$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json) Hash identifier: eznSZOxEX6ZAnN7VTruk2IIW7qY9YP5G+HesjNrg2FY= Subject key identifier: FE:C1:A8:63:BB:32:C9:BE:2C:4D:B3:04:3F:A7:A8:3E:C3:EC:71:57 Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft Manifest number: 01EF Signing time: Mon 21 Jul 2025 02:35:25 +0000 Manifest this update: Mon 21 Jul 2025 02:35:25 +0000 Manifest next update: Mon 28 Jul 2025 02:35:25 +0000 Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: SQuS9eAeviwGTBOEmn8ZYnNZJeWGuMFF35CYo291H2I=) 2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Validity Not Before: Jul 21 02:35:25 2025 GMT Not After : Jul 28 02:35:25 2025 GMT Subject: CN=687da76d-6ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:d3:b6:db:61:23:9a:fe:e6:a4:70:46:ac: 3d:70:bc:b4:9a:bf:34:70:a4:9f:bc:ea:d2:06:4c: 87:66:6a:be:7a:6b:c5:ee:92:fd:64:73:1a:4a:b1: d7:87:a8:d5:5d:0d:af:2f:f9:a9:5b:2f:06:fe:98: 45:e7:cc:44:54:19:68:d5:20:6f:e7:96:6d:44:b3: 33:a0:21:28:a2:c8:ed:57:bc:69:bb:c6:1c:91:29: 20:bf:d5:22:be:6c:8c:c9:68:e6:40:89:8f:5a:85: 6f:34:5d:82:eb:c2:57:f9:77:bd:e5:45:46:81:14: f5:ef:5a:5d:a1:5c:dd:8b:74:57:96:6b:f8:68:fe: 57:26:97:90:90:e7:cf:6e:aa:6a:33:91:9e:aa:ba: f2:30:57:4b:46:24:45:ca:ee:67:10:1d:99:0e:38: 74:a3:fb:87:26:8f:16:80:f0:a5:99:ee:c1:7b:94: 65:f3:08:4e:66:48:3f:05:8d:dc:03:1a:e9:25:20: d6:33:f5:fa:21:f7:5b:29:96:1b:0e:7f:ae:35:42: cd:fb:1c:2a:ed:38:cd:0f:22:27:bf:6d:53:a0:48: a6:07:08:a7:70:79:32:ae:0f:c1:1e:89:08:3c:20: 73:16:8a:8a:7c:bf:19:db:ee:07:b8:ad:40:b3:37: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:A8:63:BB:32:C9:BE:2C:4D:B3:04:3F:A7:A8:3E:C3:EC:71:57 X509v3 Authority Key Identifier: keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:23:d7:17:17:1a:36:81:66:62:a6:91:de:88:4b:79:12:0d: e1:23:07:ef:cd:a7:65:18:71:1c:14:0a:fc:6f:40:fc:ba:b0: c4:bc:d1:b6:45:3b:51:12:08:d4:16:a6:79:ec:14:40:d5:70: 21:f8:e1:56:ee:67:48:c2:6e:37:70:ae:da:d5:0f:b9:3a:80: d2:b5:3c:db:e8:1d:30:9b:c7:c7:7f:a3:05:6c:01:97:be:b6: 95:80:1a:7a:6c:12:37:65:92:68:5d:91:a3:91:ec:0f:6a:c2: 5c:55:c3:69:b6:91:45:21:71:b4:b6:9c:41:24:41:7a:ce:1e: f5:c2:06:9c:5d:24:4b:a2:88:d3:9a:e3:04:90:fc:1c:a7:2e: c7:9a:eb:6f:0e:5a:49:a6:08:54:20:b5:e1:35:3e:e9:5f:ed: 00:06:e4:35:f6:cc:ef:c2:b3:65:b7:f3:a8:a0:ff:b1:5b:29: 52:6d:57:51:30:a9:29:a2:1a:6a:71:c3:e3:5b:51:fa:85:f0: 1a:7d:e4:e5:e7:d7:a7:27:8f:78:5c:8d:96:d3:e6:7f:be:86: 57:2d:ed:a3:6c:5e:99:7c:27:97:fd:d0:93:af:a2:68:ad:e7: f7:b2:50:04:e2:5a:42:52:f2:ec:40:ca:56:51:83:bc:40:03: 3a:7a:ab:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC OTNBNTk1MjEwHhcNMjUwNzIxMDIzNTI1WhcNMjUwNzI4MDIzNTI1WjAYMRYwFAYD VQQDEw02ODdkYTc2ZC02Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugrTttthI5r+5qRwRqw9cLy0mr80cKSfvOrSBkyHZmq+emvF7pL9ZHMaSrHX h6jVXQ2vL/mpWy8G/phF58xEVBlo1SBv55ZtRLMzoCEoosjtV7xpu8YckSkgv9Ui vmyMyWjmQImPWoVvNF2C68JX+Xe95UVGgRT171pdoVzdi3RXlmv4aP5XJpeQkOfP bqpqM5GeqrryMFdLRiRFyu5nEB2ZDjh0o/uHJo8WgPClme7Be5Rl8whOZkg/BY3c AxrpJSDWM/X6IfdbKZYbDn+uNULN+xwq7TjNDyInv21ToEimBwincHkyrg/BHokI PCBzFoqKfL8Z2+4HuK1AszfH0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7BqGO7 Msm+LE2zBD+nqD7D7HFXMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARI9cXFxo2gWZippHeiEt5Eg3hIwfvzadlGHEcFAr8b0D8urDEvNG2 RTtREgjUFqZ57BRA1XAh+OFW7mdIwm43cK7a1Q+5OoDStTzb6B0wm8fHf6MFbAGX vraVgBp6bBI3ZZJoXZGjkewPasJcVcNptpFFIXG0tpxBJEF6zh71wgacXSRLoojT muMEkPwcpy7HmutvDlpJpghUILXhNT7pX+0ABuQ19szvwrNlt/OooP+xWylSbVdR MKkpohpqccPjW1H6hfAafeTl59enJ494XI2W0+Z/voZXLe2jbF6ZfCeX/dCTr6Jo ref3slAE4lpCUvLsQMpWUYO8QAM6eqtI -----END CERTIFICATE-----Generated at Mon Jul 21 07:30:13 2025 by rpki-client