$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: e7yWswh5+JgIC3wN2m1qaa+wPuEa7f/zWBJf6oTzFxA= Subject key identifier: 0D:B7:09:97:A0:46:D6:2C:0E:7D:56:86:DB:C6:3F:92:86:AF:13:D1 Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1923 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 1915 Signing time: Wed 18 Jun 2025 16:27:08 +0000 Manifest this update: Wed 18 Jun 2025 16:27:08 +0000 Manifest next update: Wed 25 Jun 2025 16:27:08 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: EjQdKI5Xs7UMqVS7aUtxF3YLpGFNKcv5Vflav2tbyCs=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6435 (0x1923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: Jun 18 16:27:08 2025 GMT Not After : Jun 25 16:27:08 2025 GMT Subject: CN=6852e8dc-424b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e6:c9:e9:3a:77:ab:a0:81:27:ed:77:b2:cd: 67:ec:39:ea:df:98:79:2e:6c:fc:29:74:05:d2:7d: 95:22:6e:46:92:ca:f5:48:ee:83:0e:35:8f:7c:ed: 68:bf:c0:81:c9:4f:7b:ba:85:d9:7c:40:a4:34:e5: d2:f9:c2:65:ab:50:bc:85:de:53:68:e4:1c:9b:ea: 0e:3f:f2:56:e1:41:c7:72:2d:c3:89:12:ae:f9:d0: 38:d4:df:a3:e8:94:43:6f:34:5d:b8:26:e2:2e:8b: ea:bd:c4:3e:1a:c9:54:ce:eb:77:e6:be:42:6f:2e: 5a:70:ba:4c:f2:ba:e1:13:cf:77:50:f9:d4:83:34: c2:89:0f:5d:c6:4e:fa:d7:c8:ee:fe:10:bb:9a:b5: 06:cc:55:f4:5d:f4:f1:aa:2e:d4:ab:8d:e7:49:f0: 07:d6:2c:20:f4:cb:26:e7:e3:1f:ac:6a:e8:b4:be: fc:dc:7f:a8:a6:4f:54:9d:36:fe:a3:29:9c:fa:99: 67:90:c6:d4:b5:d5:2c:25:bd:48:21:6c:29:56:56: 87:65:6c:5c:fd:2e:df:d2:f6:6e:2c:55:bd:9b:fa: a5:c7:1b:75:20:d5:9f:81:31:e6:2e:23:e3:b0:78: d3:7c:a4:55:03:c2:a1:21:88:d9:07:6d:53:2b:45: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:09:97:A0:46:D6:2C:0E:7D:56:86:DB:C6:3F:92:86:AF:13:D1 X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:cf:d6:de:f0:e0:8e:df:4f:c1:c3:df:46:6f:d4:f8:96:b3: 86:ef:91:ac:ff:9d:e4:ea:d2:04:c6:ef:09:20:40:9a:5c:54: 0f:26:6a:72:31:0a:72:c9:74:d0:0c:69:cc:d6:08:89:8e:91: fb:1c:05:df:b7:b4:d0:bc:6c:19:a8:6a:b9:89:38:1d:64:9d: 23:39:22:6b:20:15:61:6b:9c:30:cb:51:d1:dc:aa:1e:db:ea: da:7a:64:cf:5a:89:c1:90:d7:02:61:41:12:a6:e8:10:a5:b7: 26:ae:e6:c2:4e:f9:e9:3e:5f:61:dc:3d:e5:e5:f0:5d:2d:69: de:5b:86:7e:cf:35:8c:b0:51:c6:67:48:94:06:57:cd:8b:b1: 84:14:b9:fb:8a:b7:ce:ca:be:d0:a8:8f:1b:f8:e1:00:70:bc: 0d:9d:d6:c2:0b:1d:9a:61:ee:e4:eb:df:cf:57:99:49:11:5f: ea:b5:eb:3a:98:3e:de:bf:1d:37:bd:e9:b2:76:39:9b:04:94: 12:43:10:fd:d3:14:62:18:8f:7a:a3:45:ee:b5:03:e2:02:75: 92:10:2a:5a:3c:7c:0e:d7:23:29:3f:e3:1a:33:20:de:e3:9f: 53:9d:72:8a:4d:54:9a:cf:a9:d9:71:b7:d8:83:12:18:5a:de: 8b:a6:24:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNjE4MTYyNzA4WhcNMjUwNjI1MTYyNzA4WjAYMRYwFAYD VQQDEw02ODUyZThkYy00MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+bJ6Tp3q6CBJ+13ss1n7Dnq35h5Lmz8KXQF0n2VIm5Gksr1SO6DDjWPfO1o v8CByU97uoXZfECkNOXS+cJlq1C8hd5TaOQcm+oOP/JW4UHHci3DiRKu+dA41N+j 6JRDbzRduCbiLovqvcQ+GslUzut35r5Cby5acLpM8rrhE893UPnUgzTCiQ9dxk76 18ju/hC7mrUGzFX0XfTxqi7Uq43nSfAH1iwg9Msm5+MfrGrotL783H+opk9UnTb+ oymc+plnkMbUtdUsJb1IIWwpVlaHZWxc/S7f0vZuLFW9m/qlxxt1INWfgTHmLiPj sHjTfKRVA8KhIYjZB21TK0UJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA23CZeg RtYsDn1WhtvGP5KGrxPRMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEz9be8OCO30/Bw99Gb9T4lrOG75Gs/53k6tIExu8JIECaXFQPJmpy MQpyyXTQDGnM1giJjpH7HAXft7TQvGwZqGq5iTgdZJ0jOSJrIBVha5wwy1HR3Koe 2+raemTPWonBkNcCYUESpugQpbcmrubCTvnpPl9h3D3l5fBdLWneW4Z+zzWMsFHG Z0iUBlfNi7GEFLn7irfOyr7QqI8b+OEAcLwNndbCCx2aYe7k69/PV5lJEV/qtes6 mD7evx03vemydjmbBJQSQxD90xRiGI96o0XutQPiAnWSECpaPHwO1yMpP+MaMyDe 459TnXKKTVSaz6nZcbfYgxIYWt6LpiTZ -----END CERTIFICATE-----Generated at Thu Jun 19 11:40:28 2025 by rpki-client