$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: KorDh3i+bnHaR2zd7QwGLA5ORofTrDLDEC/vwP752SM= Subject key identifier: 97:DD:35:C2:81:C7:47:7C:32:1F:16:58:DB:90:42:29:DB:92:08:4F Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 071F Signing time: Sun 20 Jul 2025 21:59:02 +0000 Manifest this update: Sun 20 Jul 2025 21:59:01 +0000 Manifest next update: Sun 27 Jul 2025 21:59:01 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: HWzG9QY06pKvCmSBtMAOu+YLjqRqsdNFG3b8Au6X61c=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Jul 20 21:59:01 2025 GMT Not After : Jul 27 21:59:01 2025 GMT Subject: CN=687d66a5-4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:64:7f:b4:bb:02:b3:0a:a1:46:d8:dd:98: ac:95:76:7b:44:64:a0:0d:91:de:fa:a4:33:39:16: c4:6c:bc:b2:26:07:8b:b8:d5:b1:6e:2f:22:5f:87: 73:de:61:3e:a1:76:e4:39:37:be:51:b0:87:35:17: 0f:77:e5:3b:7f:7a:1a:7d:b7:fc:89:7b:68:bf:9f: 28:61:a9:1a:ca:0a:d0:7f:5e:18:81:f0:cc:28:97: 49:61:13:57:8f:8e:ed:b7:b0:7b:b1:c4:e6:09:9c: a4:8b:40:98:d4:de:ad:b5:8c:d7:23:8b:b0:fa:9d: dd:4e:8c:2a:16:b0:7d:80:de:24:33:a3:e0:da:37: dc:03:52:10:89:74:7c:63:c8:5b:a2:aa:92:2d:a0: 89:74:36:37:2f:69:21:7e:77:12:6a:d2:d7:92:cf: ee:1c:7a:8c:ed:33:ab:b7:1d:ef:8a:95:b7:3b:73: 6c:f8:e7:74:f5:f6:54:e6:4e:a3:64:93:40:74:e1: cb:2d:db:b6:51:8e:9b:4d:4d:8c:a9:7f:eb:17:47: fd:26:6f:bd:bc:3d:44:b7:73:b8:53:2e:df:ef:30: 79:0b:ab:5a:96:20:88:f5:37:ca:a0:41:b2:da:3d: 63:77:c5:64:98:fc:be:ef:5d:10:02:ee:67:c3:85: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:35:C2:81:C7:47:7C:32:1F:16:58:DB:90:42:29:DB:92:08:4F X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a3:c5:b0:79:24:ba:f3:e2:02:ed:5a:fe:3a:f4:d1:53:5d: 2d:b1:05:27:c4:89:eb:a0:a0:e8:d1:2e:f3:55:42:62:14:c2: 0b:98:07:99:43:ac:42:87:00:0a:80:51:17:4b:ec:fc:72:c2: 26:e7:7b:49:7a:4b:91:3f:1b:66:bf:30:25:07:26:62:ab:0e: 0f:57:69:3a:c3:f4:3e:d3:cc:7a:76:d8:72:c1:27:77:2e:ca: 13:b3:07:cb:4d:fd:77:0c:69:fb:64:62:6b:33:00:df:ae:72: f9:49:dc:f4:fa:2e:fd:86:d2:75:84:3e:62:6d:9f:c1:b0:11: 22:e9:38:33:d4:93:f8:38:a1:c9:92:ac:55:63:e0:d0:43:b2: 7f:e9:aa:b5:cd:a8:98:7b:e0:94:c1:d9:35:27:93:9f:33:dd: 82:82:e4:1c:2f:7f:72:e2:2e:ce:50:25:5f:f5:8d:16:ec:5e: 18:14:2c:64:51:77:70:99:1b:34:2b:77:fa:b5:3c:ae:c6:ba: c4:50:71:68:b3:c0:52:45:89:db:f8:64:ff:40:20:64:c0:9d: 9a:bd:c1:ec:b5:c5:25:0c:68:73:77:19:29:be:55:d2:f4:4d: 1c:06:ed:e8:f3:e4:63:72:84:0e:8f:42:22:df:30:2e:ff:d6: 5c:e1:93:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNzIwMjE1OTAxWhcNMjUwNzI3MjE1OTAxWjAYMRYwFAYD VQQDEw02ODdkNjZhNS00NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Gpkf7S7ArMKoUbY3ZislXZ7RGSgDZHe+qQzORbEbLyyJgeLuNWxbi8iX4dz 3mE+oXbkOTe+UbCHNRcPd+U7f3oafbf8iXtov58oYakaygrQf14YgfDMKJdJYRNX j47tt7B7scTmCZyki0CY1N6ttYzXI4uw+p3dTowqFrB9gN4kM6Pg2jfcA1IQiXR8 Y8hboqqSLaCJdDY3L2khfncSatLXks/uHHqM7TOrtx3vipW3O3Ns+Od09fZU5k6j ZJNAdOHLLdu2UY6bTU2MqX/rF0f9Jm+9vD1Et3O4Uy7f7zB5C6taliCI9TfKoEGy 2j1jd8VkmPy+710QAu5nw4UeYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfdNcKB x0d8Mh8WWNuQQinbkghPMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9o8WweSS68+IC7Vr+OvTRU10tsQUnxInroKDo0S7zVUJiFMILmAeZ Q6xChwAKgFEXS+z8csIm53tJekuRPxtmvzAlByZiqw4PV2k6w/Q+08x6dthywSd3 LsoTswfLTf13DGn7ZGJrMwDfrnL5Sdz0+i79htJ1hD5ibZ/BsBEi6Tgz1JP4OKHJ kqxVY+DQQ7J/6aq1zaiYe+CUwdk1J5OfM92CguQcL39y4i7OUCVf9Y0W7F4YFCxk UXdwmRs0K3f6tTyuxrrEUHFos8BSRYnb+GT/QCBkwJ2avcHstcUlDGhzdxkpvlXS 9E0cBu3o8+RjcoQOj0Ii3zAu/9Zc4ZOi -----END CERTIFICATE-----Generated at Mon Jul 21 08:05:03 2025 by rpki-client