$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: koJmPjuU/hzQ+5iWOwSxh1WTtZRp6Ay/0d6PcsnleLk= Subject key identifier: 45:4F:DE:E5:CE:63:C3:C3:DC:34:DB:F3:5B:3B:13:33:2B:61:4C:74 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 8F Signing time: Fri 05 Sep 2025 06:58:31 +0000 Manifest this update: Fri 05 Sep 2025 06:58:31 +0000 Manifest next update: Fri 12 Sep 2025 06:58:31 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: bwq1gYw37cLSLV23GiqBG117GG+j0Y3CJ1nOcfgSjic=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Sep 5 06:58:31 2025 GMT Not After : Sep 12 06:58:31 2025 GMT Subject: CN=68ba8a17-00e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:ba:3b:52:62:25:2d:82:d5:e0:c4:c8:ee: c9:ac:e6:cd:f7:10:0f:77:77:d2:7d:78:11:82:16: 12:d7:88:c0:94:03:2f:e4:73:e4:7b:29:53:ae:a3: 2d:be:06:c1:b3:28:29:31:53:b7:77:d9:20:49:87: 49:5f:66:76:d9:b2:bb:4d:68:0a:3c:ba:bd:90:fa: ea:b4:b4:c6:a2:b9:43:6f:cc:c9:65:77:6a:3e:fc: 20:fe:56:f7:7e:58:d0:b0:9d:a6:f7:a8:15:59:4d: fa:e3:8c:64:16:4c:32:58:a6:19:cc:0f:c4:e2:cc: 31:2f:f6:86:e9:0c:4f:51:55:02:d6:9f:97:7a:cb: b0:bb:aa:f9:be:87:b0:e5:2e:d1:c1:43:38:30:2e: 5a:9b:1c:44:50:13:4e:df:c3:f5:3f:d6:31:4d:63: 21:55:38:6e:cb:f8:f8:bf:a0:b6:db:6c:a4:c5:17: fe:a4:a5:c4:76:a3:b7:b8:2f:ac:f5:0e:d9:4a:07: 25:3c:0c:76:9c:77:38:66:52:4c:b7:7c:d1:70:f1: 9a:7d:44:be:cc:6f:77:d0:96:c1:06:42:3f:54:d3: 44:23:10:20:e2:81:78:02:04:df:96:01:e5:a8:d9: e8:35:ec:9f:9b:26:a3:25:f7:cb:26:d7:a1:e9:7a: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4F:DE:E5:CE:63:C3:C3:DC:34:DB:F3:5B:3B:13:33:2B:61:4C:74 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:76:f8:ee:89:e2:fa:8b:ba:c3:cc:0f:96:e4:b4:ff:50:d5: 71:42:f7:9b:7d:ed:d1:4a:14:2f:4d:6e:9d:11:85:0e:92:4d: c4:c6:f6:db:16:63:2e:de:df:9e:ad:e6:05:5a:d0:f8:99:6d: 31:93:71:45:7c:24:3a:7a:05:15:f7:9c:2a:e6:3a:15:84:77: 49:23:e3:d9:70:20:45:a0:84:37:eb:e5:93:57:61:b3:fd:5c: 9f:2a:01:e2:cf:d3:4b:fb:35:09:0a:1a:68:81:66:2a:88:d9: 0f:96:21:d6:4d:b0:70:e6:cb:c2:36:6c:bc:a1:09:e3:e8:49: 81:07:79:c4:a4:7e:a5:ff:d3:cb:26:44:cb:6d:28:1a:30:b6: 04:53:75:b8:4d:16:86:91:19:57:48:d9:11:a8:ae:1e:5e:39: ba:fa:43:d6:c6:86:51:70:14:ff:b4:4c:9e:17:eb:6a:5b:f0: 25:d4:e8:0a:e5:25:0a:52:90:33:61:5c:96:4e:e7:ed:c9:4f: a0:bf:73:42:69:c9:1e:a8:c1:fc:02:ed:7c:87:44:94:61:c0: 16:42:fd:9f:5a:bc:6c:42:0c:f2:18:b1:a1:e2:e8:04:47:87: 69:64:9a:64:c2:97:5e:e7:ec:3a:39:1e:52:70:fa:cf:06:51: 41:eb:7b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDE3MUVERDNGNzc4NUUwRjUzODU1NkY5RUYyNkJFRDcx NjY5RThEOEMwHhcNMjUwOTA1MDY1ODMxWhcNMjUwOTEyMDY1ODMxWjAYMRYwFAYD VQQDEw02OGJhOGExNy0wMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsq6O1JiJS2C1eDEyO7JrObN9xAPd3fSfXgRghYS14jAlAMv5HPkeylTrqMt vgbBsygpMVO3d9kgSYdJX2Z22bK7TWgKPLq9kPrqtLTGorlDb8zJZXdqPvwg/lb3 fljQsJ2m96gVWU3644xkFkwyWKYZzA/E4swxL/aG6QxPUVUC1p+Xesuwu6r5voew 5S7RwUM4MC5amxxEUBNO38P1P9YxTWMhVThuy/j4v6C222ykxRf+pKXEdqO3uC+s 9Q7ZSgclPAx2nHc4ZlJMt3zRcPGafUS+zG930JbBBkI/VNNEIxAg4oF4AgTflgHl qNnoNeyfmyajJffLJteh6Xp/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVP3uXO Y8PD3DTb81s7EzMrYUx0MB8GA1UdIwQYMBaAFBce3T93heD1OFVvnvJr7XFmno2M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CNTYwMEFFQ0FG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQVTRWVy1lOG12dGNXYWVq WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CNTYwMEFFQ0FGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQ VTRWVy1lOG12dGNXYWVqWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBndvjuieL6i7rDzA+W5LT/UNVxQvebfe3RShQvTW6dEYUOkk3Exvbb FmMu3t+ereYFWtD4mW0xk3FFfCQ6egUV95wq5joVhHdJI+PZcCBFoIQ36+WTV2Gz /VyfKgHiz9NL+zUJChpogWYqiNkPliHWTbBw5svCNmy8oQnj6EmBB3nEpH6l/9PL JkTLbSgaMLYEU3W4TRaGkRlXSNkRqK4eXjm6+kPWxoZRcBT/tEyeF+tqW/Al1OgK 5SUKUpAzYVyWTuftyU+gv3NCackeqMH8Au18h0SUYcAWQv2fWrxsQgzyGLGh4ugE R4dpZJpkwpde5+w6OR5ScPrPBlFB63vL -----END CERTIFICATE-----Generated at Sat Sep 6 15:16:18 2025 by rpki-client