$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: XYchOWqyjHf5rerHItThGdwl8ydcqd4VHYkAr3uSK60= Subject key identifier: 28:1A:9C:1B:81:3A:18:2E:08:28:F1:66:6E:2D:BD:90:C1:D1:C1:12 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 9D Signing time: Sat 19 Jul 2025 06:34:50 +0000 Manifest this update: Sat 19 Jul 2025 06:34:50 +0000 Manifest next update: Sat 26 Jul 2025 06:34:50 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: qjD+OiwdxoYw9CXpsfuKf7VqOcIt6rXbBQT9ebFMofk=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Jul 19 06:34:50 2025 GMT Not After : Jul 26 06:34:50 2025 GMT Subject: CN=687b3c8a-679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:1d:67:f0:bb:e2:93:4c:14:10:7d:a4:27: ff:b8:51:3f:29:c2:75:ee:28:17:fd:c5:33:c3:a6: 67:fe:70:c4:01:80:8e:45:46:7f:ba:08:38:c3:d9: db:96:1f:22:01:d8:39:94:bf:ed:b6:fb:0f:37:33: 1a:d3:81:e6:07:e2:56:a3:50:65:1f:e7:0f:c4:15: 3d:79:67:fd:fd:53:0c:07:18:53:20:64:8e:3d:7e: fd:e6:aa:2b:c5:8a:41:b0:d4:67:51:1f:87:f3:81: 08:44:3c:71:8a:29:df:44:ef:f0:f0:54:9e:2b:32: 61:85:47:78:aa:e0:43:c9:65:d7:c8:2f:eb:66:3e: b7:04:1a:ae:fb:d9:ff:4d:6a:5f:c2:cd:39:92:e3: 4d:23:ec:99:eb:bb:78:5c:4a:7b:f0:2d:68:7f:8c: 6e:71:72:c7:69:97:6e:6a:77:74:48:b8:66:e6:e4: e0:67:15:68:de:e7:a2:ca:dc:5c:01:45:cb:64:3e: 5c:bd:34:eb:d9:78:8d:ab:46:be:82:e3:a0:43:09: 46:26:46:6e:bc:3e:a6:5b:e4:27:49:c1:07:2d:8e: 98:f1:eb:5b:df:06:86:0a:9d:6f:0c:55:cd:85:8d: ec:de:b2:5c:ca:9f:1b:5e:af:98:08:b2:7f:0a:16: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:9C:1B:81:3A:18:2E:08:28:F1:66:6E:2D:BD:90:C1:D1:C1:12 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:8c:79:6b:97:19:b8:83:ca:d8:d6:94:3b:b5:de:7f:9d:5e: 0f:ac:be:16:6d:02:bd:52:17:84:f7:66:d9:10:5e:a7:32:a5: 0d:6c:b2:7c:67:b7:74:0c:0e:a2:0b:c3:2e:0d:68:9a:bd:0a: 9e:58:e4:2c:01:96:83:ca:4a:fc:5e:7e:6b:ee:ad:39:22:96: 0c:4e:8d:f1:b4:2d:2a:be:aa:66:3c:75:36:91:92:bb:af:69: 0a:70:28:be:24:67:d5:03:c5:00:e0:ab:a7:75:5d:02:2c:78: 8c:d2:e0:fa:3f:70:bf:15:cd:d7:92:e3:6c:b5:47:f7:64:c6: 47:92:b9:28:33:75:2b:a3:39:1f:5d:b3:75:0f:d6:c7:2a:a1: 1f:9d:b5:57:8a:d9:7e:88:2f:0c:21:05:8f:f8:1d:54:20:7a: 60:c5:dc:23:fc:fb:0b:a2:ee:ec:91:b8:57:1b:c1:c4:a1:2f: 5a:0b:c2:05:28:2a:7f:df:28:c5:2a:3f:e2:d9:0c:e2:4c:52: 1d:c2:9c:e9:ad:c0:b6:3a:7d:95:20:f5:c3:fc:a3:37:51:00: 7b:32:94:f0:a7:e2:ef:e3:1c:2d:d2:87:dc:60:19:5e:1d:6b: 5a:48:b2:87:53:32:9b:ee:c4:63:8a:c7:4f:c5:d3:5f:76:5e: 36:fe:e3:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4 QTAwMzc4MDkwHhcNMjUwNzE5MDYzNDUwWhcNMjUwNzI2MDYzNDUwWjAYMRYwFAYD VQQDEw02ODdiM2M4YS02NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvsdZ/C74pNMFBB9pCf/uFE/KcJ17igX/cUzw6Zn/nDEAYCORUZ/ugg4w9nb lh8iAdg5lL/ttvsPNzMa04HmB+JWo1BlH+cPxBU9eWf9/VMMBxhTIGSOPX795qor xYpBsNRnUR+H84EIRDxxiinfRO/w8FSeKzJhhUd4quBDyWXXyC/rZj63BBqu+9n/ TWpfws05kuNNI+yZ67t4XEp78C1of4xucXLHaZduand0SLhm5uTgZxVo3ueiytxc AUXLZD5cvTTr2XiNq0a+guOgQwlGJkZuvD6mW+QnScEHLY6Y8etb3waGCp1vDFXN hY3s3rJcyp8bXq+YCLJ/ChamaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCganBuB OhguCCjxZm4tvZDB0cESMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6 T2pFNi00OE91aHlLQURlQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4jHlrlxm4g8rY1pQ7td5/nV4PrL4WbQK9UheE92bZEF6nMqUNbLJ8 Z7d0DA6iC8MuDWiavQqeWOQsAZaDykr8Xn5r7q05IpYMTo3xtC0qvqpmPHU2kZK7 r2kKcCi+JGfVA8UA4KundV0CLHiM0uD6P3C/Fc3XkuNstUf3ZMZHkrkoM3Urozkf XbN1D9bHKqEfnbVXitl+iC8MIQWP+B1UIHpgxdwj/PsLou7skbhXG8HEoS9aC8IF KCp/3yjFKj/i2QziTFIdwpzprcC2On2VIPXD/KM3UQB7MpTwp+Lv4xwt0ofcYBle HWtaSLKHUzKb7sRjisdPxdNfdl42/uPQ -----END CERTIFICATE-----Generated at Sun Jul 20 11:16:45 2025 by rpki-client