$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: Ajil1DF4yR1JCD3wK5AyWARxh6zTGEqQYtCYZMw386Y= Subject key identifier: 7B:04:09:15:C4:35:EE:AF:6C:F5:9E:74:95:F9:9C:FB:E0:18:51:E7 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F56 Signing time: Thu 18 Sep 2025 16:06:13 +0000 Manifest this update: Thu 18 Sep 2025 16:06:13 +0000 Manifest next update: Thu 25 Sep 2025 16:06:13 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: v6+sYT0NHov+3lVpA9VLL+wKoTWnM6mTK4+WnSsKWrM=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8035 (0x1f63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Sep 18 16:06:13 2025 GMT Not After : Sep 25 16:06:13 2025 GMT Subject: CN=68cc2df5-dc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:01:4d:9b:c3:7e:31:7d:22:33:b5:e5:1a: 55:25:81:7e:bd:75:9d:96:6d:bd:9c:66:85:c0:e2: 2b:a3:de:a1:97:e6:33:c4:54:f0:3b:da:0d:70:cf: 2f:4c:a3:29:4c:9a:be:9e:ab:01:04:57:ad:6b:b5: ec:fd:89:a7:6f:bb:b6:22:76:02:66:4f:a4:d3:02: 60:b9:98:70:2d:a4:5b:c1:d8:29:a2:7a:92:dd:59: d1:aa:8e:86:95:ee:77:2f:2d:ea:e2:9b:ed:ee:cc: 7e:6a:3a:41:58:f5:0e:3c:6a:8c:ea:bd:2a:78:e0: 42:64:22:8b:f3:60:95:03:cc:82:03:b6:50:db:26: c9:5a:a1:20:9e:b1:75:af:67:a2:1b:35:f4:f0:1f: d9:f2:67:cf:a0:bc:71:77:fc:6d:7b:de:70:b8:b6: 6a:c5:d2:88:92:bf:b6:ff:8d:73:89:4b:78:88:c3: 3a:23:bd:05:32:af:94:0c:df:35:c7:99:3d:3d:05: 44:a5:00:64:98:e5:bb:11:a2:5c:1a:45:14:3e:7f: d7:7f:2d:ac:ec:78:d6:b6:87:09:7f:36:a7:73:fe: 9d:c6:93:8d:5a:2b:45:81:ba:10:11:a7:16:eb:fb: 65:25:80:6b:53:da:8e:11:68:09:d5:b5:36:19:70: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:04:09:15:C4:35:EE:AF:6C:F5:9E:74:95:F9:9C:FB:E0:18:51:E7 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:36:fc:fa:ef:6e:67:07:c9:35:9f:f2:59:a8:a4:ef:58:62: e6:37:df:4d:fe:67:c1:75:ba:34:2b:18:2d:bd:8b:9a:e4:16: df:0c:3a:cd:9d:0f:66:83:19:d6:c1:9b:34:f5:47:8d:e7:52: 68:8d:8e:8d:d6:be:0d:1f:bb:bf:1d:54:c8:52:ee:ee:e8:18: dc:e5:4f:31:78:00:13:f2:10:04:17:7e:9a:69:88:f3:74:da: e7:6a:c7:57:dc:02:df:03:78:4f:2a:96:2e:00:26:7a:a7:f6: 64:6c:af:b1:d2:95:73:1f:e2:08:35:22:34:15:f1:a3:2c:fe: c0:4a:86:05:08:d2:ec:46:80:4c:b1:62:c8:1e:2f:9a:78:08: 59:c8:42:ed:03:c2:2d:b7:6f:07:c1:91:6a:b8:bd:8e:aa:8b: 88:7c:e7:f3:7f:24:1b:ae:17:02:0a:44:6d:4f:a9:cb:a7:67: 8e:a1:69:6a:30:15:48:64:26:d4:1d:79:8c:42:5e:74:6c:e3: b2:8b:97:c8:5b:cb:67:4d:cb:ef:23:b3:8d:75:67:db:70:0e: ee:7c:d3:9e:c6:a6:6a:28:26:d8:be:cf:f5:c0:f9:2a:ec:7c: 6e:f2:6d:b8:58:91:09:de:d5:21:87:69:b6:e0:66:83:af:2b: c1:7b:d7:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwOTE4MTYwNjEzWhcNMjUwOTI1MTYwNjEzWjAYMRYwFAYD VQQDEw02OGNjMmRmNS1kYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hsBTZvDfjF9IjO15RpVJYF+vXWdlm29nGaFwOIro96hl+YzxFTwO9oNcM8v TKMpTJq+nqsBBFeta7Xs/Ymnb7u2InYCZk+k0wJguZhwLaRbwdgponqS3VnRqo6G le53Ly3q4pvt7sx+ajpBWPUOPGqM6r0qeOBCZCKL82CVA8yCA7ZQ2ybJWqEgnrF1 r2eiGzX08B/Z8mfPoLxxd/xte95wuLZqxdKIkr+2/41ziUt4iMM6I70FMq+UDN81 x5k9PQVEpQBkmOW7EaJcGkUUPn/Xfy2s7HjWtocJfzanc/6dxpONWitFgboQEacW 6/tlJYBrU9qOEWgJ1bU2GXDqBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsECRXE Ne6vbPWedJX5nPvgGFHnMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaNvz6725nB8k1n/JZqKTvWGLmN99N/mfBdbo0KxgtvYua5BbfDDrN nQ9mgxnWwZs09UeN51JojY6N1r4NH7u/HVTIUu7u6Bjc5U8xeAAT8hAEF36aaYjz dNrnasdX3ALfA3hPKpYuACZ6p/ZkbK+x0pVzH+IINSI0FfGjLP7ASoYFCNLsRoBM sWLIHi+aeAhZyELtA8Itt28HwZFquL2OqouIfOfzfyQbrhcCCkRtT6nLp2eOoWlq MBVIZCbUHXmMQl50bOOyi5fIW8tnTcvvI7ONdWfbcA7ufNOexqZqKCbYvs/1wPkq 7Hxu8m24WJEJ3tUhh2m24GaDryvBe9cQ -----END CERTIFICATE-----Generated at Fri Sep 19 15:20:45 2025 by rpki-client