$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: Sm99MiYgXObCalKEEgcP+11jMdNUq803x3XF8gJBz7k= Subject key identifier: 79:6A:C1:F2:B7:C3:6A:D8:01:38:33:BA:95:27:41:40:10:E7:FD:1E Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0538 Signing time: Fri 18 Jul 2025 23:58:25 +0000 Manifest this update: Fri 18 Jul 2025 23:58:24 +0000 Manifest next update: Fri 25 Jul 2025 23:58:24 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: X4Iskv51MHW9sqN/E9sE/Ceczz/MyUNW9qC1xga8wwM=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jul 18 23:58:24 2025 GMT Not After : Jul 25 23:58:24 2025 GMT Subject: CN=687adfa1-902a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:c5:7c:c3:d3:92:f8:69:58:fe:90:20:7d: 79:8c:a0:19:a7:09:93:e4:ca:f5:d5:0a:df:e8:9f: d1:57:de:c3:60:15:3a:33:b2:08:59:47:7d:b0:e9: 93:51:59:c1:da:dd:44:9a:7d:76:02:df:ab:75:54: 77:91:ea:00:14:c5:60:d2:b4:7d:2d:da:dd:7f:f4: 5f:ed:65:6e:fd:d8:7e:b7:bf:41:f8:bf:f9:b3:14: 1e:86:45:ca:40:12:e9:1e:b7:cc:5b:f0:89:3b:29: 9c:ed:2d:56:19:b3:30:a0:df:a2:99:c4:ad:ae:8a: 45:5c:ed:83:46:eb:0b:33:30:b2:5d:24:06:b8:21: af:cf:0b:f5:d9:20:9c:32:55:d6:9b:13:2f:f1:9b: 16:37:ad:59:0a:be:b1:a2:ac:9d:e2:64:0f:00:c1: 98:6a:6c:c6:62:02:f0:7a:53:e2:93:89:d2:1a:e1: da:3f:08:ae:56:19:3f:41:8e:b2:0a:d5:b2:ac:6e: 5a:3f:e6:3a:fa:9b:7a:76:53:ec:7d:1f:9d:7e:40: dd:54:c4:b6:ce:4d:64:9d:67:db:a8:ba:c3:5c:87: 1d:44:ac:ee:b7:3d:17:44:df:fe:d5:4d:6e:5c:aa: 07:a5:68:2d:b6:95:51:3a:2f:9e:6a:15:3e:47:01: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:C1:F2:B7:C3:6A:D8:01:38:33:BA:95:27:41:40:10:E7:FD:1E X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:88:ad:4a:3d:75:a8:ce:64:4a:6d:b3:d3:52:e7:9f:15:d3: 7c:db:2a:ea:33:b3:18:9a:60:53:45:a6:94:fe:fe:bc:be:dc: 2b:37:0d:4d:a8:42:47:d1:f8:df:82:f8:d8:bb:1c:ae:cd:3e: 46:2d:0c:74:f9:23:77:4d:87:dc:79:96:02:a8:3a:4c:89:9a: dd:73:cb:08:be:9d:3d:16:fd:24:37:74:a2:f9:e2:8f:b2:e4: c2:79:4a:31:7c:0d:f0:ce:4d:ae:22:14:13:31:29:84:d2:20: d2:a4:19:5c:ca:56:6d:ab:04:bf:5f:8a:53:da:f7:0d:7f:fc: a3:f9:e7:9d:f7:b8:90:4b:79:8f:a3:90:4b:56:fb:c8:63:78: e3:5a:ef:f2:c7:82:8c:44:0d:01:e1:03:7d:0a:7e:be:61:18: 50:90:9f:69:c0:79:8d:96:48:6b:51:04:3e:55:4a:b1:eb:0e: 7b:1e:7c:a5:bc:f1:73:31:ca:2f:14:18:3c:97:f8:ea:7f:9b: 42:51:30:15:ea:89:78:6b:f6:4b:ba:e9:ac:0d:50:c3:9b:5f: bf:d0:97:2e:84:ac:d6:40:e9:bd:09:1d:a5:54:14:6d:91:89: b1:aa:50:e2:e5:7e:86:93:40:fd:4b:98:07:1b:d0:f9:b8:c7: 01:57:cf:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNzE4MjM1ODI0WhcNMjUwNzI1MjM1ODI0WjAYMRYwFAYD VQQDEw02ODdhZGZhMS05MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I/FfMPTkvhpWP6QIH15jKAZpwmT5Mr11Qrf6J/RV97DYBU6M7IIWUd9sOmT UVnB2t1Emn12At+rdVR3keoAFMVg0rR9Ldrdf/Rf7WVu/dh+t79B+L/5sxQehkXK QBLpHrfMW/CJOymc7S1WGbMwoN+imcStropFXO2DRusLMzCyXSQGuCGvzwv12SCc MlXWmxMv8ZsWN61ZCr6xoqyd4mQPAMGYamzGYgLwelPik4nSGuHaPwiuVhk/QY6y CtWyrG5aP+Y6+pt6dlPsfR+dfkDdVMS2zk1knWfbqLrDXIcdRKzutz0XRN/+1U1u XKoHpWgttpVROi+eahU+RwGm3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlqwfK3 w2rYATgzupUnQUAQ5/0eMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0iK1KPXWozmRKbbPTUuefFdN82yrqM7MYmmBTRaaU/v68vtwrNw1N qEJH0fjfgvjYuxyuzT5GLQx0+SN3TYfceZYCqDpMiZrdc8sIvp09Fv0kN3Si+eKP suTCeUoxfA3wzk2uIhQTMSmE0iDSpBlcylZtqwS/X4pT2vcNf/yj+eed97iQS3mP o5BLVvvIY3jjWu/yx4KMRA0B4QN9Cn6+YRhQkJ9pwHmNlkhrUQQ+VUqx6w57Hnyl vPFzMcovFBg8l/jqf5tCUTAV6ol4a/ZLuumsDVDDm1+/0JcuhKzWQOm9CR2lVBRt kYmxqlDi5X6Gk0D9S5gHG9D5uMcBV8/L -----END CERTIFICATE-----Generated at Sun Jul 20 10:27:52 2025 by rpki-client