$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: HRLTM+50s6PPGQXeSeINlu9uV+H1lhzxbxm0ZDZA4NE= Subject key identifier: 3C:CA:F4:E6:FF:14:A7:6A:30:D7:13:0D:53:4C:B3:08:45:D5:27:04 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 0110 Signing time: Sat 23 Aug 2025 05:02:43 +0000 Manifest this update: Sat 23 Aug 2025 05:02:42 +0000 Manifest next update: Sat 30 Aug 2025 05:02:42 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: 6m47nwmiI7haN8wYj3aPyLQIXKzmXoSdGasCVQs1v0Q=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: T4vR48N6YhwHqTHzqOptSkBSTlUWr6Qnyq5t5xi8rho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Aug 23 05:02:42 2025 GMT Not After : Aug 30 05:02:42 2025 GMT Subject: CN=68a94b72-6666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:53:bf:4e:46:2b:62:f9:93:ef:00:33:e7:df: a2:07:37:e1:d9:26:cb:0c:c5:c2:57:06:6c:60:c5: 00:ec:63:ff:28:f5:a8:21:27:01:e8:25:6a:0f:8c: bd:84:45:c0:68:e9:b3:c8:1e:30:77:d0:14:c7:9f: f8:44:3d:d2:eb:57:e5:04:32:fc:32:d6:ba:92:d7: 5a:95:46:07:ab:bb:85:07:28:44:2e:a2:61:86:9b: 96:f0:7e:70:4c:a7:fb:e6:18:0d:79:9a:19:14:fe: e1:0e:ba:96:04:4d:14:88:72:a7:1a:b7:06:d5:de: d6:dd:99:bd:07:9d:bb:04:29:06:33:02:3b:ed:54: 18:6e:e2:7a:bb:cc:25:96:0f:0d:d0:16:db:92:42: 1f:d2:f4:d9:78:8a:16:74:86:93:da:87:83:48:85: 88:7f:30:a8:55:08:a7:03:c0:75:b1:c2:04:e9:85: b3:86:41:11:26:24:3a:fa:74:8f:9a:b6:eb:fa:79: 01:5f:4c:e8:5b:f6:87:33:cf:01:c7:2b:0f:5c:7c: 80:29:0c:6b:51:64:1d:34:ec:f9:11:09:17:c8:f1: 6a:95:2f:02:27:0a:e7:8e:f3:02:75:6c:dd:8e:a2: 86:7f:92:f3:e9:2f:5d:13:0d:29:21:3b:38:50:b9: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:F4:E6:FF:14:A7:6A:30:D7:13:0D:53:4C:B3:08:45:D5:27:04 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:be:6e:47:01:30:31:f6:da:56:68:54:e4:06:86:92:af:b7: eb:30:b3:5b:31:1f:a3:79:2e:f4:7f:16:e8:e2:4e:5d:db:31: 68:d9:ac:d2:f1:70:5c:48:4d:d5:94:23:bf:82:3b:e3:0e:b3: f7:89:fe:84:17:f7:18:8f:6e:28:02:fd:12:75:9a:3f:c1:bd: 73:99:ec:75:31:17:55:0f:c9:f8:bd:87:e8:23:89:f6:f3:cc: d4:80:b3:14:d9:3f:7e:1b:bb:3a:4a:9a:0a:37:4b:b9:ce:f0: 5e:b6:ce:c5:c2:a9:19:89:bf:a5:f7:c6:4b:19:6f:88:70:0a: 42:8d:84:7d:af:f5:5d:9c:5f:0c:19:e5:3e:5b:b0:ab:10:23: 48:c8:d0:e9:36:80:b9:45:71:ab:ed:57:01:db:a1:2d:81:40: e1:4f:fa:65:ac:03:11:60:06:c8:c1:6a:3b:08:80:05:54:0c: f1:c8:be:ed:9c:b2:3e:03:e4:ac:89:0c:2c:ad:a4:f2:7d:79: 72:2d:e8:21:36:9d:b0:76:17:1a:0e:9f:96:5d:d6:cc:b2:7e: ba:da:c7:68:b5:35:c9:d5:aa:bb:4b:39:24:f3:30:79:f6:e7: ca:23:65:f7:43:27:f5:2a:6c:6d:1c:23:a1:40:78:1a:41:bd: 1b:3f:95:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjUwODIzMDUwMjQyWhcNMjUwODMwMDUwMjQyWjAYMRYwFAYD VQQDEw02OGE5NGI3Mi02NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FO/TkYrYvmT7wAz59+iBzfh2SbLDMXCVwZsYMUA7GP/KPWoIScB6CVqD4y9 hEXAaOmzyB4wd9AUx5/4RD3S61flBDL8Mta6ktdalUYHq7uFByhELqJhhpuW8H5w TKf75hgNeZoZFP7hDrqWBE0UiHKnGrcG1d7W3Zm9B527BCkGMwI77VQYbuJ6u8wl lg8N0BbbkkIf0vTZeIoWdIaT2oeDSIWIfzCoVQinA8B1scIE6YWzhkERJiQ6+nSP mrbr+nkBX0zoW/aHM88BxysPXHyAKQxrUWQdNOz5EQkXyPFqlS8CJwrnjvMCdWzd jqKGf5Lz6S9dEw0pITs4ULlsOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzK9Ob/ FKdqMNcTDVNMswhF1ScEMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKvm5HATAx9tpWaFTkBoaSr7frMLNbMR+jeS70fxbo4k5d2zFo2azS 8XBcSE3VlCO/gjvjDrP3if6EF/cYj24oAv0SdZo/wb1zmex1MRdVD8n4vYfoI4n2 88zUgLMU2T9+G7s6SpoKN0u5zvBets7FwqkZib+l98ZLGW+IcApCjYR9r/VdnF8M GeU+W7CrECNIyNDpNoC5RXGr7VcB26EtgUDhT/plrAMRYAbIwWo7CIAFVAzxyL7t nLI+A+SsiQwsraTyfXlyLeghNp2wdhcaDp+WXdbMsn662sdotTXJ1aq7Szkk8zB5 9ufKI2X3Qyf1KmxtHCOhQHgaQb0bP5Xx -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:07 2025 by rpki-client