$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: m9s02ENArZheGspy9bk8xnQNy2iY2UGpgKkUfZx/ESU= Subject key identifier: EC:8E:56:AC:1D:42:B2:A5:46:F9:85:63:B2:09:AB:ED:6B:41:8B:2B Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 0458 Signing time: Thu 21 Aug 2025 00:21:16 +0000 Manifest this update: Thu 21 Aug 2025 00:21:15 +0000 Manifest next update: Thu 28 Aug 2025 00:21:15 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: vUwalXTrR2l3ftPfuhgXXS5YS1skq1nV15iLlU8F984=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Aug 21 00:21:15 2025 GMT Not After : Aug 28 00:21:15 2025 GMT Subject: CN=68a6667b-a830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:88:38:2c:74:37:9b:e8:65:de:7f:32:ec:16: 97:df:2a:84:8d:bc:b9:35:e7:15:1e:96:cc:3e:13: 45:df:bf:e1:f1:76:89:10:d3:02:6c:8d:7b:d4:f0: 98:a1:4d:33:06:40:59:5b:f5:4f:46:79:6c:72:29: 88:4f:ef:3a:51:c6:3b:e3:02:cf:f2:0c:9f:8d:a0: 62:0a:40:35:0e:3e:20:6b:b8:a8:69:97:a5:d5:76: e6:98:98:e4:b0:9b:53:06:3a:b8:a1:d4:55:74:9f: d9:8b:bc:76:ab:1a:bc:0b:ab:1d:c6:04:ee:44:18: 8e:0e:23:86:81:f9:9f:ee:e7:7c:4a:ea:50:4f:57: 3e:5a:b9:7e:d1:ca:4d:64:66:1a:11:1d:52:20:c4: ae:a0:72:55:d0:7c:29:40:75:ba:b0:4d:cc:f5:89: e7:9d:ca:98:df:16:d9:7f:60:ab:4b:25:86:3a:1b: f2:9c:6a:c2:77:22:d9:ab:25:e3:16:1b:1d:94:a4: 33:b3:80:6b:9f:48:7e:9c:c6:dc:65:3d:f3:a8:47: 15:c7:68:0f:00:9d:d8:07:b9:08:32:6c:aa:59:3f: 6b:fa:6a:c7:d7:ef:78:b0:23:89:a8:87:5e:d5:7a: 98:4f:ce:c4:3e:87:01:45:84:3a:26:08:07:c7:d2: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:56:AC:1D:42:B2:A5:46:F9:85:63:B2:09:AB:ED:6B:41:8B:2B X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5f:54:4a:de:a7:b1:2e:67:71:8d:ab:f4:f6:7c:c8:c7:4c: f8:d6:3a:7b:2d:3b:3d:a0:4f:92:69:77:ee:18:a2:ac:47:dc: 51:d3:8e:8e:f3:d6:9f:87:2a:ea:c4:7c:7d:ea:0e:5c:b7:57: 84:3c:56:a3:bb:37:1b:91:ba:01:8b:b6:09:89:ec:6d:54:f9: e2:46:56:4f:89:13:d6:d9:60:89:bc:b2:ac:2e:96:a5:23:14: f8:8f:5c:d3:e2:f2:2b:e2:bb:14:d5:d2:2e:ce:f4:02:70:cd: 43:29:30:1d:31:9a:19:7c:bd:c4:1c:38:86:b8:a0:a9:7b:0a: 50:f4:1a:1e:f8:8d:80:2e:44:9a:b0:db:2d:43:c1:7a:8f:9f: de:75:06:91:04:71:0e:0f:92:e2:01:3c:f4:54:ac:4a:f4:61: 82:3f:c1:ce:de:ad:d3:44:e5:42:7b:d7:75:a1:80:d6:05:32: 54:d0:61:ea:b2:76:be:07:ff:a9:4a:6c:af:af:80:60:50:fe: f4:f0:63:5e:a0:67:15:62:a7:59:9d:45:77:f5:4f:b0:d7:6a: a9:5a:4e:07:8f:53:a3:b3:85:86:23:b0:1a:a0:e0:a3:ca:83: ce:41:f0:fc:7a:03:5f:fd:26:32:d8:32:9e:f7:26:32:5b:9a: a6:5b:96:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjUwODIxMDAyMTE1WhcNMjUwODI4MDAyMTE1WjAYMRYwFAYD VQQDEw02OGE2NjY3Yi1hODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Yg4LHQ3m+hl3n8y7BaX3yqEjby5NecVHpbMPhNF37/h8XaJENMCbI171PCY oU0zBkBZW/VPRnlscimIT+86UcY74wLP8gyfjaBiCkA1Dj4ga7ioaZel1XbmmJjk sJtTBjq4odRVdJ/Zi7x2qxq8C6sdxgTuRBiODiOGgfmf7ud8SupQT1c+Wrl+0cpN ZGYaER1SIMSuoHJV0HwpQHW6sE3M9YnnncqY3xbZf2CrSyWGOhvynGrCdyLZqyXj FhsdlKQzs4Brn0h+nMbcZT3zqEcVx2gPAJ3YB7kIMmyqWT9r+mrH1+94sCOJqIde 1XqYT87EPocBRYQ6JggHx9I28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyOVqwd QrKlRvmFY7IJq+1rQYsrMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJX1RK3qexLmdxjav09nzIx0z41jp7LTs9oE+SaXfuGKKsR9xR046O 89afhyrqxHx96g5ct1eEPFajuzcbkboBi7YJiextVPniRlZPiRPW2WCJvLKsLpal IxT4j1zT4vIr4rsU1dIuzvQCcM1DKTAdMZoZfL3EHDiGuKCpewpQ9Boe+I2ALkSa sNstQ8F6j5/edQaRBHEOD5LiATz0VKxK9GGCP8HO3q3TROVCe9d1oYDWBTJU0GHq sna+B/+pSmyvr4BgUP708GNeoGcVYqdZnUV39U+w12qpWk4Hj1Ojs4WGI7AaoOCj yoPOQfD8egNf/SYy2DKe9yYyW5qmW5aK -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:11 2025 by rpki-client