$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json) Hash identifier: lNMPTQ15Nelc4KF+3qqubSwhMrJ1UihpAkZmxBZdvso= Subject key identifier: 15:CA:35:31:2F:90:6C:2F:13:F6:32:48:88:79:52:F8:27:1A:D8:DB Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft Manifest number: 1343 Signing time: Sun 20 Jul 2025 17:58:54 +0000 Manifest this update: Sun 20 Jul 2025 17:58:54 +0000 Manifest next update: Sun 27 Jul 2025 17:58:54 +0000 Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: pJ/xUVopxvcjJrc4PpP5cnl5cvUmDM4vgDYJm3Wdurw=) 2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: Jul 20 17:58:54 2025 GMT Not After : Jul 27 17:58:54 2025 GMT Subject: CN=687d2e5e-bba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:3c:cd:8e:2d:bd:9d:a8:f0:f8:1b:6a:5b: fc:75:1b:c9:a7:e2:e1:3f:41:95:20:96:b8:6a:15: 53:c4:ba:67:65:90:86:92:a1:b7:b4:5b:51:8a:f9: 63:a1:ad:f3:da:92:fb:c7:70:20:26:88:3e:54:e9: 76:f8:cb:00:bc:6c:d2:c6:8a:eb:a1:67:62:4c:d4: 95:26:63:24:87:54:68:4a:31:68:1c:a5:ad:6f:0c: 94:52:6d:aa:86:79:ba:e2:ae:70:16:3a:f5:6f:5b: df:d6:08:a0:08:bf:93:f4:3a:ae:ca:5b:c6:06:f8: 6f:37:14:e5:ed:b8:44:c7:d3:b8:df:1a:14:11:56: 58:7d:16:9d:b0:a8:ed:5d:9b:25:c6:34:2d:bf:3f: 76:b6:33:7d:17:d1:59:85:1d:b3:e2:9c:a1:ed:1c: 96:89:a0:fc:cb:26:58:92:49:1e:b5:87:ea:c7:f1: 26:d7:e7:35:ae:60:44:9f:23:b4:10:47:31:3d:69: 6f:21:7b:31:d7:c5:15:64:46:4a:96:71:50:16:a2: b2:e5:e5:f9:bd:4f:b4:96:cd:48:4c:20:53:83:73: 5f:20:16:c6:71:01:00:65:f7:3d:74:d7:64:a4:b8: 7f:4d:66:16:0e:ec:78:3e:c6:48:f1:b5:9b:65:98: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:35:31:2F:90:6C:2F:13:F6:32:48:88:79:52:F8:27:1A:D8:DB X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:0d:2e:40:2f:99:f3:7f:12:73:33:b2:cf:db:92:c0:b9:c1: 9f:ec:9e:ad:39:b3:b4:92:79:31:d7:3b:f3:b7:01:75:ff:30: 96:55:63:34:21:27:a6:4c:69:31:0b:fb:89:aa:47:71:c4:29: 5c:72:63:cc:04:0d:0e:58:66:21:54:f9:9b:47:50:01:ce:5e: 20:95:68:6a:b6:bc:a6:3f:72:f9:0d:b3:5a:89:21:bc:a3:1b: 1d:6e:26:d0:f5:9c:06:94:61:1a:4a:be:6f:15:3d:a1:79:01: a8:92:ea:73:36:c1:1e:8d:5a:e6:5b:ad:59:f0:04:08:9e:48: b2:ec:c0:d0:50:91:6d:52:99:a3:ac:ff:8f:a1:d1:fb:6d:06: 2d:dd:f7:ed:bd:5b:59:06:9a:24:ca:ed:e3:b3:0b:8a:51:c0: cb:20:7f:f3:ed:d5:7e:26:01:60:0c:13:5c:f4:be:98:ca:ad: 2f:4e:a6:27:9b:e8:06:2b:51:06:fc:ab:68:2c:6c:88:cd:4c: 70:8a:4d:c9:fe:e0:1f:36:cd:f6:dc:b4:0c:a9:43:41:60:f6: ed:82:c3:b5:7d:c8:f4:96:da:92:a8:8f:3d:3d:fb:ad:dd:47: e4:c7:54:e6:57:14:10:a6:45:0c:81:03:5f:e1:91:bf:67:0d: f9:2c:86:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKDE0QzQ3NUNGRDI4Qjc3RUMxMTUyQzJFRjMzRTVFNDNF MTc1QUMyMjEwHhcNMjUwNzIwMTc1ODU0WhcNMjUwNzI3MTc1ODU0WjAYMRYwFAYD VQQDEw02ODdkMmU1ZS1iYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8A8zY4tvZ2o8Pgbalv8dRvJp+LhP0GVIJa4ahVTxLpnZZCGkqG3tFtRivlj oa3z2pL7x3AgJog+VOl2+MsAvGzSxorroWdiTNSVJmMkh1RoSjFoHKWtbwyUUm2q hnm64q5wFjr1b1vf1gigCL+T9DquylvGBvhvNxTl7bhEx9O43xoUEVZYfRadsKjt XZslxjQtvz92tjN9F9FZhR2z4pyh7RyWiaD8yyZYkkketYfqx/Em1+c1rmBEnyO0 EEcxPWlvIXsx18UVZEZKlnFQFqKy5eX5vU+0ls1ITCBTg3NfIBbGcQEAZfc9dNdk pLh/TWYWDux4PsZI8bWbZZhCIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXKNTEv kGwvE/YySIh5UvgnGtjbMB8GA1UdIwQYMBaAFBTEdc/Si3fsEVLC7zPl5D4XWsIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQtd1JVc0x2TS1Ya1BoZGF3 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQt d1JVc0x2TS1Ya1BoZGF3aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtDS5AL5nzfxJzM7LP25LAucGf7J6tObO0knkx1zvztwF1/zCWVWM0 ISemTGkxC/uJqkdxxClccmPMBA0OWGYhVPmbR1ABzl4glWhqtrymP3L5DbNaiSG8 oxsdbibQ9ZwGlGEaSr5vFT2heQGokupzNsEejVrmW61Z8AQInkiy7MDQUJFtUpmj rP+PodH7bQYt3fftvVtZBpokyu3jswuKUcDLIH/z7dV+JgFgDBNc9L6Yyq0vTqYn m+gGK1EG/KtoLGyIzUxwik3J/uAfNs323LQMqUNBYPbtgsO1fcj0ltqSqI89Pfut 3Ufkx1TmVxQQpkUMgQNf4ZG/Zw35LIay -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:22 2025 by rpki-client