$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: 3QxLu7g6QVOomvEcziFHiBJtgsKNnwFG89geUyq8WX8= Subject key identifier: D8:C5:5A:49:53:91:19:D6:20:DC:6E:ED:C9:C3:CE:1F:28:74:3A:5A Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0154 Signing time: Sun 07 Sep 2025 04:32:34 +0000 Manifest this update: Sun 07 Sep 2025 04:32:34 +0000 Manifest next update: Sun 14 Sep 2025 04:32:34 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: KAPOFduQIChO6eCLN5tW/gLd24P9Z9Jdm2O6/EJHbTA=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: wBNq6qKZKki1MEW6RuBHHAWRuhM23JZZju/jw5M2+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Sep 7 04:32:34 2025 GMT Not After : Sep 14 04:32:34 2025 GMT Subject: CN=68bd0ae2-2aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:00:65:8f:6f:9c:1e:17:1d:8d:a3:a5:58: 79:e3:a8:78:f5:f3:94:54:9c:7b:87:31:b3:d2:78: 48:a7:ad:ff:b7:f1:24:de:85:4d:12:41:d6:d9:ce: ac:b8:56:08:b2:1c:48:a4:f9:cc:46:5b:57:93:14: 1e:24:6a:e5:74:26:50:85:37:81:19:3f:58:56:a5: 34:e2:3f:e0:70:5a:d4:00:a0:e4:36:a5:6a:e7:03: da:9d:f3:a6:b6:a9:2e:bb:92:da:6f:30:a9:5f:d8: cf:9e:01:8d:04:95:6c:00:81:99:c0:59:f2:43:0b: ca:a3:7b:44:76:4e:d3:27:53:9b:d0:cc:37:7e:e0: e8:00:21:96:29:89:0d:6e:4d:64:19:e6:62:a5:da: ea:e4:ef:04:7c:23:c3:2b:7b:86:97:14:1c:1d:5c: 55:f0:d9:71:ce:bf:84:b8:c1:f7:22:8c:ea:9f:ac: e2:88:04:57:41:f1:0c:39:3d:48:af:ec:4a:36:8f: 2c:47:d0:9d:59:31:e3:ec:21:6c:a7:08:69:9b:2e: 05:ac:84:a9:b4:e1:2d:79:6a:86:b5:32:45:07:46: 05:21:d8:0d:41:15:fa:b3:6f:33:83:8b:35:46:a9: d9:ef:90:cb:51:51:92:e7:4b:e1:2b:9a:db:b4:8d: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:5A:49:53:91:19:D6:20:DC:6E:ED:C9:C3:CE:1F:28:74:3A:5A X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:d4:f8:49:3b:b5:fa:cf:d8:14:4f:71:ca:17:fc:03:f4: 1b:fa:97:31:62:af:fd:4a:9e:a2:62:5e:b6:5e:f1:6b:c7:17: f0:f3:d2:c5:c1:40:d2:cd:8b:d2:58:ea:89:ae:a0:25:d3:68: 1a:74:4e:6b:70:b8:f0:ee:2f:68:47:c1:21:51:ce:e8:7c:ff: b3:fd:69:cf:aa:75:12:ff:f7:e5:b1:90:af:f6:6b:70:44:fa: fc:93:b9:cc:d9:be:c5:f8:04:cd:12:91:db:20:80:21:3a:2a: d8:b4:3c:d6:dc:e8:58:20:a1:f4:f8:6e:56:7b:62:53:ed:31: a4:18:d2:80:6f:67:15:5e:34:75:ea:32:49:ea:ca:d6:d7:4b: be:89:37:42:ef:f0:9d:78:62:f4:a7:dc:b6:fc:93:ea:80:7a: 57:37:fe:e5:61:a4:3b:34:04:6c:f0:6d:3b:cc:3a:3b:5f:0d: 60:d2:ed:0e:ae:53:21:75:44:37:a3:bf:3b:f2:de:93:fe:a5: d1:d6:3c:b6:ff:4e:d9:e7:4e:03:eb:2d:dc:ab:ad:ea:d6:ea: 9c:4a:47:b8:0b:f7:2f:eb:e5:0a:74:6b:62:4a:2e:59:7e:d0: 07:da:0a:55:7e:48:8b:77:37:11:44:c5:e2:37:e9:5f:05:72: cb:da:ac:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwOTA3MDQzMjM0WhcNMjUwOTE0MDQzMjM0WjAYMRYwFAYD VQQDEw02OGJkMGFlMi0yYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeMAZY9vnB4XHY2jpVh546h49fOUVJx7hzGz0nhIp63/t/Ek3oVNEkHW2c6s uFYIshxIpPnMRltXkxQeJGrldCZQhTeBGT9YVqU04j/gcFrUAKDkNqVq5wPanfOm tqkuu5LabzCpX9jPngGNBJVsAIGZwFnyQwvKo3tEdk7TJ1Ob0Mw3fuDoACGWKYkN bk1kGeZipdrq5O8EfCPDK3uGlxQcHVxV8Nlxzr+EuMH3Iozqn6ziiARXQfEMOT1I r+xKNo8sR9CdWTHj7CFspwhpmy4FrISptOEteWqGtTJFB0YFIdgNQRX6s28zg4s1 RqnZ75DLUVGS50vhK5rbtI3ywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjFWklT kRnWINxu7cnDzh8odDpaMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKNT4STu1+s/YFE9xyhf8A/Qb+pcxYq/9Sp6iYl62XvFrxxfw89LF wUDSzYvSWOqJrqAl02gadE5rcLjw7i9oR8EhUc7ofP+z/WnPqnUS//flsZCv9mtw RPr8k7nM2b7F+ATNEpHbIIAhOirYtDzW3OhYIKH0+G5We2JT7TGkGNKAb2cVXjR1 6jJJ6srW10u+iTdC7/CdeGL0p9y2/JPqgHpXN/7lYaQ7NARs8G07zDo7Xw1g0u0O rlMhdUQ3o7878t6T/qXR1jy2/07Z504D6y3cq63q1uqcSke4C/cv6+UKdGtiSi5Z ftAH2gpVfkiLdzcRRMXiN+lfBXLL2qxP -----END CERTIFICATE-----Generated at Tue Sep 9 05:01:31 2025 by rpki-client