$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft File: fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json) Hash identifier: OQolWnLAMsjZGl5BNCs5wxe5fxsXMkDIKTdwb3ro8O0= Subject key identifier: 1D:B8:82:82:EE:79:BB:1B:9D:8C:1C:87:A4:9D:2F:39:35:C2:96:38 Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED Certificate issuer: /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft Manifest number: 0659 Signing time: Thu 18 Sep 2025 22:54:17 +0000 Manifest this update: Thu 18 Sep 2025 22:54:16 +0000 Manifest next update: Thu 25 Sep 2025 22:54:16 +0000 Files and hashes: 1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: YgDkK3gbBprIlsSOdceAg7WYM/h+BKI7gf4Wq6j03eE=) 2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: PnsQbPIDSKRSyuK7eLM7Vk6MM+x0Uzj1WuRP+vxtrpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Validity Not Before: Sep 18 22:54:16 2025 GMT Not After : Sep 25 22:54:16 2025 GMT Subject: CN=68cc8d99-2ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:09:b5:4a:50:85:37:cd:f1:88:be:06:68: d4:80:05:06:8d:98:53:ad:8c:19:ef:48:3f:58:14: b1:4f:2d:c8:fa:91:11:1c:39:41:92:3e:db:fa:e9: 48:42:05:fe:70:85:20:b4:09:58:8c:e4:22:e9:19: c4:71:69:27:fd:b2:34:a6:74:68:ea:cb:89:46:08: 80:38:2e:e4:62:9b:ff:0e:8e:af:c6:22:7e:46:3b: b5:55:84:ef:bf:cf:b4:87:c1:7d:69:3a:ef:ba:68: 96:83:16:21:b2:74:c3:25:6e:6e:15:aa:a3:87:50: f5:b7:47:d9:66:d8:d7:a0:03:77:25:73:bd:db:22: 04:74:7a:58:c3:ad:e5:5e:0c:dc:b8:6e:25:ff:79: 27:2e:68:eb:a5:23:05:28:ef:f0:99:46:f5:87:91: 97:2b:b4:db:7d:aa:71:b2:c2:ee:e8:ba:ed:82:6a: ea:6e:83:22:fb:ef:0b:46:fa:62:34:e9:03:ff:37: c1:ee:77:ad:48:5b:c7:1f:17:81:42:e9:0a:d5:82: 78:81:95:fa:44:5d:4b:71:c9:cb:3e:5a:4c:34:c6: fc:d7:33:cc:29:36:0b:59:0c:b3:ce:21:c6:d7:e3: 54:82:86:ec:03:a6:78:4a:19:3a:54:a9:0e:5f:9e: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B8:82:82:EE:79:BB:1B:9D:8C:1C:87:A4:9D:2F:39:35:C2:96:38 X509v3 Authority Key Identifier: keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:28:8c:9e:e5:48:a0:45:33:08:41:63:88:2f:be:07:fc:8a: eb:fc:d4:37:62:b4:aa:00:8d:f9:d2:2a:a0:80:9b:2c:b1:d7: f1:c1:22:ca:65:cf:1f:80:66:49:67:f0:d5:a0:88:07:e4:36: 01:66:92:a4:ab:d3:7f:90:f7:06:a7:dc:0b:d2:8a:4f:ec:9d: a0:25:1b:67:f4:fb:6e:34:37:fb:c0:08:94:ed:8e:ea:df:df: a0:da:ab:7b:a5:2b:cd:8d:3f:96:ba:14:59:5c:6b:b7:ff:4b: aa:ff:71:1a:66:3f:7a:9f:42:b3:3e:57:ce:04:b2:a1:8c:55: 97:5e:b2:d1:a8:0b:cf:9e:08:67:35:9b:d3:f2:83:b4:0b:26: 60:25:53:cd:93:16:10:ef:1d:22:02:53:36:8a:76:11:79:ec: 37:79:fb:85:5a:46:3e:c5:9d:f6:27:32:d9:cc:56:14:41:41: 8a:9b:05:6b:09:6f:29:ca:1c:d9:9b:81:c2:62:b8:ff:a0:82: a6:aa:7c:c2:c9:b8:6b:df:0f:d0:1a:ba:ee:51:13:5a:ce:6c: 2a:34:be:ab:7c:87:2e:a2:42:d4:fc:e0:6c:0a:86:48:30:5c: 0c:75:c8:a9:a0:31:fd:89:99:c5:f8:af:98:95:61:c9:c7:7e: 7e:a9:68:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG M0IwODlBRUQwHhcNMjUwOTE4MjI1NDE2WhcNMjUwOTI1MjI1NDE2WjAYMRYwFAYD VQQDEw02OGNjOGQ5OS0yY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtcJtUpQhTfN8Yi+BmjUgAUGjZhTrYwZ70g/WBSxTy3I+pERHDlBkj7b+ulI QgX+cIUgtAlYjOQi6RnEcWkn/bI0pnRo6suJRgiAOC7kYpv/Do6vxiJ+Rju1VYTv v8+0h8F9aTrvumiWgxYhsnTDJW5uFaqjh1D1t0fZZtjXoAN3JXO92yIEdHpYw63l XgzcuG4l/3knLmjrpSMFKO/wmUb1h5GXK7TbfapxssLu6LrtgmrqboMi++8LRvpi NOkD/zfB7netSFvHHxeBQukK1YJ4gZX6RF1LccnLPlpMNMb81zPMKTYLWQyzziHG 1+NUgobsA6Z4Shk6VKkOX559KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB24goLu ebsbnYwch6SdLzk1wpY4MB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3 NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpKIye5UigRTMIQWOIL74H/Irr/NQ3YrSqAI350iqggJsssdfxwSLK Zc8fgGZJZ/DVoIgH5DYBZpKkq9N/kPcGp9wL0opP7J2gJRtn9PtuNDf7wAiU7Y7q 39+g2qt7pSvNjT+WuhRZXGu3/0uq/3EaZj96n0KzPlfOBLKhjFWXXrLRqAvPnghn NZvT8oO0CyZgJVPNkxYQ7x0iAlM2inYReew3efuFWkY+xZ32JzLZzFYUQUGKmwVr CW8pyhzZm4HCYrj/oIKmqnzCybhr3w/QGrruURNazmwqNL6rfIcuokLU/OBsCoZI MFwMdcipoDH9iZnF+K+YlWHJx35+qWh3 -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:35 2025 by rpki-client