$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: 63HpoaTJgj84LRSE6PcwivbXXXmzEpFZVSBgyhccPw4= Subject key identifier: 24:D9:8A:53:9C:F5:32:03:1B:FC:F7:CB:9A:21:D4:E9:CF:D7:F4:89 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0480 Signing time: Fri 19 Sep 2025 00:28:53 +0000 Manifest this update: Fri 19 Sep 2025 00:28:52 +0000 Manifest next update: Fri 26 Sep 2025 00:28:52 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: +/mhwkJE1DVuN84mkywOmzALnNZnfE+w+2fzJISUmJU=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: y1lAMNBHmo8LOCH2UbQd6lp4y3+4hOTNpmp++HIjEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Sep 19 00:28:52 2025 GMT Not After : Sep 26 00:28:52 2025 GMT Subject: CN=68cca3c4-6075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:2a:aa:50:f9:c7:27:0e:2f:2d:99:07:0e: 31:7a:39:d3:bb:db:0d:25:84:76:c7:3c:2e:ba:f4: f7:c6:a1:4e:cb:e2:c0:45:96:52:54:d5:43:83:c5: 68:01:9b:3a:00:d0:29:e6:2d:7a:f1:37:3c:a4:0a: 67:b9:a7:64:00:71:c4:33:98:9e:46:6f:0b:06:1e: 6a:bb:32:5b:bb:25:21:b5:0a:7c:51:ab:0b:f8:e2: e0:90:d5:19:cd:b6:b2:c6:63:c3:28:9e:1f:4b:7e: 09:cf:81:14:4f:e6:e1:96:ec:f4:5e:67:78:f2:51: 4d:df:d9:c5:d3:c0:34:9b:22:c9:1d:a6:a8:16:40: b1:07:a4:a7:df:ca:1b:80:99:a0:00:1b:47:f7:23: f4:a7:be:b7:e0:bb:ab:11:f5:1f:c2:11:5d:03:10: 97:3e:e1:a0:1a:ed:8d:6f:78:44:f8:31:e4:f8:6b: 8b:a4:6e:70:79:7e:64:ba:88:31:42:87:8c:86:ea: 3e:f2:b2:22:65:92:93:f5:8b:75:1d:57:2d:0d:e4: e9:5a:71:21:1c:e3:6f:85:da:37:6f:2e:51:3b:7f: f8:c4:f6:db:da:40:a9:61:27:32:bf:4c:af:90:e6: 6e:24:01:5f:66:b9:c6:77:95:4f:be:e6:c0:95:c1: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:8A:53:9C:F5:32:03:1B:FC:F7:CB:9A:21:D4:E9:CF:D7:F4:89 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cf:91:60:2a:1c:38:44:2f:d5:28:03:14:75:c4:71:dc:94: 60:ab:77:04:45:d0:15:7d:3d:ff:b9:ec:4d:0f:e2:f3:1f:da: 48:d9:e6:d5:27:9b:ae:ce:74:cb:39:55:f7:23:da:4d:cb:55: 59:58:81:da:34:31:69:16:57:fd:c4:c0:26:ef:f4:1c:26:87: 89:80:bb:f1:65:58:0c:9c:7e:99:54:d6:1b:52:d1:f4:f4:78: ac:f4:03:ed:93:de:d4:fe:2e:39:c9:4a:ab:ec:c5:9b:4a:0a: 38:65:04:2a:00:f4:e4:70:52:0e:6a:b0:e0:4d:7e:63:84:50: 24:19:e4:e4:67:b1:6f:d9:08:a1:76:b8:6f:4b:47:d0:08:84: 6f:ab:24:59:d1:55:94:cb:0e:b9:5b:2d:ee:c8:14:59:82:50: 25:c5:11:f5:0b:55:01:7c:10:5e:fc:4c:8a:aa:e2:90:09:4b: 58:7d:11:2a:05:9c:df:0e:21:bd:67:4b:f5:bd:e3:e5:30:11: 82:0a:fd:03:a6:4a:3d:e9:b9:5f:ee:fb:30:24:00:96:10:8d: 1d:be:7f:2d:67:e1:e8:3f:e9:56:15:59:a5:72:43:25:a8:84: 25:fb:ca:a4:d9:20:b3:b3:3c:0b:3a:37:50:c5:19:54:dc:73: 4d:2d:98:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjUwOTE5MDAyODUyWhcNMjUwOTI2MDAyODUyWjAYMRYwFAYD VQQDEw02OGNjYTNjNC02MDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIAqqlD5xycOLy2ZBw4xejnTu9sNJYR2xzwuuvT3xqFOy+LARZZSVNVDg8Vo AZs6ANAp5i168Tc8pApnuadkAHHEM5ieRm8LBh5quzJbuyUhtQp8UasL+OLgkNUZ zbayxmPDKJ4fS34Jz4EUT+bhluz0Xmd48lFN39nF08A0myLJHaaoFkCxB6Sn38ob gJmgABtH9yP0p7634LurEfUfwhFdAxCXPuGgGu2Nb3hE+DHk+GuLpG5weX5kuogx QoeMhuo+8rIiZZKT9Yt1HVctDeTpWnEhHONvhdo3by5RO3/4xPbb2kCpYScyv0yv kOZuJAFfZrnGd5VPvubAlcG+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTZilOc 9TIDG/z3y5oh1OnP1/SJMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBez5FgKhw4RC/VKAMUdcRx3JRgq3cERdAVfT3/uexND+LzH9pI2ebV J5uuznTLOVX3I9pNy1VZWIHaNDFpFlf9xMAm7/QcJoeJgLvxZVgMnH6ZVNYbUtH0 9His9APtk97U/i45yUqr7MWbSgo4ZQQqAPTkcFIOarDgTX5jhFAkGeTkZ7Fv2Qih drhvS0fQCIRvqyRZ0VWUyw65Wy3uyBRZglAlxRH1C1UBfBBe/EyKquKQCUtYfREq BZzfDiG9Z0v1vePlMBGCCv0Dpko96blf7vswJACWEI0dvn8tZ+HoP+lWFVmlckMl qIQl+8qk2SCzszwLOjdQxRlU3HNNLZig -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:53 2025 by rpki-client