$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft File: FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json) Hash identifier: MKJo7qdEQvSHZcjI0xnG3rutet6+lVPw41jRI8bvtMU= Subject key identifier: CE:1B:15:1B:DF:E1:14:52:3A:8E:76:A1:A7:5E:C2:31:4D:D2:72:CF Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 Certificate issuer: /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft Manifest number: 02EC Signing time: Wed 23 Jul 2025 01:47:07 +0000 Manifest this update: Wed 23 Jul 2025 01:47:07 +0000 Manifest next update: Wed 30 Jul 2025 01:47:07 +0000 Files and hashes: 1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: HgVTUjGFy8TJ2iGqEEMLMVRWecU0EW721Y8uvvkUq2M=) 2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: VrxDW/DTl4sELPDbg6jTEndamNxMaPLt6ONplJztblc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Validity Not Before: Jul 23 01:47:07 2025 GMT Not After : Jul 30 01:47:07 2025 GMT Subject: CN=68803f1b-8613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:3a:bc:aa:30:20:2d:c9:bc:5d:3f:97:c0: bc:0a:b9:c5:9b:5d:af:f7:dc:bd:ce:a9:3b:a5:0b: 0c:67:18:96:7c:44:1c:27:97:58:20:6f:b6:4b:db: e0:24:cd:54:e9:d1:4d:6d:f8:52:b9:ba:97:99:13: 98:e5:a5:c3:0e:59:75:3d:63:dd:e2:fb:18:b4:87: 5a:37:a7:b7:62:75:89:0b:c5:fa:d7:65:7c:24:5d: ac:d0:95:d9:5a:ee:10:da:44:ef:73:92:2f:7f:e5: a6:06:c9:29:25:c3:9b:4f:2e:c2:f3:01:2e:8c:12: e9:70:51:30:86:8a:f3:83:03:5c:68:10:37:65:a2: 30:4e:cb:b6:e2:34:b5:74:df:eb:38:40:a4:95:b4: 8b:75:10:9b:21:af:5b:21:75:e6:f2:b6:a6:ec:f3: 5a:3c:82:69:1b:83:fb:87:0a:14:7b:f4:b3:49:ce: 95:89:50:3b:c5:bd:78:92:10:97:b4:f0:df:6c:9d: b7:d4:21:14:d1:21:90:63:e3:36:e8:ad:c4:ab:b7: e4:a8:f3:02:61:e9:33:e5:6c:43:82:52:0f:00:1b: 86:4f:fd:48:46:9f:5d:d9:4c:d8:5b:09:6f:4e:07: 6a:60:e3:c9:6f:e7:8b:7c:a5:1e:6d:4f:5a:40:68: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1B:15:1B:DF:E1:14:52:3A:8E:76:A1:A7:5E:C2:31:4D:D2:72:CF X509v3 Authority Key Identifier: keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e0:3d:79:26:ef:33:f8:50:31:12:e8:67:46:b6:ac:9e:d1: b0:00:7d:af:ed:84:8d:04:b4:17:df:9f:92:5a:87:7f:51:0e: b3:07:1d:db:62:2c:5c:71:8f:ab:a3:8c:a4:00:69:c7:37:19: 7b:61:0f:e7:13:09:bb:70:77:40:3f:bb:81:b9:92:d0:77:75: 87:0a:73:c8:01:7a:9e:46:03:34:94:aa:87:e4:5f:58:5b:02: 1a:75:5b:40:3d:0f:3f:b9:18:6a:ed:62:39:bb:1f:6c:7c:ef: f4:97:a5:61:36:01:1c:9f:ad:e4:82:1c:fc:f4:f7:78:61:05: bf:57:df:aa:60:9b:f6:01:b3:62:20:2b:b7:2a:d9:20:96:3f: 20:2e:d4:ca:72:70:ec:20:35:03:ad:09:e3:da:e8:07:70:02: d0:40:52:bc:1d:0d:d9:55:1b:7e:e1:48:a1:ff:20:d6:f9:de: a0:db:19:3e:56:29:6f:c2:74:2b:d8:ff:96:63:e2:77:97:8d: e0:14:df:c1:37:11:ba:da:38:b8:59:a8:18:13:ec:24:c5:e0: df:34:2b:3d:f4:be:82:e9:18:de:e2:17:66:da:49:56:59:bf: cc:83:d5:28:cd:a9:ff:d4:e8:2d:7d:96:6c:79:c3:81:dd:77: 32:61:95:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI4MEIxMTAvBgNVBAUTKDE0NjVEQzJDQjcwMjUzRURGNTE0Q0Q0Mzc3MjY2MkZG M0JCOEY2RTAwHhcNMjUwNzIzMDE0NzA3WhcNMjUwNzMwMDE0NzA3WjAYMRYwFAYD VQQDEw02ODgwM2YxYi04NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZk6vKowIC3JvF0/l8C8CrnFm12v99y9zqk7pQsMZxiWfEQcJ5dYIG+2S9vg JM1U6dFNbfhSubqXmROY5aXDDll1PWPd4vsYtIdaN6e3YnWJC8X612V8JF2s0JXZ Wu4Q2kTvc5Ivf+WmBskpJcObTy7C8wEujBLpcFEwhorzgwNcaBA3ZaIwTsu24jS1 dN/rOECklbSLdRCbIa9bIXXm8ram7PNaPIJpG4P7hwoUe/SzSc6ViVA7xb14khCX tPDfbJ231CEU0SGQY+M26K3Eq7fkqPMCYekz5WxDglIPABuGT/1IRp9d2UzYWwlv TgdqYOPJb+eLfKUebU9aQGj0UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4bFRvf 4RRSOo52oadewjFN0nLPMB8GA1UdIwQYMBaAFBRl3Cy3AlPt9RTNQ3cmYv87uPbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjgwQi85N0JDMURCOEVE RUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1UtMzFGTTFEZHlaaV96dTQ5 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWGNMTGNDVS0zMUZNMURkeVppX3p1NDl1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjgwQi85N0JDMURCOEVERUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1Ut MzFGTTFEZHlaaV96dTQ5dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu4D15Ju8z+FAxEuhnRrasntGwAH2v7YSNBLQX35+SWod/UQ6zBx3b YixccY+ro4ykAGnHNxl7YQ/nEwm7cHdAP7uBuZLQd3WHCnPIAXqeRgM0lKqH5F9Y WwIadVtAPQ8/uRhq7WI5ux9sfO/0l6VhNgEcn63kghz89Pd4YQW/V9+qYJv2AbNi ICu3Ktkglj8gLtTKcnDsIDUDrQnj2ugHcALQQFK8HQ3ZVRt+4Uih/yDW+d6g2xk+ VilvwnQr2P+WY+J3l43gFN/BNxG62ji4WagYE+wkxeDfNCs99L6C6Rje4hdm2klW Wb/Mg9Uozan/1OgtfZZsecOB3XcyYZUW -----END CERTIFICATE-----Generated at Wed Jul 23 06:25:19 2025 by rpki-client