$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: 2C5hHiPVOiPQAId0CbPjMtcBZ0GjqHwuXCqrbZvbRHU= Subject key identifier: E0:60:1C:40:15:2A:BD:CC:52:47:A0:15:F4:75:63:67:8A:C6:A1:E7 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B9B Signing time: Thu 04 Sep 2025 19:38:27 +0000 Manifest this update: Thu 04 Sep 2025 19:38:26 +0000 Manifest next update: Thu 11 Sep 2025 19:38:26 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: C0O0ZCc9+tPZX/x7hFJOnaYXWs6Y7mZrUkuS4LmD+fE=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) 6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 9: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) 10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Sep 4 19:38:26 2025 GMT Not After : Sep 11 19:38:26 2025 GMT Subject: CN=68b9eab2-2717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:6e:a4:1c:aa:73:44:f3:a5:e2:ab:a1:24: 8a:a5:54:fb:79:d9:05:43:4b:2a:64:ac:55:b1:27: 96:c5:df:f9:ff:98:ee:f4:b7:24:33:9a:97:cd:00: 68:7f:61:d7:7e:36:17:c6:f9:81:91:3c:6e:15:19: 90:db:e2:c9:52:5b:05:8d:14:38:c3:44:d2:7f:6f: f6:b0:25:ea:a5:fb:74:ab:ab:27:9d:33:4c:1e:95: b7:ed:7a:1b:6f:ef:1c:41:00:53:ab:bf:0a:3f:a2: e6:40:ed:23:a0:99:bd:9b:6e:d4:43:b9:61:66:1a: cb:be:f7:58:6f:ae:e3:0e:9d:1c:74:37:96:a2:79: c7:62:57:44:c0:7d:e1:37:12:b7:40:66:08:6f:23: ce:f8:2c:6d:a2:db:51:bf:c0:7a:7e:8f:95:23:5f: 75:30:0f:ff:72:70:88:9a:a8:3e:9f:82:db:a1:53: 61:f9:29:f6:e1:7c:b4:f8:c0:6d:a9:65:80:9f:58: 29:95:04:19:3c:61:bb:fd:28:e4:38:43:d2:31:8e: bd:ee:41:ca:d4:e0:92:52:d7:50:2f:88:6c:57:9a: f3:3e:af:bc:d5:ec:ae:c5:74:fc:95:90:66:ae:91: c4:e3:f2:59:ed:2f:e7:32:93:5a:b7:f7:9f:bf:a7: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:60:1C:40:15:2A:BD:CC:52:47:A0:15:F4:75:63:67:8A:C6:A1:E7 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0a:78:9f:8d:0b:cb:63:a3:cc:42:0c:56:16:11:d3:a8:48: d7:3a:b1:90:40:79:b6:61:d9:00:cb:77:a6:26:5c:02:33:75: fe:29:92:da:3f:98:6e:35:e5:31:c4:8c:3d:12:38:2d:1c:5b: cc:34:52:ad:86:9b:10:77:fc:fe:8f:f9:69:93:d2:eb:3e:91: c0:46:01:47:cf:3e:da:ba:09:42:9e:92:69:bf:58:1f:82:8d: 60:31:52:64:93:3f:0a:d3:40:e3:ce:f5:2d:05:c4:77:a7:51: d0:13:23:d9:cc:8c:7b:4b:d6:f4:46:6f:ae:d6:9c:4b:31:5a: fb:af:cd:77:a4:18:4b:4f:d1:35:a9:30:22:37:1f:8b:8f:1a: aa:65:7e:15:39:3e:44:87:af:1c:1e:54:4b:75:73:21:11:3c: 7b:c9:5e:06:c3:fe:a2:ff:c0:f1:87:39:97:5c:25:2f:4b:41: c6:36:b3:ac:23:3d:78:ba:2d:7f:09:df:d4:08:dc:1d:cc:af: e6:1a:3a:93:d4:86:76:ba:9b:2e:fb:f6:3d:78:c9:5d:2f:37: 37:3a:18:1e:32:34:e6:58:f8:c7:55:98:fa:11:94:d2:6a:fc: ba:a3:55:71:69:16:ea:ab:cb:ee:2d:6d:34:c5:e8:83:a0:3e: ca:7f:1e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwOTA0MTkzODI2WhcNMjUwOTExMTkzODI2WjAYMRYwFAYD VQQDEw02OGI5ZWFiMi0yNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpRupByqc0TzpeKroSSKpVT7edkFQ0sqZKxVsSeWxd/5/5ju9LckM5qXzQBo f2HXfjYXxvmBkTxuFRmQ2+LJUlsFjRQ4w0TSf2/2sCXqpft0q6snnTNMHpW37Xob b+8cQQBTq78KP6LmQO0joJm9m27UQ7lhZhrLvvdYb67jDp0cdDeWonnHYldEwH3h NxK3QGYIbyPO+CxtottRv8B6fo+VI191MA//cnCImqg+n4LboVNh+Sn24Xy0+MBt qWWAn1gplQQZPGG7/SjkOEPSMY697kHK1OCSUtdQL4hsV5rzPq+81eyuxXT8lZBm rpHE4/JZ7S/nMpNat/efv6c8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBgHEAV Kr3MUkegFfR1Y2eKxqHnMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnCnifjQvLY6PMQgxWFhHTqEjXOrGQQHm2YdkAy3emJlwCM3X+KZLa P5huNeUxxIw9EjgtHFvMNFKthpsQd/z+j/lpk9LrPpHARgFHzz7auglCnpJpv1gf go1gMVJkkz8K00DjzvUtBcR3p1HQEyPZzIx7S9b0Rm+u1pxLMVr7r813pBhLT9E1 qTAiNx+LjxqqZX4VOT5Eh68cHlRLdXMhETx7yV4Gw/6i/8DxhzmXXCUvS0HGNrOs Iz14ui1/Cd/UCNwdzK/mGjqT1IZ2upsu+/Y9eMldLzc3OhgeMjTmWPjHVZj6EZTS avy6o1VxaRbqq8vuLW00xeiDoD7Kfx4s -----END CERTIFICATE-----Generated at Sat Sep 6 07:01:05 2025 by rpki-client