a:91:c5:5c:3f:6d: ef:28:96:18:1c:56:36:16:b1:df:d3:e6:ab:05:73:57:0c:f7: 37:f9:d9:3a:49:7b:3b:77:a2:48:7f:8c:ca:94:55:b1:d3:1d: c0:df:c9:3e:f9:55:0d:81:fe:c6:d1:45:bb:a2:1a:0d:ed:10: 02:91:b8:49:69:78:f1:21:d0:cb:f3:4a:d6:f5:17:07:90:ff: 10:c4:50:c7:56:8d:29:8a:bc:68:62:bf:3b:d6:99:e5:e3:d1: e0:a4:c5:3a:f0:b8:7b:e3:6f:c7:87:85:37:f0:ed:73:48:2c: ca:1c:c4:fa:18:10:70:84:00:54:47:29:c3:eb:f2:48:6a:ca: a6:68:2c:31:77:a5:7e:58:31:4b:31:bc:01:27:99:cf:48:08: 90:d8:63:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUwNzIxMDIxMTA0WhcNMjUwNzI4MDIxMTAzWjAYMRYwFAYD VQQDEw02ODdkYTFiOC04MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIV7XJAqu0ro7mxsUGIXf4b/0q/wA9V5KPQpTJwd6xCDOckvEuT09NQlrgRq A5XEFXmzKgurJwNtrS8VnqmD00YiqqAm1vODzNx8qRn9Y1KYunlUcdI73JBjcZ+O +/nlUFwi7wGPrn8WtljGvaZKtn8psqrblCasAeHr1saha9tAam91ZzgIcf0BztCV BFbMUbHyDRdpGwxFOxC+aACbPI04U00TrMpxRgT3HZZtkiujuCQ6fSuNouH5pKYo 4oWrB+KL7xRq+d8NUMIpZlW+hRcSJVURBu5RPe0jWe9aqVrmTAk2r1SkvJyhAysR meYxXrp5wTFy4bIEyKaS/DOfDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/WqL8r Ot2tEfrOIVpz3qDNoJCnMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy19NYJTDsJJlax+qomt6h2LIwFHyURpWpTjT34lRlhxq7Z4lbfUpD K7wTrRqy6KmIUCAdjIWqt0XlokWNYjCr9ABHB45MTHRCixqv9xp8gGkd+dWJr845 APo3CHdoeLzlvFlvIr9akcVcP23vKJYYHFY2FrHf0+arBXNXDPc3+dk6SXs7d6JI f4zKlFWx0x3A38k++VUNgf7G0UW7ohoN7RACkbhJaXjxIdDL80rW9RcHkP8QxFDH Vo0pirxoYr871pnl49HgpMU68Lh742/Hh4U38O1zSCzKHMT6GBBwhABURynD6/JI asqmaCwxd6V+WDFLMbwBJ5nPSAiQ2GPj -----END CERTIFICATE-----Generated at Mon Jul 21 08:05:56 2025 by rpki-client