$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft File: FWbBYbuz41NHqXrE1YFtjt5UIY4.mft (raw, json) Hash identifier: QrIXHIWJ9Ztx6UPVw/0GZXpQk9ZqU7dOi7YcbQfZcZA= Subject key identifier: 07:25:D8:0B:B0:D5:D9:B5:F0:F5:38:CE:30:A9:E6:72:DE:53:F7:66 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft Manifest number: 0E Signing time: Tue 01 Jul 2025 08:53:35 +0000 Manifest this update: Tue 01 Jul 2025 08:53:35 +0000 Manifest next update: Tue 08 Jul 2025 08:53:35 +0000 Files and hashes: 1: FWbBYbuz41NHqXrE1YFtjt5UIY4.crl (hash: BKTB3iPbFtu8xoxtyGc/nVAFb9zT9R4wyKq0B32WWRc=) 2: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (hash: yO04AY7QLHjRPUPcniLxzPjcVxS3CSh7vc358kz20Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Jul 1 08:53:35 2025 GMT Not After : Jul 8 08:53:35 2025 GMT Subject: CN=6863a20f-1931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:05:eb:7e:ef:e5:7b:ee:32:92:7c:4b:a9: 3e:13:1b:6e:6d:1a:e8:38:8e:1b:a8:31:ec:bc:68: 9b:f3:08:48:07:05:ad:56:a6:93:1a:99:eb:b4:8e: 52:b3:5c:86:f1:6f:e2:f8:f2:a7:35:1d:a3:0b:5b: 71:50:8b:1b:97:04:d2:01:60:45:cc:f4:53:84:c1: df:a1:a5:d3:73:8e:88:78:14:e8:ce:9f:47:36:14: 3c:0b:f8:72:c5:06:65:f5:54:65:c2:10:b4:39:11: e4:99:4c:af:fc:f0:eb:94:0f:76:1e:9c:dc:d0:b2: 00:01:09:09:90:21:98:5e:f2:85:3c:81:94:86:a2: c4:7b:7d:d8:06:7c:93:26:a9:2a:b8:1d:77:65:52: 16:b4:b0:c5:27:17:c3:47:31:d3:aa:4f:84:67:1f: a5:1b:fa:f7:f1:59:b9:c6:56:6e:be:19:a2:f3:de: d9:b8:45:97:07:d9:d6:54:ee:01:ec:50:01:c0:a6: 4e:34:19:17:9c:76:d1:b4:f6:ea:91:7f:c0:b3:7d: a7:ff:43:ff:31:28:6f:4a:a4:02:f3:00:5f:61:43: 13:f5:3b:6c:e2:81:cb:0b:36:89:85:a8:ac:7c:f9: dc:e4:1a:65:17:bf:00:2c:87:ba:f1:78:67:d4:b8: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:25:D8:0B:B0:D5:D9:B5:F0:F5:38:CE:30:A9:E6:72:DE:53:F7:66 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9f:d7:92:71:01:de:29:e9:3d:0d:7d:35:bd:04:ea:6e:38: a1:d7:7e:12:1c:2b:85:1b:6f:ef:9f:a0:de:be:dd:cd:06:6b: 7f:7a:92:53:5c:12:70:d1:64:11:fc:9a:49:ec:61:88:79:04: 5d:22:eb:ea:ec:1e:4e:b6:90:30:42:8f:fa:fc:4f:8d:98:2e: a4:e6:02:a1:80:0a:71:49:b8:5b:27:22:a1:17:5c:8d:28:31: 4e:31:ef:75:17:a3:e0:37:37:87:96:93:a6:f6:a7:a9:13:5b: a1:d9:64:84:5e:b0:e7:0a:63:11:3e:a2:3b:83:e2:13:12:aa: 8a:6d:f8:bf:ee:d7:41:63:48:df:45:d5:9c:ee:6d:d7:02:f3: a5:ff:06:43:46:56:6e:3d:69:18:c9:50:85:b2:17:c5:6b:88: af:ae:a2:e7:8d:86:f8:06:76:63:e9:ad:45:09:4a:ea:2a:55: 0b:33:00:96:f5:7a:dc:99:68:04:c2:58:91:5a:a0:5e:cc:1b: 08:3d:46:da:98:90:e7:c2:c2:c7:f2:e9:69:d1:4d:f6:1b:2c: 0d:cc:37:7f:f0:bf:28:f2:80:92:e9:c1:d5:a5:cb:73:54:aa: 43:41:47:ce:d6:af:d9:23:0b:66:b4:d5:76:00:07:08:e2:fd: 1f:6d:2d:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA3MDEwODUzMzVaFw0yNTA3MDgwODUzMzVaMBgxFjAUBgNV BAMTDTY4NjNhMjBmLTE5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGZwXrfu/le+4yknxLqT4TG25tGug4jhuoMey8aJvzCEgHBa1WppMameu0jlKz XIbxb+L48qc1HaMLW3FQixuXBNIBYEXM9FOEwd+hpdNzjoh4FOjOn0c2FDwL+HLF BmX1VGXCELQ5EeSZTK/88OuUD3YenNzQsgABCQmQIZhe8oU8gZSGosR7fdgGfJMm qSq4HXdlUha0sMUnF8NHMdOqT4RnH6Ub+vfxWbnGVm6+GaLz3tm4RZcH2dZU7gHs UAHApk40GRecdtG09uqRf8Czfaf/Q/8xKG9KpALzAF9hQxP1O2zigcsLNomFqKx8 +dzkGmUXvwAsh7rxeGfUuORzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUByXYC7DV 2bXw9TjOMKnmct5T92YwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzgyNDhFOTE0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFO SHFYckUxWUZ0anQ1VUlZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABuf15JxAd4p6T0NfTW9BOpuOKHXfhIcK4Ubb++foN6+3c0Ga396klNc EnDRZBH8mknsYYh5BF0i6+rsHk62kDBCj/r8T42YLqTmAqGACnFJuFsnIqEXXI0o MU4x73UXo+A3N4eWk6b2p6kTW6HZZIResOcKYxE+ojuD4hMSqopt+L/u10FjSN9F 1ZzubdcC86X/BkNGVm49aRjJUIWyF8VriK+uoueNhvgGdmPprUUJSuoqVQszAJb1 etyZaATCWJFaoF7MGwg9RtqYkOfCwsfy6WnRTfYbLA3MN3/wvyjygJLpwdWly3NU qkNBR87Wr9kjC2a01XYABwji/R9tLeI= -----END CERTIFICATE-----Generated at Wed Jul 2 13:24:58 2025 by rpki-client