$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: RxV5WIRWRuoSohoZm9YL9QCJwmXDCFnWacbFssAesrA= Subject key identifier: C5:0B:CF:0B:15:B5:15:96:2B:28:0E:20:1B:DD:DB:A5:17:06:97:1A Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C77 Signing time: Thu 18 Sep 2025 18:36:49 +0000 Manifest this update: Thu 18 Sep 2025 18:36:48 +0000 Manifest next update: Thu 25 Sep 2025 18:36:48 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: RUJS5ntE4MrvE4Q3Z8VrS2jwHxHcmsnBovk+upq2BGU=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Sep 18 18:36:48 2025 GMT Not After : Sep 25 18:36:48 2025 GMT Subject: CN=68cc5141-c657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:7f:bb:f4:ce:be:b0:18:54:7a:12:6f:d0: fa:ea:66:a1:b7:20:05:95:51:0c:a1:57:b9:06:dc: 3f:32:3c:d3:4f:04:67:14:5a:b9:c6:35:91:f6:db: 8b:cf:a6:58:2b:93:cc:6d:92:52:c6:28:aa:eb:8f: 72:92:5a:89:dc:56:89:66:01:b2:c0:8e:6e:53:ef: 5f:af:1c:29:9e:37:85:f7:d4:42:26:11:9d:17:38: a0:0f:45:82:d1:6a:2a:0d:9d:30:4e:b3:be:a2:92: c0:e8:0e:4f:d4:2a:e7:af:7a:ee:c3:bf:ea:d8:b7: e3:d8:11:4b:d2:55:a5:d2:95:35:f5:f8:a4:a4:bf: 6c:5e:1a:90:02:bf:c5:22:a2:a6:09:22:11:a6:a3: de:53:37:60:a5:d3:14:ca:6f:c9:5f:09:f6:44:e5: 10:a1:49:8e:ad:1b:c1:2d:cc:80:00:27:f5:4c:62: ab:74:38:fd:0a:ad:7b:5a:3d:2c:e5:1a:96:31:f0: 22:73:64:90:e6:03:b9:2f:2a:ef:f5:99:c7:70:dc: 2f:cd:fe:4c:5b:18:96:c8:63:f2:31:88:3a:17:66: 13:88:8a:70:59:67:00:f5:5b:9b:b4:3b:dc:51:a0: 61:2c:7e:58:cc:8a:e6:26:b5:24:af:1f:4a:3c:9f: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:CF:0B:15:B5:15:96:2B:28:0E:20:1B:DD:DB:A5:17:06:97:1A X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:9b:67:e7:6a:9e:93:94:c8:a5:cc:da:1a:eb:c0:2b:35: 5b:d0:f0:a2:98:71:54:c2:55:78:3e:1a:6c:62:02:70:87:71: 26:67:c0:22:cc:6d:fe:fd:7c:4a:85:73:5e:94:94:17:82:e3: 1c:29:f1:84:77:18:2a:29:c4:fe:9a:b8:96:6f:ec:71:f5:d4: 4d:37:cb:f5:5f:ae:ae:58:e2:11:36:2d:5f:76:20:26:8a:b9: af:be:55:a2:c2:aa:84:e4:c2:76:25:75:81:08:26:64:a5:ad: 50:d0:f4:95:60:f1:9a:1e:8b:6c:98:a0:a0:2e:6c:a8:d4:25: f6:d6:c7:52:05:31:e9:2f:3c:d6:14:cc:a9:b0:a7:21:73:45: 5f:5a:1c:d2:7b:d4:1b:e7:c3:39:42:c5:ef:5f:b4:e6:0f:cc: cf:f7:ab:cf:39:ae:1b:88:93:20:fb:96:24:74:11:db:4e:b8: be:0e:52:c0:41:bb:b7:15:85:98:00:17:5a:16:95:7d:1a:18: fc:f2:15:93:b6:50:89:6b:a2:aa:7d:41:59:0e:45:e8:fc:d9: 1f:b6:4f:99:b6:e3:ad:20:70:e3:26:c5:c1:d4:31:12:32:2c: 1a:08:e0:93:f3:8f:d2:70:79:d0:42:90:4c:32:af:96:52:c6: 1b:99:8f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwOTE4MTgzNjQ4WhcNMjUwOTI1MTgzNjQ4WjAYMRYwFAYD VQQDEw02OGNjNTE0MS1jNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIF/u/TOvrAYVHoSb9D66mahtyAFlVEMoVe5Btw/MjzTTwRnFFq5xjWR9tuL z6ZYK5PMbZJSxiiq649yklqJ3FaJZgGywI5uU+9frxwpnjeF99RCJhGdFzigD0WC 0WoqDZ0wTrO+opLA6A5P1Crnr3ruw7/q2Lfj2BFL0lWl0pU19fikpL9sXhqQAr/F IqKmCSIRpqPeUzdgpdMUym/JXwn2ROUQoUmOrRvBLcyAACf1TGKrdDj9Cq17Wj0s 5RqWMfAic2SQ5gO5Lyrv9ZnHcNwvzf5MWxiWyGPyMYg6F2YTiIpwWWcA9VubtDvc UaBhLH5YzIrmJrUkrx9KPJ+i2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMULzwsV tRWWKygOIBvd26UXBpcaMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPv5tn52qek5TIpczaGuvAKzVb0PCimHFUwlV4PhpsYgJwh3EmZ8Ai zG3+/XxKhXNelJQXguMcKfGEdxgqKcT+mriWb+xx9dRNN8v1X66uWOIRNi1fdiAm irmvvlWiwqqE5MJ2JXWBCCZkpa1Q0PSVYPGaHotsmKCgLmyo1CX21sdSBTHpLzzW FMypsKchc0VfWhzSe9Qb58M5QsXvX7TmD8zP96vPOa4biJMg+5YkdBHbTri+DlLA Qbu3FYWYABdaFpV9Ghj88hWTtlCJa6KqfUFZDkXo/Nkftk+ZtuOtIHDjJsXB1DES MiwaCOCT84/ScHnQQpBMMq+WUsYbmY+z -----END CERTIFICATE-----Generated at Fri Sep 19 04:07:30 2025 by rpki-client