$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: gD/NXDSlEhGsS92ZRdMy2A5yMlth+VI9y+lufKccEzE= Subject key identifier: EF:B4:66:3F:95:1E:1B:AD:4A:1B:2A:2C:F6:82:44:36:43:A8:5E:CB Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: 01A1 Signing time: Fri 19 Sep 2025 03:50:52 +0000 Manifest this update: Fri 19 Sep 2025 03:50:52 +0000 Manifest next update: Fri 26 Sep 2025 03:50:52 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: aG36Kado3nOgx5pZjAACL414KPu/3wXn0p23n6gnHd4=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: d9bjtW0ZUYjonxEE3MZfuZxfLKtEPtuzgQGXr7LUJRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Sep 19 03:50:52 2025 GMT Not After : Sep 26 03:50:52 2025 GMT Subject: CN=68ccd31c-6cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:8f:4f:24:ae:81:40:bb:d6:b7:25:ba:1c: df:ab:7a:43:3c:cf:68:ee:5d:b0:4a:25:97:5f:a1: e1:d2:44:3e:2b:02:21:8e:4a:41:1b:d2:7e:8d:d0: 67:a5:83:09:76:3b:7f:01:aa:db:9d:33:f9:b8:cc: a2:e6:ca:8b:76:17:a1:16:bb:fd:04:7b:c3:0f:9b: 1a:2f:e3:a9:6e:de:b8:f5:72:2e:38:94:c3:89:8b: b8:32:11:3d:d7:93:b3:cc:fd:4f:0b:68:02:fc:2f: d5:61:e6:48:ba:84:17:6a:af:8e:36:57:cc:e8:30: df:e1:02:8e:9e:15:4d:01:c2:6c:ea:f9:66:3f:18: ee:cf:9d:e2:3a:53:aa:b8:49:34:c2:d0:10:88:e8: 90:5b:bb:b3:a3:49:b1:ff:45:e6:48:49:83:84:c0: 3d:86:98:79:62:d2:6f:e2:c7:7d:cd:c0:92:17:90: 78:27:c6:2c:3c:5d:b8:1b:b7:cc:f4:d3:cd:b8:bb: da:32:67:ed:9d:77:de:71:1a:00:d0:55:23:ac:84: fb:fa:3e:2c:6e:e9:c7:ec:66:c8:a6:7b:81:4b:d5: ba:ca:44:0d:6e:f2:1b:cc:04:5a:76:3d:c3:10:7e: 24:5d:eb:f4:75:8a:07:50:46:e5:61:d9:1e:02:e5: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:66:3F:95:1E:1B:AD:4A:1B:2A:2C:F6:82:44:36:43:A8:5E:CB X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ce:b5:84:95:99:fa:66:68:c8:92:3a:cb:33:b5:8f:db:af: b3:ea:33:94:35:79:65:80:7d:5b:ab:16:40:36:ff:bf:35:d0: a9:06:21:2e:3e:e1:10:39:1f:7b:24:a6:e2:ef:73:ad:5f:26: bc:3b:77:c0:0d:16:7c:d6:6b:94:41:de:9b:f8:32:37:89:d3: 18:dd:84:11:35:93:fc:9e:01:3a:56:c8:0b:98:a4:fa:07:16: da:43:32:32:0c:3d:b6:19:d8:dc:4d:d9:75:3c:02:15:86:f6: e0:a3:34:48:c7:89:d6:ae:9d:55:52:2e:64:e5:00:ec:d2:18: 54:55:3e:1f:9b:4f:a9:e6:c8:0c:31:82:fb:13:14:b3:66:18: d6:2d:ca:55:2c:0f:d0:81:9b:93:d5:62:4d:4a:eb:f5:3a:ae: 74:49:48:da:27:45:50:eb:55:f0:fb:33:61:d7:9e:48:1a:b3: 4a:67:07:5d:b1:b7:51:56:02:c5:fc:bc:bf:e6:64:ca:93:33: 84:02:2e:6d:c5:e5:23:15:f8:40:64:7e:8c:81:10:b1:1b:74: a2:65:9a:d6:84:a6:94:8f:db:2e:72:51:5b:41:bd:53:60:e1: 58:b1:a0:7f:86:94:ea:73:62:c2:12:2e:f3:ac:3d:9d:75:44: 30:2a:d4:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUwOTE5MDM1MDUyWhcNMjUwOTI2MDM1MDUyWjAYMRYwFAYD VQQDEw02OGNjZDMxYy02Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHiPTySugUC71rcluhzfq3pDPM9o7l2wSiWXX6Hh0kQ+KwIhjkpBG9J+jdBn pYMJdjt/AarbnTP5uMyi5sqLdhehFrv9BHvDD5saL+Opbt649XIuOJTDiYu4MhE9 15OzzP1PC2gC/C/VYeZIuoQXaq+ONlfM6DDf4QKOnhVNAcJs6vlmPxjuz53iOlOq uEk0wtAQiOiQW7uzo0mx/0XmSEmDhMA9hph5YtJv4sd9zcCSF5B4J8YsPF24G7fM 9NPNuLvaMmftnXfecRoA0FUjrIT7+j4sbunH7GbIpnuBS9W6ykQNbvIbzARadj3D EH4kXev0dYoHUEblYdkeAuVvmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+0Zj+V HhutShsqLPaCRDZDqF7LMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWzrWElZn6ZmjIkjrLM7WP26+z6jOUNXllgH1bqxZANv+/NdCpBiEu PuEQOR97JKbi73OtXya8O3fADRZ81muUQd6b+DI3idMY3YQRNZP8ngE6VsgLmKT6 BxbaQzIyDD22GdjcTdl1PAIVhvbgozRIx4nWrp1VUi5k5QDs0hhUVT4fm0+p5sgM MYL7ExSzZhjWLcpVLA/QgZuT1WJNSuv1Oq50SUjaJ0VQ61Xw+zNh155IGrNKZwdd sbdRVgLF/Ly/5mTKkzOEAi5txeUjFfhAZH6MgRCxG3SiZZrWhKaUj9suclFbQb1T YOFYsaB/hpTqc2LCEi7zrD2ddUQwKtRB -----END CERTIFICATE-----Generated at Fri Sep 19 05:15:23 2025 by rpki-client