$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json) Hash identifier: oAnoZXc8bgEystqOMhMBEt8egnz+cag0ybOAEujwefg= Subject key identifier: 92:9F:B7:35:60:C3:11:86:EF:E3:FC:CD:77:27:13:FE:88:75:A8:91 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft Manifest number: 32 Signing time: Fri 05 Sep 2025 08:10:53 +0000 Manifest this update: Fri 05 Sep 2025 08:10:53 +0000 Manifest next update: Fri 12 Sep 2025 08:10:53 +0000 Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: m75UG12QBUtraxGwehdGYZwM3o93SnurDwfCBrp6J6g=) 2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: kwHBlGIR+jm5Ej5kABIZ/iPvo1ebkMi20lOVX9QW4oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Sep 5 08:10:53 2025 GMT Not After : Sep 12 08:10:53 2025 GMT Subject: CN=68ba9b0d-6c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7d:66:ed:ab:ec:97:a6:26:83:bc:09:96:bf: a0:92:5b:c1:57:e5:1a:2b:d3:0d:3a:df:fc:01:f5: a2:a2:24:f7:f5:8c:1c:6a:d1:e5:37:3a:40:ae:36: 0d:f0:8d:18:9c:53:6b:d4:06:06:64:6d:f7:8a:73: 3e:39:44:91:1c:19:56:06:10:a4:fa:6a:0f:45:d0: 06:94:4b:af:13:ea:41:31:f3:d5:34:63:1a:bd:ec: 66:ed:80:fa:8b:75:15:e0:88:cf:5d:75:28:37:2f: ef:3c:59:13:2a:7c:bd:51:0a:c3:90:3b:dc:5e:31: 52:a8:09:05:09:00:76:95:50:e5:0e:c2:94:d9:b3: a6:03:a3:fd:69:1f:3e:6f:ff:1a:da:5f:00:be:21: bc:9b:a5:97:c1:8c:f8:73:c8:ff:27:d9:8a:72:29: bd:28:c9:6d:a3:c5:f9:59:e7:de:64:23:15:5f:8e: ee:52:b3:43:5b:65:53:3a:cd:d8:95:68:75:64:02: 09:af:71:eb:15:4f:70:ea:7f:b2:48:58:d3:da:7b: c2:f9:55:35:fe:4c:42:a4:67:a3:14:d2:e2:dd:d3: 12:bf:d5:02:bb:28:1a:b6:41:f7:9d:48:3c:89:23: 77:66:aa:d0:ea:d0:23:7a:ed:35:20:55:93:ed:e4: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:B7:35:60:C3:11:86:EF:E3:FC:CD:77:27:13:FE:88:75:A8:91 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2b:40:46:f7:2d:e6:3d:63:0f:b7:e0:25:8a:0e:12:1c:61: 63:c9:30:59:be:28:51:5b:00:48:ed:51:6e:21:a5:0d:ea:cc: c9:a8:5e:e6:c2:df:63:89:e4:5b:d1:87:47:2e:f8:3e:d1:94: a3:88:3c:79:e0:a9:00:89:a0:4a:8f:62:c4:83:11:44:73:24: a2:b9:dd:71:81:58:5b:12:82:dd:b1:2b:43:d6:9e:c0:3d:73: 5f:21:71:db:b1:d2:dc:f8:a6:20:ce:ac:17:e1:e8:8b:1c:83: cd:8e:2c:25:cd:73:2e:24:61:6a:91:ec:3d:6c:08:be:20:b6: 00:58:dc:01:b8:12:28:ef:ae:9c:99:e7:95:44:09:1f:fb:76: a5:51:34:c0:ae:c4:87:10:09:95:c1:d3:ad:5f:9a:2e:4a:18: 38:85:c5:a3:64:15:84:92:7d:79:f0:f4:25:59:2b:f3:5a:72: 08:df:00:32:df:20:92:e9:e0:bd:e2:8f:25:1d:13:92:5f:c4: e3:12:f6:37:c1:dd:03:06:33:f5:90:72:66:f5:26:51:23:d0: e9:e8:14:06:d8:d7:ed:e4:f2:a5:65:89:14:4c:84:27:4c:5b: 42:ca:e0:8f:aa:6e:75:1c:eb:8a:79:d3:ab:e4:ec:b7:53:3c: 2e:bd:a3:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA5MDUwODEwNTNaFw0yNTA5MTIwODEwNTNaMBgxFjAUBgNV BAMTDTY4YmE5YjBkLTZjNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlfWbtq+yXpiaDvAmWv6CSW8FX5Ror0w063/wB9aKiJPf1jBxq0eU3OkCuNg3w jRicU2vUBgZkbfeKcz45RJEcGVYGEKT6ag9F0AaUS68T6kEx89U0Yxq97GbtgPqL dRXgiM9ddSg3L+88WRMqfL1RCsOQO9xeMVKoCQUJAHaVUOUOwpTZs6YDo/1pHz5v /xraXwC+IbybpZfBjPhzyP8n2YpyKb0oyW2jxflZ595kIxVfju5Ss0NbZVM6zdiV aHVkAgmvcesVT3Dqf7JIWNPae8L5VTX+TEKkZ6MU0uLd0xK/1QK7KBq2QfedSDyJ I3dmqtDq0CN67TUgVZPt5JIVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkp+3NWDD EYbv4/zNdycT/oh1qJEwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzgyNDhFOTE0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFO SHFYckUxWUZ0anQ1VUlZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQrQEb3LeY9Yw+34CWKDhIcYWPJMFm+KFFbAEjtUW4hpQ3qzMmoXubC 32OJ5FvRh0cu+D7RlKOIPHngqQCJoEqPYsSDEURzJKK53XGBWFsSgt2xK0PWnsA9 c18hcdux0tz4piDOrBfh6Iscg82OLCXNcy4kYWqR7D1sCL4gtgBY3AG4EijvrpyZ 55VECR/7dqVRNMCuxIcQCZXB061fmi5KGDiFxaNkFYSSfXnw9CVZK/NacgjfADLf IJLp4L3ijyUdE5JfxOMS9jfB3QMGM/WQcmb1JlEj0OnoFAbY1+3k8qVliRRMhCdM W0LK4I+qbnUc64p506vk7LdTPC69ozQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client