$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: IIV+bbWjzlPyWp/KYr3aKZJyOAUxAHMKCYSE3ojGwbs= Subject key identifier: 8E:2D:AD:8B:FF:AD:CC:4B:46:81:0D:F8:E2:52:EE:BB:E8:46:E9:91 Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: 016D Signing time: Fri 13 Jun 2025 02:53:36 +0000 Manifest this update: Fri 13 Jun 2025 02:53:35 +0000 Manifest next update: Fri 20 Jun 2025 02:53:35 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: KRCVHyrUE4RkU8P0QFlh+vUzo0yceLpPwdGIAx3stQg=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: ghcy6JDfa3u1ukpc0kfcadEcqAXRi4dJb4eZF65dqFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Jun 13 02:53:35 2025 GMT Not After : Jun 20 02:53:35 2025 GMT Subject: CN=684b92af-f8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:98:88:0a:e7:77:d5:25:d0:46:eb:81:96:e8: c8:3d:3f:c1:5e:b5:ed:c6:c4:75:96:56:bf:1c:a7: 10:23:69:23:9f:64:e0:3b:16:03:4c:bc:98:59:12: 7f:48:95:cc:d4:09:16:c1:c4:ac:a1:c1:c5:20:0a: 89:5b:c0:31:c8:27:f0:aa:a9:0d:9d:8e:ac:4a:83: fa:9b:92:c7:f3:30:c2:0d:db:b6:ef:39:18:eb:11: 20:93:ef:31:db:32:67:ca:cf:d0:d7:6e:3d:37:8f: 99:fa:16:b7:9d:b9:a1:75:fc:71:91:0c:07:35:89: ae:19:74:0e:f5:76:6d:fc:02:12:60:93:48:a1:08: d9:4b:52:9a:3d:e5:d0:31:10:fe:1b:8b:6d:e9:1e: 37:a9:ef:f9:0c:3b:09:e5:5a:ee:cb:ed:fd:4d:06: da:64:14:32:e5:69:49:d0:af:62:09:8d:a8:e0:a5: ec:81:69:f1:8e:6c:d5:3b:2e:44:e9:91:d6:ea:55: 2a:60:6a:af:7c:db:a0:e2:35:f8:05:c7:be:12:5a: 32:7e:6e:97:3e:a6:27:33:94:25:d6:79:c4:43:bd: 4a:64:31:38:67:34:79:5b:fe:93:91:a7:f7:26:49: ed:ce:11:9a:2d:03:db:40:bd:29:57:9a:5a:29:22: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2D:AD:8B:FF:AD:CC:4B:46:81:0D:F8:E2:52:EE:BB:E8:46:E9:91 X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:5a:90:93:5f:70:59:41:f9:ec:19:b0:8c:0c:5d:8a:3e: ba:c7:78:df:b8:71:cb:f2:b9:ad:e7:35:58:34:4a:ae:1b:49: b6:51:fd:1e:99:a5:a6:5f:5f:cb:88:60:dd:dc:e3:cd:0b:45: e5:56:c7:12:a4:bf:8f:83:39:0c:15:67:79:d8:22:17:8b:09: a2:8c:bf:81:29:ed:5e:5a:8f:fd:a3:74:a5:68:4c:98:e8:37: e3:08:f0:4b:d5:9f:f3:b8:90:fe:f8:28:a2:5b:ba:ac:92:6a: e2:ea:c6:59:08:73:e9:d5:2d:a2:91:9d:a0:c5:fa:02:b9:79: 73:c4:44:cd:b9:b7:b0:0e:00:47:57:b5:a9:ce:b8:54:f0:3a: f4:7b:0e:57:cb:ac:65:3f:40:79:4a:f8:86:eb:8b:13:38:3b: fd:37:c8:00:4a:e8:3b:2b:11:43:9d:30:92:00:94:dd:6b:a0: c2:8e:6f:ae:1d:a6:b2:53:2a:d1:ca:81:cf:7a:44:83:db:ef: 9a:ec:e6:a8:01:81:e4:ef:35:10:ab:19:0f:64:7f:ba:94:99: 65:3c:17:3c:1c:77:56:bd:f3:89:c2:0b:0c:63:47:67:6a:4e: 05:76:95:cc:bb:d8:5d:fa:24:f6:dc:05:f4:e7:fb:34:1a:82: 1c:54:e5:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUwNjEzMDI1MzM1WhcNMjUwNjIwMDI1MzM1WjAYMRYwFAYD VQQDEw02ODRiOTJhZi1mOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ZiICud31SXQRuuBlujIPT/BXrXtxsR1lla/HKcQI2kjn2TgOxYDTLyYWRJ/ SJXM1AkWwcSsocHFIAqJW8AxyCfwqqkNnY6sSoP6m5LH8zDCDdu27zkY6xEgk+8x 2zJnys/Q1249N4+Z+ha3nbmhdfxxkQwHNYmuGXQO9XZt/AISYJNIoQjZS1KaPeXQ MRD+G4tt6R43qe/5DDsJ5Vruy+39TQbaZBQy5WlJ0K9iCY2o4KXsgWnxjmzVOy5E 6ZHW6lUqYGqvfNug4jX4Bce+Eloyfm6XPqYnM5Ql1nnEQ71KZDE4ZzR5W/6Tkaf3 JkntzhGaLQPbQL0pV5paKSInAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4trYv/ rcxLRoEN+OJS7rvoRumRMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7zlqQk19wWUH57BmwjAxdij66x3jfuHHL8rmt5zVYNEquG0m2Uf0e maWmX1/LiGDd3OPNC0XlVscSpL+PgzkMFWd52CIXiwmijL+BKe1eWo/9o3SlaEyY 6DfjCPBL1Z/zuJD++CiiW7qskmri6sZZCHPp1S2ikZ2gxfoCuXlzxETNubewDgBH V7WpzrhU8Dr0ew5Xy6xlP0B5SviG64sTODv9N8gASug7KxFDnTCSAJTda6DCjm+u HaayUyrRyoHPekSD2++a7OaoAYHk7zUQqxkPZH+6lJllPBc8HHdWvfOJwgsMY0dn ak4FdpXMu9hd+iT23AX05/s0GoIcVOUR -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:53 2025 by rpki-client