$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft File: FpcDHB024MQncP5r8o2uSO4TZJY.mft (raw, json) Hash identifier: +2v6LF5PWFKqtkARyeOsky/PoJxY7TjrLPI82E499BY= Subject key identifier: 00:BE:11:FE:1C:B1:B8:2C:26:CC:C7:FB:95:7F:FE:70:F7:13:EE:3C Authority key identifier: 16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96 Certificate issuer: /CN=A9193B94/serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft Manifest number: 6E Signing time: Sat 19 Jul 2025 07:09:24 +0000 Manifest this update: Sat 19 Jul 2025 07:09:24 +0000 Manifest next update: Sat 26 Jul 2025 07:09:24 +0000 Files and hashes: 1: FpcDHB024MQncP5r8o2uSO4TZJY.crl (hash: 6L814Se4VoiGacsw3u3JZYf3aDBhKQ+G0IscUom1oIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B94, serialNumber=1697031C1D36E0C42770FE6BF28DAE48EE136496 Validity Not Before: Jul 19 07:09:24 2025 GMT Not After : Jul 26 07:09:24 2025 GMT Subject: CN=687b44a4-179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:99:31:8b:88:44:09:1e:0d:c5:83:e9:7c: a3:72:18:a2:fe:80:f5:2e:93:ba:e3:30:c2:89:5e: 7c:78:fb:28:9e:62:5e:41:22:a4:34:c1:7c:67:dd: 6d:f4:8b:de:78:6e:f6:67:1a:49:9d:e7:16:44:65: 9e:47:1d:06:5d:c1:9f:0a:f8:95:78:dc:7e:96:92: 86:1b:02:27:28:10:a3:9c:42:b6:6e:5e:be:fe:ce: 23:0c:bc:35:cf:e2:ba:4b:5b:8e:e4:02:36:db:e5: 23:90:06:57:20:c0:29:34:e1:a9:ff:14:55:7c:d6: f8:3a:82:1c:77:fb:73:88:7c:b8:0d:f6:17:41:68: 9d:f5:f4:77:07:46:be:19:a6:99:ed:b9:00:d2:f5: 0d:5f:94:e9:88:c8:8a:e0:ab:56:c6:1f:8e:f5:98: 8e:fd:8a:4d:5d:b5:f3:13:60:8d:99:c3:bb:69:94: 02:b8:65:ab:95:8d:61:9e:de:a1:af:d5:47:4f:9a: af:d1:b3:c7:3f:b4:fd:9a:be:54:87:bf:91:67:12: 7f:9e:85:b8:98:72:b4:ea:46:7d:93:96:48:08:1e: 78:7b:e3:54:86:b7:c4:c5:30:70:99:93:62:b7:99: fd:58:ca:20:1e:b9:55:6d:a3:dd:c3:de:36:65:9c: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:11:FE:1C:B1:B8:2C:26:CC:C7:FB:95:7F:FE:70:F7:13:EE:3C X509v3 Authority Key Identifier: keyid:16:97:03:1C:1D:36:E0:C4:27:70:FE:6B:F2:8D:AE:48:EE:13:64:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpcDHB024MQncP5r8o2uSO4TZJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/B7791622BCD911EF92AB3313C4F9AE02/FpcDHB024MQncP5r8o2uSO4TZJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:80:49:9a:8f:1d:7b:fd:78:3d:d4:75:35:04:6a:63:5d:9e: 8a:8d:8f:4e:f1:81:ed:84:5a:63:f6:c2:f2:82:97:2e:f1:97: 9b:9a:a1:b4:bc:ca:d8:ad:35:bd:a7:f7:a0:ec:f6:5f:fe:ce: db:7d:bb:2d:0f:b3:cb:79:33:53:86:8e:1b:c5:ee:1f:e0:8f: 66:ae:69:ca:d4:70:fe:d1:8a:1c:b4:e9:a1:43:ee:d4:f5:5f: 3f:89:fd:2f:79:f0:c9:85:3f:81:63:7e:a5:ec:af:71:f4:ef: 09:22:10:77:7e:6f:8d:40:f6:f8:d8:f9:25:21:97:d9:aa:c7: 85:82:e6:00:6d:a3:58:a8:71:d9:e9:1a:a5:c1:20:9f:25:11: b2:41:ac:47:70:8a:47:79:b3:bf:9d:af:69:42:aa:b7:b0:83: d0:8b:85:7a:d2:06:3b:a9:be:ac:3a:e4:e1:01:cb:2c:64:fe: bf:ca:5f:d4:8d:c3:c5:42:b3:c7:52:08:a4:c7:9c:fb:06:a4: 68:4f:cc:7f:3c:de:d4:1a:05:f2:7a:d2:03:3b:a4:e7:51:d7: 8d:24:a9:7d:94:62:93:fa:b3:0a:a1:52:d8:d6:50:1c:f8:a1: bb:de:4c:85:3e:cc:0c:f7:14:c3:05:c6:16:e3:3e:76:50:ab: bc:eb:fd:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I5NDExMC8GA1UEBRMoMTY5NzAzMUMxRDM2RTBDNDI3NzBGRTZCRjI4REFFNDhF RTEzNjQ5NjAeFw0yNTA3MTkwNzA5MjRaFw0yNTA3MjYwNzA5MjRaMBgxFjAUBgNV BAMTDTY4N2I0NGE0LTE3OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUPpkxi4hECR4NxYPpfKNyGKL+gPUuk7rjMMKJXnx4+yieYl5BIqQ0wXxn3W30 i954bvZnGkmd5xZEZZ5HHQZdwZ8K+JV43H6WkoYbAicoEKOcQrZuXr7+ziMMvDXP 4rpLW47kAjbb5SOQBlcgwCk04an/FFV81vg6ghx3+3OIfLgN9hdBaJ319HcHRr4Z ppntuQDS9Q1flOmIyIrgq1bGH471mI79ik1dtfMTYI2Zw7tplAK4ZauVjWGe3qGv 1UdPmq/Rs8c/tP2avlSHv5FnEn+ehbiYcrTqRn2TlkgIHnh741SGt8TFMHCZk2K3 mf1YyiAeuVVto93D3jZlnDPlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAL4R/hyx uCwmzMf7lX/+cPcT7jwwHwYDVR0jBBgwFoAUFpcDHB024MQncP5r8o2uSO4TZJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjk0L0I3NzkxNjIyQkNE OTExRUY5MkFCMzMxM0M0RjlBRTAyL0ZwY0RIQjAyNE1RbmNQNXI4bzJ1U080VFpK WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnBjREhCMDI0TVFuY1A1cjhvMnVTTzRUWkpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz Qjk0L0I3NzkxNjIyQkNEOTExRUY5MkFCMzMxM0M0RjlBRTAyL0ZwY0RIQjAyNE1R bmNQNXI4bzJ1U080VFpKWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOASZqPHXv9eD3UdTUEamNdnoqNj07xge2EWmP2wvKCly7xl5uaobS8 ytitNb2n96Ds9l/+ztt9uy0Ps8t5M1OGjhvF7h/gj2auacrUcP7Rihy06aFD7tT1 Xz+J/S958MmFP4FjfqXsr3H07wkiEHd+b41A9vjY+SUhl9mqx4WC5gBto1iocdnp GqXBIJ8lEbJBrEdwikd5s7+dr2lCqrewg9CLhXrSBjupvqw65OEByyxk/r/KX9SN w8VCs8dSCKTHnPsGpGhPzH883tQaBfJ60gM7pOdR140kqX2UYpP6swqhUtjWUBz4 obveTIU+zAz3FMMFxhbjPnZQq7zr/dQ= -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:45 2025 by rpki-client