$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: pcu/aNiKQqLH+J/YxjeqM8dwcnqmq5uhjxIC3JIgCpg= Subject key identifier: 36:93:AD:50:A8:2E:C5:80:A3:21:32:6A:4C:AC:22:33:E6:0A:94:47 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 0257 Signing time: Tue 09 Sep 2025 01:53:11 +0000 Manifest this update: Tue 09 Sep 2025 01:53:10 +0000 Manifest next update: Tue 16 Sep 2025 01:53:10 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: 5LPfFCbiWJpBIKoCnl6Nlb2XozmhwPE5t0/rseWLJ9E=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Sep 9 01:53:10 2025 GMT Not After : Sep 16 01:53:10 2025 GMT Subject: CN=68bf8886-6cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:a5:a2:25:c4:c8:aa:71:0c:37:8e:7c:4a: 98:4c:13:b0:9a:ee:38:9e:99:56:45:1b:ff:1e:17: bd:03:f5:83:38:00:2d:bb:d9:1e:3c:55:e0:57:af: f1:48:de:e3:31:56:20:f2:93:f5:93:c7:68:e8:80: 71:30:83:c7:5d:00:b5:11:b8:a3:cc:d7:65:33:ab: 66:5d:1c:e7:dd:92:af:8a:bc:ef:57:bd:91:d2:b8: 2c:9f:23:04:1e:f3:cb:34:b5:c9:6f:e8:48:da:3a: 69:38:ea:4f:26:cd:c8:b7:28:09:af:34:04:c4:25: 50:bf:3c:bc:86:5e:9d:61:00:33:63:26:45:bb:82: f1:44:6c:91:22:a4:f7:79:6d:d5:ca:d8:93:5f:d7: 72:8c:5f:52:ec:24:97:51:ac:f0:0a:69:b5:cc:2c: 42:4c:8b:fb:7b:72:57:f5:24:71:f8:3e:24:c1:b1: 19:48:87:b4:0b:48:c1:ff:80:48:2f:5d:32:97:f1: 2d:33:eb:33:df:b5:c0:4a:74:4e:5e:f7:f3:54:3e: 7b:26:6d:45:94:a3:bd:27:66:3b:95:99:6c:0f:f6: 16:d2:42:51:55:1d:76:76:05:df:8f:08:3a:39:8b: b8:43:ed:c3:ab:8e:af:85:14:70:a5:cd:4a:15:63: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:93:AD:50:A8:2E:C5:80:A3:21:32:6A:4C:AC:22:33:E6:0A:94:47 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:c7:7f:e0:ed:df:17:b5:4d:44:ef:ac:ea:c6:d5:01:b6:3c: 8e:75:08:d3:5b:b3:50:6f:bd:b0:69:59:76:b2:3c:e6:3d:ac: a3:8a:ce:e1:ae:8a:c1:1d:1f:e8:5f:74:e0:c8:17:ea:28:13: cb:91:76:12:6a:ef:5b:af:25:3a:ac:de:5f:58:b0:0f:fd:19: e0:49:53:e5:ae:28:59:65:3e:6f:5f:fb:92:33:3f:95:25:14: 7e:be:7c:24:b4:ff:0b:06:98:c3:af:7b:a5:16:96:50:a1:1b: dd:19:e9:7b:1e:aa:06:9b:e5:50:36:08:1e:ee:f0:f6:0f:79: 47:6a:d2:f6:61:64:9e:fb:5c:88:75:dd:5d:47:86:62:4b:f5: 29:bf:e9:10:00:e8:6a:c1:d1:8f:cb:74:5b:25:bc:57:c5:20: f5:00:9d:d4:10:9f:be:ed:09:bc:cf:db:c7:fe:b1:d7:15:70: af:e2:d4:71:a5:ef:ec:64:61:1c:b7:64:8e:e2:49:ea:9f:50: e5:b9:cd:aa:08:25:eb:e3:08:2f:46:b3:44:85:11:89:68:51: f2:38:a0:9c:0f:bb:30:87:f6:90:a5:6e:95:f2:ba:4d:b1:ed: 44:3e:45:c2:84:d4:5a:4e:68:4c:d0:81:b3:73:5d:85:e4:c1: 38:e8:00:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUwOTA5MDE1MzEwWhcNMjUwOTE2MDE1MzEwWjAYMRYwFAYD VQQDEw02OGJmODg4Ni02Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc2loiXEyKpxDDeOfEqYTBOwmu44nplWRRv/Hhe9A/WDOAAtu9kePFXgV6/x SN7jMVYg8pP1k8do6IBxMIPHXQC1EbijzNdlM6tmXRzn3ZKvirzvV72R0rgsnyME HvPLNLXJb+hI2jppOOpPJs3ItygJrzQExCVQvzy8hl6dYQAzYyZFu4LxRGyRIqT3 eW3VytiTX9dyjF9S7CSXUazwCmm1zCxCTIv7e3JX9SRx+D4kwbEZSIe0C0jB/4BI L10yl/EtM+sz37XASnROXvfzVD57Jm1FlKO9J2Y7lZlsD/YW0kJRVR12dgXfjwg6 OYu4Q+3Dq46vhRRwpc1KFWNIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaTrVCo LsWAoyEyakysIjPmCpRHMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZx3/g7d8XtU1E76zqxtUBtjyOdQjTW7NQb72waVl2sjzmPayjis7h rorBHR/oX3TgyBfqKBPLkXYSau9bryU6rN5fWLAP/RngSVPlrihZZT5vX/uSMz+V JRR+vnwktP8LBpjDr3ulFpZQoRvdGel7HqoGm+VQNgge7vD2D3lHatL2YWSe+1yI dd1dR4ZiS/Upv+kQAOhqwdGPy3RbJbxXxSD1AJ3UEJ++7Qm8z9vH/rHXFXCv4tRx pe/sZGEct2SO4knqn1Dluc2qCCXr4wgvRrNEhRGJaFHyOKCcD7swh/aQpW6V8rpN se1EPkXChNRaTmhM0IGzc12F5ME46ACO -----END CERTIFICATE-----Generated at Tue Sep 9 13:25:25 2025 by rpki-client