$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: kzSYQR3DmkNqIjzNHV8Hq9xZwqBhUudZk/RVk2x3O2A= Subject key identifier: 7D:1E:95:CD:AA:C1:A9:0B:B7:7D:3D:01:0B:53:AE:30:FC:73:2B:5E Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 104F Signing time: Tue 22 Jul 2025 17:33:16 +0000 Manifest this update: Tue 22 Jul 2025 17:33:15 +0000 Manifest next update: Tue 29 Jul 2025 17:33:15 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: XPhCe7DpPilE3C3mC7UU3S9cC+pvdDdTJLjvO15fcso=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: SaPDHfkJq6+olJp+pCEwWUsbU8ig75YR7kl23PYTmrE=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B, serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: Jul 22 17:33:15 2025 GMT Not After : Jul 29 17:33:15 2025 GMT Subject: CN=687fcb5c-f96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:fa:f2:b0:1c:81:b1:a4:2c:dc:2a:1a:a1: a2:01:16:b5:0d:82:81:59:96:b1:cf:56:cf:bb:2e: 3b:09:55:ad:42:54:32:f1:37:97:e3:5b:a3:b0:b0: df:5e:95:1b:f4:c2:c3:be:73:5c:e3:ba:a0:c0:7c: 74:e9:b6:96:23:95:40:2d:ca:ce:1a:30:80:27:94: f7:73:8d:4a:f0:19:e7:a0:e8:1f:ea:e1:d1:5e:f1: 60:c5:37:2b:ae:81:09:79:e9:44:94:1f:6d:03:3f: 5a:79:7c:61:b5:44:c1:bb:3c:b0:9f:9d:bd:1c:8a: 29:33:ac:95:17:db:ba:c4:70:1e:8c:ce:dd:56:c6: a6:b4:a8:7b:1b:79:4e:44:38:e2:30:0b:7c:e7:2b: 9e:75:fb:39:95:4e:86:f6:d7:93:50:05:ba:12:88: 1c:4b:c2:2e:f2:76:13:fc:4b:20:9d:e9:25:8c:40: d8:f6:84:73:19:c8:db:34:e1:ea:f2:73:8b:c1:5e: e2:5d:79:b0:46:c4:22:df:4f:cb:15:a8:56:a9:c9: 07:bc:fc:23:e8:f4:74:6f:3f:27:d5:c5:ac:49:a5: 22:5a:93:65:2e:a1:3d:31:7b:62:f6:8c:da:eb:62: 63:4a:94:af:1a:c9:7d:c4:5b:5d:35:98:2d:6b:60: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:95:CD:AA:C1:A9:0B:B7:7D:3D:01:0B:53:AE:30:FC:73:2B:5E X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a8:69:70:5a:30:4a:70:55:82:38:1a:64:12:93:c6:06:bc: ca:5a:62:f5:5a:ea:00:13:d0:9c:8b:07:df:c8:5b:8f:cc:14: c4:bb:12:f1:55:62:a1:ea:7e:6b:f4:fa:e8:30:f6:fc:f7:92: c0:52:23:b8:2d:bd:5b:73:ce:30:d9:25:39:30:a7:3b:fc:1e: a8:65:b2:49:4c:03:8e:fd:7d:f8:01:89:08:f8:a6:17:54:d1: ec:ea:c0:b5:a8:ae:3f:dd:1e:d0:04:50:7f:52:70:48:d5:0a: 6b:70:11:04:22:7b:7c:08:3c:34:43:cb:f6:61:0d:98:48:c5: b8:8a:9f:21:df:81:3e:34:0a:d0:0d:d0:b7:3f:e6:81:e6:bf: c5:92:b8:e1:5e:d6:0d:f4:f0:ba:a3:e3:da:9c:12:4e:24:5a: d1:f9:e6:e7:f9:15:3c:cc:c4:ba:1e:59:6c:8d:d1:fa:29:54: e1:18:51:4b:2b:45:b8:18:79:8d:29:99:4b:e7:c9:91:0d:2b: e0:71:23:0f:a2:6d:41:3a:c3:16:3b:16:fb:3c:a3:3f:9c:c7: 36:c7:4d:02:a2:6d:bd:6a:db:37:b0:b1:73:78:0a:94:37:99: 34:4a:4d:70:12:07:9b:90:fc:bd:30:f6:04:39:12:7c:8e:f4: 73:29:ef:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjUwNzIyMTczMzE1WhcNMjUwNzI5MTczMzE1WjAYMRYwFAYD VQQDEw02ODdmY2I1Yy1mOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD768rAcgbGkLNwqGqGiARa1DYKBWZaxz1bPuy47CVWtQlQy8TeX41ujsLDf XpUb9MLDvnNc47qgwHx06baWI5VALcrOGjCAJ5T3c41K8BnnoOgf6uHRXvFgxTcr roEJeelElB9tAz9aeXxhtUTBuzywn529HIopM6yVF9u6xHAejM7dVsamtKh7G3lO RDjiMAt85yuedfs5lU6G9teTUAW6EogcS8Iu8nYT/EsgnekljEDY9oRzGcjbNOHq 8nOLwV7iXXmwRsQi30/LFahWqckHvPwj6PR0bz8n1cWsSaUiWpNlLqE9MXti9oza 62JjSpSvGsl9xFtdNZgta2DznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0elc2q wakLt309AQtTrjD8cyteMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqGlwWjBKcFWCOBpkEpPGBrzKWmL1WuoAE9CciwffyFuPzBTEuxLx VWKh6n5r9ProMPb895LAUiO4Lb1bc84w2SU5MKc7/B6oZbJJTAOO/X34AYkI+KYX VNHs6sC1qK4/3R7QBFB/UnBI1QprcBEEInt8CDw0Q8v2YQ2YSMW4ip8h34E+NArQ DdC3P+aB5r/FkrjhXtYN9PC6o+PanBJOJFrR+ebn+RU8zMS6HllsjdH6KVThGFFL K0W4GHmNKZlL58mRDSvgcSMPom1BOsMWOxb7PKM/nMc2x00Com29ats3sLFzeAqU N5k0Sk1wEgebkPy9MPYEORJ8jvRzKe8V -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:46 2025 by rpki-client