$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: wWBYzeRicxebjuBM4WHEfIq0ywKMIlimuAVK5mq3DSU= Subject key identifier: 74:C4:95:E8:1A:02:A5:8A:14:63:18:E0:A2:95:56:68:A4:22:5C:5B Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 2B Signing time: Sat 19 Jul 2025 08:01:32 +0000 Manifest this update: Sat 19 Jul 2025 08:01:31 +0000 Manifest next update: Sat 26 Jul 2025 08:01:31 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: MnrtvOQi53mtJ27Kn2YFY6yUWyZxqIH1AFisGWGlKGo=) 2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) 3: 7F09FC70323611F0AB3FA70BC4F9AE02.roa (hash: e5UjmqUjbahnofPOK94PTOrYf4VsadI2aqpgREwVS7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Jul 19 08:01:31 2025 GMT Not After : Jul 26 08:01:31 2025 GMT Subject: CN=687b50dc-f357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:b1:95:51:ae:cd:44:40:90:84:f2:fe:81: 9d:77:fe:54:bd:ab:18:dd:b3:1f:15:3f:d1:ef:01: 75:c6:41:d2:82:c0:7a:1f:e0:09:27:dc:43:c7:ae: 7b:b6:a0:14:64:61:af:7a:06:f5:9c:8f:a6:a4:6f: 07:50:71:8d:f2:9c:d0:23:e5:f2:c2:72:61:f3:08: 13:81:5c:1e:1a:c7:43:f4:b3:da:e9:e0:4d:04:49: 8d:23:62:b0:b5:db:b3:23:a7:2e:36:37:4b:36:ad: d0:3a:14:09:e8:87:8a:c2:30:88:b5:15:bc:0b:4b: ec:60:09:c6:40:47:cc:56:49:8d:f6:2a:f4:85:03: 4a:a9:34:d7:4e:86:99:6e:e1:c8:c3:25:eb:d9:ef: 06:d8:84:92:bb:bd:05:94:ae:b1:49:70:5c:14:39: b9:8c:e2:a2:e6:b8:20:80:a6:15:db:59:38:83:4d: 10:e8:54:94:a9:70:76:ec:79:ed:4d:c2:60:78:87: b2:e9:a2:0c:69:05:28:2a:bb:39:e6:12:c6:3c:a3: ff:4a:89:55:31:49:b0:7a:06:5f:7c:af:ff:2c:e7: 70:e6:8e:f8:02:38:48:21:63:a7:58:9d:70:ee:3b: aa:9c:75:91:42:e8:40:ab:ea:88:dc:c6:64:e3:31: 1e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:95:E8:1A:02:A5:8A:14:63:18:E0:A2:95:56:68:A4:22:5C:5B X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:05:f1:98:d4:02:1d:aa:2a:7d:b4:4d:f0:bc:81:30:7c:b0: 83:c1:93:fd:1a:50:52:3b:68:76:c4:b8:60:cf:32:bb:80:39: c9:e5:4a:22:c6:7c:a6:97:82:d7:df:ce:48:f4:36:ad:9d:3a: e8:cc:9f:48:c0:02:49:50:56:df:04:56:1d:72:60:4a:12:13: ee:4e:e1:9b:80:b7:07:a3:6b:77:dd:6e:82:87:56:de:de:d3: d8:3d:ca:4f:8f:05:27:0e:47:9d:df:73:95:25:d4:7e:c6:cf: 37:97:15:3a:ae:31:05:ee:15:68:bd:d9:19:2c:eb:8d:fd:9f: 9c:73:a3:7f:45:71:0a:28:d0:63:e2:c2:e6:ba:ad:df:59:3e: 46:ed:97:fa:bf:4e:ac:97:0a:ad:69:e2:13:67:44:14:da:3c: 52:53:8f:67:30:08:46:b0:1f:5b:b0:cc:8f:95:3e:b8:23:7d: 5e:ac:4d:a8:db:74:44:a2:57:a2:36:fe:67:b0:93:21:69:c9: 64:c7:49:e9:13:2c:9a:75:80:dc:bf:8d:8f:2e:8c:d8:7b:37: f8:5d:ae:a3:21:4f:99:c4:b9:e2:ff:6b:21:3b:58:7f:3d:5e: 7f:14:7c:4e:71:88:06:72:c0:ef:47:88:4c:d5:71:55:41:6d: e3:25:6a:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ5QjExMC8GA1UEBRMoN0YwMzk3QzZBOTRFNTI1OTc2ODM0QkJGRDU4MDJGMTVC Nzk1RkI4RTAeFw0yNTA3MTkwODAxMzFaFw0yNTA3MjYwODAxMzFaMBgxFjAUBgNV BAMTDTY4N2I1MGRjLWYzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8srGVUa7NRECQhPL+gZ13/lS9qxjdsx8VP9HvAXXGQdKCwHof4Akn3EPHrnu2 oBRkYa96BvWcj6akbwdQcY3ynNAj5fLCcmHzCBOBXB4ax0P0s9rp4E0ESY0jYrC1 27Mjpy42N0s2rdA6FAnoh4rCMIi1FbwLS+xgCcZAR8xWSY32KvSFA0qpNNdOhplu 4cjDJevZ7wbYhJK7vQWUrrFJcFwUObmM4qLmuCCAphXbWTiDTRDoVJSpcHbsee1N wmB4h7LpogxpBSgquznmEsY8o/9KiVUxSbB6Bl98r/8s53DmjvgCOEghY6dYnXDu O6qcdZFC6ECr6ojcxmTjMR4bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdMSV6BoC pYoUYxjgopVWaKQiXFswHwYDVR0jBBgwFoAUfwOXxqlOUll2g0u/1YAvFbeV+44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDlCL0IyQTU3N0MyMjc0 NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZndPWHhxbE9VbGwyZzB1XzFZQXZGYmVWLTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDlCL0IyQTU3N0MyMjc0NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxs MmcwdV8xWUF2RmJlVi00NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgF8ZjUAh2qKn20TfC8gTB8sIPBk/0aUFI7aHbEuGDPMruAOcnlSiLG fKaXgtffzkj0Nq2dOujMn0jAAklQVt8EVh1yYEoSE+5O4ZuAtweja3fdboKHVt7e 09g9yk+PBScOR53fc5Ul1H7GzzeXFTquMQXuFWi92Rks6439n5xzo39FcQoo0GPi wua6rd9ZPkbtl/q/TqyXCq1p4hNnRBTaPFJTj2cwCEawH1uwzI+VPrgjfV6sTajb dESiV6I2/mewkyFpyWTHSekTLJp1gNy/jY8ujNh7N/hdrqMhT5nEueL/ayE7WH89 Xn8UfE5xiAZywO9HiEzVcVVBbeMlarE= -----END CERTIFICATE-----Generated at Sun Jul 20 18:18:41 2025 by rpki-client