$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: tqLai7cAD4e1hVpfLPAjNruIL//K702ATPZ/OZNlYzA= Subject key identifier: A0:F8:97:6E:42:69:0B:BD:91:8E:64:DD:0B:95:CB:FA:45:44:80:43 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 059F Signing time: Sun 20 Jul 2025 23:25:53 +0000 Manifest this update: Sun 20 Jul 2025 23:25:53 +0000 Manifest next update: Sun 27 Jul 2025 23:25:53 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: i9gwKddyTYNZXtxCSMmCnEIzJUZPqL6Hb84BB8DjuPE=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Jul 20 23:25:53 2025 GMT Not After : Jul 27 23:25:53 2025 GMT Subject: CN=687d7b01-948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:7d:82:50:51:fb:31:57:ae:0f:57:35:d3: 07:9c:b4:96:d3:2d:e0:47:ae:88:f9:51:bc:43:b7: c9:f2:8b:88:0b:32:22:4a:72:26:64:6d:dc:fa:48: 17:0d:de:9b:3d:37:26:4c:f2:7f:7c:b0:f3:a7:49: c0:41:11:1f:41:aa:8a:15:21:69:98:b5:2c:66:c2: 73:18:73:f0:ba:fe:8f:88:25:49:66:90:e0:a9:49: a7:bf:08:78:24:87:1f:d3:fd:10:8e:c7:01:bc:4b: 81:63:fb:7b:dd:3c:5b:93:ef:ec:be:5a:53:82:e1: ad:0d:f8:da:cf:83:1e:3b:62:3d:af:e5:73:66:0b: aa:b2:70:27:80:8e:8d:2c:e7:96:d0:31:47:29:d6: 39:ef:62:1b:f9:87:a7:2b:51:c5:00:67:cb:46:9e: de:c5:c4:29:14:1c:61:4d:35:d0:5f:d5:e7:a1:1d: c2:ea:6f:df:66:12:35:d1:22:fa:ec:a7:33:dc:e0: 9d:6b:66:b8:2a:59:cb:b0:fb:a5:41:24:50:0d:9b: c0:fc:55:ce:f5:55:07:44:9e:cb:a0:96:10:10:e1: 52:49:48:65:f3:90:f0:cf:86:e7:9a:e7:0d:92:8a: 76:05:14:9b:1d:aa:ca:b8:70:22:ab:6d:70:74:99: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:97:6E:42:69:0B:BD:91:8E:64:DD:0B:95:CB:FA:45:44:80:43 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b9:0d:6f:1d:6e:b1:43:dd:72:3f:17:d0:1e:51:8c:c9:dd: c3:d5:77:08:64:57:e8:ea:f5:62:e4:a1:e4:73:62:4d:86:5f: ae:88:2a:94:d3:82:8c:23:4d:05:e8:7f:3f:cd:3c:46:8a:ac: d8:de:1c:e5:42:16:20:19:52:77:64:7f:b7:40:c9:4b:eb:40: eb:8d:dd:20:e2:1e:f6:b5:f3:fb:3a:21:58:1e:de:2d:0d:90: 55:09:27:64:43:dd:0f:4e:09:56:9f:1c:bc:9a:99:48:52:32: c7:a3:6b:bf:21:ef:7a:5a:fe:45:69:3d:a0:fa:7c:fb:7b:81: d9:6e:b2:98:90:6b:b4:ec:33:54:55:38:64:02:57:e2:c0:6a: c9:23:42:21:08:50:f2:3d:9a:0b:4f:d6:03:4c:1c:7a:4f:35: b7:4d:d0:ec:25:f1:3d:9d:91:d6:56:77:49:9b:b1:4d:85:ea: 15:46:23:a8:a9:f9:13:66:b3:0b:e3:52:98:9c:9e:c8:87:b5: a3:e1:80:73:2b:8a:34:8e:92:ca:db:17:82:2c:3f:18:8b:18: 2c:d7:5d:b9:f4:04:d9:80:88:55:24:82:0b:75:00:a0:33:85: ef:ef:af:b1:0a:d1:f5:b1:a2:32:8d:b3:d0:fc:14:73:da:e9: ec:07:4c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwNzIwMjMyNTUzWhcNMjUwNzI3MjMyNTUzWjAYMRYwFAYD VQQDEw02ODdkN2IwMS05NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rl9glBR+zFXrg9XNdMHnLSW0y3gR66I+VG8Q7fJ8ouICzIiSnImZG3c+kgX Dd6bPTcmTPJ/fLDzp0nAQREfQaqKFSFpmLUsZsJzGHPwuv6PiCVJZpDgqUmnvwh4 JIcf0/0QjscBvEuBY/t73Txbk+/svlpTguGtDfjaz4MeO2I9r+VzZguqsnAngI6N LOeW0DFHKdY572Ib+YenK1HFAGfLRp7excQpFBxhTTXQX9XnoR3C6m/fZhI10SL6 7Kcz3OCda2a4KlnLsPulQSRQDZvA/FXO9VUHRJ7LoJYQEOFSSUhl85Dwz4bnmucN kop2BRSbHarKuHAiq21wdJnBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD4l25C aQu9kY5k3QuVy/pFRIBDMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGuQ1vHW6xQ91yPxfQHlGMyd3D1XcIZFfo6vVi5KHkc2JNhl+uiCqU 04KMI00F6H8/zTxGiqzY3hzlQhYgGVJ3ZH+3QMlL60Drjd0g4h72tfP7OiFYHt4t DZBVCSdkQ90PTglWnxy8mplIUjLHo2u/Ie96Wv5FaT2g+nz7e4HZbrKYkGu07DNU VThkAlfiwGrJI0IhCFDyPZoLT9YDTBx6TzW3TdDsJfE9nZHWVndJm7FNheoVRiOo qfkTZrML41KYnJ7Ih7Wj4YBzK4o0jpLK2xeCLD8Yixgs11259ATZgIhVJIILdQCg M4Xv76+xCtH1saIyjbPQ/BRz2unsB0wW -----END CERTIFICATE-----Generated at Mon Jul 21 12:24:18 2025 by rpki-client