$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: FTwAmpOBTe8N6XtfyqdHBZedQMvKFpdWczc6tMGbgT8= Subject key identifier: B9:70:EE:F4:F2:5A:95:EE:50:CD:5A:C1:B2:08:FB:99:79:6C:4A:E6 Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 0328 Signing time: Fri 19 Sep 2025 01:32:34 +0000 Manifest this update: Fri 19 Sep 2025 01:32:34 +0000 Manifest next update: Fri 26 Sep 2025 01:32:33 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: U93vgLMAD+MX2h71iUWsK4yoNl9r0dGDXCGx1zOG4Xs=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Sep 19 01:32:34 2025 GMT Not After : Sep 26 01:32:33 2025 GMT Subject: CN=68ccb2b2-46cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:74:9d:fe:c6:2f:14:db:d8:4b:7e:a3:e2: f5:73:51:8d:55:6c:ef:7d:0a:23:78:79:34:45:a0: 1d:e8:9d:62:f0:cf:90:64:a8:2d:58:1f:2a:13:c2: 2f:e2:62:e5:39:5b:d6:e2:18:a6:2f:cf:b8:35:89: 4a:8a:39:b1:54:8a:67:19:4f:09:29:ae:ac:8e:9d: 2f:9d:0c:6c:35:65:be:ef:4f:bb:bb:98:00:8d:a6: 5b:13:ef:38:a8:b4:8d:98:67:86:01:b6:11:ca:17: d5:05:45:da:41:8b:d9:47:57:ae:ee:74:28:93:06: de:e2:11:e1:17:6f:a7:07:df:db:77:ed:d1:73:cf: 59:0c:27:a0:ee:4c:b8:9c:5c:6b:40:6e:ca:ad:ed: 8e:3d:3c:db:a5:b3:e2:0b:00:09:74:24:63:f8:d3: 32:cd:e6:4c:8f:84:9f:f5:4f:16:6b:18:44:86:f8: 62:fa:19:eb:c5:d0:f3:da:0c:c6:57:10:a3:c2:37: ba:f4:23:78:ca:77:41:43:c0:1a:34:80:2e:1b:07: 47:01:26:52:5d:3d:10:17:48:2c:bb:61:3f:e1:89: dc:44:e2:45:af:9f:3d:c5:08:a5:08:c4:f2:6e:a6: f1:56:39:70:4a:03:06:f4:80:a2:77:35:37:23:ea: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:EE:F4:F2:5A:95:EE:50:CD:5A:C1:B2:08:FB:99:79:6C:4A:E6 X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e0:4a:62:76:f2:ae:99:0f:d3:37:24:67:b5:fa:e7:d8:0c: 66:56:bb:5e:5e:00:cc:ca:f9:e7:25:c5:94:ae:39:f3:86:0f: 75:e7:2f:31:d2:f0:c6:0f:8e:a8:12:19:b1:89:fe:f5:40:ea: fa:80:4e:bc:48:91:50:74:75:6a:02:8d:5a:47:77:9e:5f:6c: dd:0e:8d:22:05:fa:a6:37:8a:f8:43:dd:7b:01:48:84:01:df: 1b:0f:5c:61:02:2d:00:29:e5:40:57:57:a4:57:e4:ee:fa:cc: 96:55:9c:f5:88:7c:bb:f7:f1:ee:9c:15:af:3b:64:a2:bf:4f: b7:66:88:75:d7:93:e4:c1:62:4e:07:f6:64:63:75:e8:17:ee: 24:58:8f:ad:48:09:ff:ce:39:7a:09:40:07:4c:6a:1a:23:f1: df:28:6a:5e:68:bc:12:03:40:26:6d:b6:0d:ec:5a:05:42:ef: 90:28:f6:80:97:ee:8e:ce:97:b1:ee:9b:66:f3:c1:b5:be:d5: f9:f5:11:1e:87:43:8a:97:df:51:1f:da:be:d6:aa:69:8c:94: 64:19:4b:5a:71:fc:c4:76:5e:08:c4:e2:64:38:f6:72:e8:d6: c7:80:58:9a:cf:f7:4f:52:56:9b:88:cd:f0:83:e3:32:2c:b2: 6b:0a:67:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUwOTE5MDEzMjM0WhcNMjUwOTI2MDEzMjMzWjAYMRYwFAYD VQQDEw02OGNjYjJiMi00NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SJ0nf7GLxTb2Et+o+L1c1GNVWzvfQojeHk0RaAd6J1i8M+QZKgtWB8qE8Iv 4mLlOVvW4himL8+4NYlKijmxVIpnGU8JKa6sjp0vnQxsNWW+70+7u5gAjaZbE+84 qLSNmGeGAbYRyhfVBUXaQYvZR1eu7nQokwbe4hHhF2+nB9/bd+3Rc89ZDCeg7ky4 nFxrQG7Kre2OPTzbpbPiCwAJdCRj+NMyzeZMj4Sf9U8WaxhEhvhi+hnrxdDz2gzG VxCjwje69CN4yndBQ8AaNIAuGwdHASZSXT0QF0gsu2E/4YncROJFr589xQilCMTy bqbxVjlwSgMG9ICidzU3I+p6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlw7vTy WpXuUM1awbII+5l5bErmMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB4EpidvKumQ/TNyRntfrn2AxmVrteXgDMyvnnJcWUrjnzhg915y8x 0vDGD46oEhmxif71QOr6gE68SJFQdHVqAo1aR3eeX2zdDo0iBfqmN4r4Q917AUiE Ad8bD1xhAi0AKeVAV1ekV+Tu+syWVZz1iHy79/HunBWvO2Siv0+3Zoh115PkwWJO B/ZkY3XoF+4kWI+tSAn/zjl6CUAHTGoaI/HfKGpeaLwSA0AmbbYN7FoFQu+QKPaA l+6Ozpex7ptm88G1vtX59REeh0OKl99RH9q+1qppjJRkGUtacfzEdl4IxOJkOPZy 6NbHgFiaz/dPUlabiM3wg+MyLLJrCmdw -----END CERTIFICATE-----Generated at Fri Sep 19 16:45:06 2025 by rpki-client