$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: r1r9gVEyit4bLCIX3+aJGLo9jv9NwGZuW2e/zHiTOS4= Subject key identifier: 12:C9:D3:1F:77:B3:5F:8A:1F:F6:8E:3A:54:68:B9:FC:A5:6C:E9:BD Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 05F6 Signing time: Fri 20 Jun 2025 22:41:40 +0000 Manifest this update: Fri 20 Jun 2025 22:41:40 +0000 Manifest next update: Fri 27 Jun 2025 22:41:40 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: u1ldRedIeKcHMMOGJlx4MH4tqWPO9Ja9Nd5dAFBn97o=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Jun 20 22:41:40 2025 GMT Not After : Jun 27 22:41:40 2025 GMT Subject: CN=6855e3a4-1d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:24:9c:6f:33:f6:ea:9b:b7:b9:d8:d8:43: ed:8e:64:03:20:7e:b7:6e:a3:ed:91:af:43:1b:f3: fd:57:08:12:9f:28:7a:3e:46:09:09:91:3a:0b:77: d9:c8:91:d2:17:a1:c9:d7:0d:89:c0:50:7a:fc:1b: ed:90:36:9f:22:97:d8:56:22:79:5e:d9:5b:30:1e: 2e:8a:53:72:75:ef:28:c9:cb:5b:a4:3b:1d:52:9f: 40:ce:9f:0e:80:5b:6d:ea:9e:f7:12:e3:82:c0:3d: a3:09:12:90:27:4e:fe:8c:17:09:6c:a2:b0:f8:4b: 18:ad:fa:87:6c:51:e7:92:5a:2a:ca:42:c7:23:17: d6:94:8b:08:2a:83:ad:b1:31:da:08:2d:62:bc:e3: dd:23:3b:30:de:84:81:60:c4:ef:2d:bc:ab:64:05: 76:6d:50:c4:4a:7a:1b:22:53:76:cc:b2:39:00:ef: d4:f3:0c:69:ee:9f:71:8d:13:a9:73:ee:61:12:82: aa:9b:c0:bb:da:5b:0e:7b:94:24:9d:98:e0:6b:e0: fb:65:ca:62:09:fa:1c:2c:2a:bf:62:fd:64:a3:54: ff:ba:b6:b6:03:4e:57:a3:69:d5:5f:20:1d:ca:f1: 6c:89:0b:af:ab:b0:15:77:5b:7c:50:8f:ca:22:d3: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C9:D3:1F:77:B3:5F:8A:1F:F6:8E:3A:54:68:B9:FC:A5:6C:E9:BD X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:1f:84:d8:a8:c3:3a:46:04:a7:66:4f:0d:cf:31:91:93:38: 9b:d8:2b:fb:6e:f8:05:bf:7f:35:d2:64:c6:e2:31:46:b9:c9: d2:b9:9d:7c:ec:f7:ee:44:49:c6:84:4b:b5:eb:de:b6:61:0f: 86:b0:e2:e4:3a:1f:38:dc:b0:9f:1e:fb:df:c9:78:7d:83:50: 74:78:ae:3c:34:0c:f2:bb:43:0c:40:6b:05:dc:43:9a:e4:a1: f1:bb:6f:a9:df:55:9c:3c:dc:d2:3d:6c:b7:10:a8:ae:bc:1e: de:ce:d3:e4:96:e2:61:ab:b1:b8:fe:4b:49:84:ae:86:27:5f: ec:3b:5a:dd:d2:f4:dc:23:ce:75:0d:9e:8e:ea:51:f8:0d:69: ea:67:0c:0e:cd:ba:e1:52:1c:85:01:8c:31:95:71:60:fd:37: 2d:d6:0e:37:91:8f:f5:c8:62:50:86:4c:46:26:52:fc:65:65: cc:91:52:08:c8:91:a2:2d:9e:85:5f:4b:0b:ec:f3:f5:c3:17: aa:76:32:42:82:43:47:2a:56:6e:df:00:3a:f3:76:13:b7:1a: cf:96:b3:eb:1c:a1:29:d1:9e:34:72:81:26:28:c5:c4:bc:e1: 44:ab:2c:21:76:55:30:82:8d:ee:a6:f0:86:78:9d:5e:27:e8: 72:47:87:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjUwNjIwMjI0MTQwWhcNMjUwNjI3MjI0MTQwWjAYMRYwFAYD VQQDEw02ODU1ZTNhNC0xZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfsknG8z9uqbt7nY2EPtjmQDIH63bqPtka9DG/P9VwgSnyh6PkYJCZE6C3fZ yJHSF6HJ1w2JwFB6/BvtkDafIpfYViJ5XtlbMB4uilNyde8oyctbpDsdUp9Azp8O gFtt6p73EuOCwD2jCRKQJ07+jBcJbKKw+EsYrfqHbFHnkloqykLHIxfWlIsIKoOt sTHaCC1ivOPdIzsw3oSBYMTvLbyrZAV2bVDESnobIlN2zLI5AO/U8wxp7p9xjROp c+5hEoKqm8C72lsOe5QknZjga+D7ZcpiCfocLCq/Yv1ko1T/ura2A05Xo2nVXyAd yvFsiQuvq7AVd1t8UI/KItPMwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLJ0x93 s1+KH/aOOlRoufylbOm9MB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/H4TYqMM6RgSnZk8NzzGRkzib2Cv7bvgFv3810mTG4jFGucnSuZ18 7PfuREnGhEu16962YQ+GsOLkOh843LCfHvvfyXh9g1B0eK48NAzyu0MMQGsF3EOa 5KHxu2+p31WcPNzSPWy3EKiuvB7eztPkluJhq7G4/ktJhK6GJ1/sO1rd0vTcI851 DZ6O6lH4DWnqZwwOzbrhUhyFAYwxlXFg/Tct1g43kY/1yGJQhkxGJlL8ZWXMkVII yJGiLZ6FX0sL7PP1wxeqdjJCgkNHKlZu3wA683YTtxrPlrPrHKEp0Z40coEmKMXE vOFEqywhdlUwgo3upvCGeJ1eJ+hyR4fU -----END CERTIFICATE-----Generated at Sat Jun 21 01:49:30 2025 by rpki-client