$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: 9JuOV0tj+a6hxN6kla/UreTlXlC7vBQHaMOspc6WhS8= Subject key identifier: C2:B8:06:6D:06:DD:BD:4A:C5:FB:29:1B:3F:EE:C1:59:32:0A:10:8E Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0656 Signing time: Wed 18 Jun 2025 16:52:36 +0000 Manifest this update: Wed 18 Jun 2025 16:52:36 +0000 Manifest next update: Wed 25 Jun 2025 16:52:36 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: FQO8u15kJL/CpdIiuc/LTH1mjBJ8EVgO5yYy7C4zzcY=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Jun 18 16:52:36 2025 GMT Not After : Jun 25 16:52:36 2025 GMT Subject: CN=6852eed4-f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:58:46:cd:f4:7b:76:8f:7a:cb:07:48:c3: ba:07:d2:3b:ae:f8:01:1e:d5:18:09:2f:ea:83:c1: bc:1a:87:2b:4f:c3:03:2d:6f:ef:fd:a9:55:05:5b: 01:7b:8d:94:33:cd:19:a7:c2:76:2e:6d:8a:b4:03: 93:d3:24:81:cd:b9:e4:f9:87:34:70:5a:fa:4a:96: dc:19:76:d0:d5:f4:19:92:a9:fb:8b:a0:ba:c5:b1: 40:ee:79:a7:ef:4c:c7:12:a9:71:99:90:51:34:c8: cb:01:c1:75:c4:a8:d8:a0:c9:5a:10:7c:51:19:ec: ca:66:db:f9:7f:ff:6d:74:10:24:fe:8c:21:9e:c1: 82:7e:f8:c6:6e:aa:35:1d:6a:3c:d8:5c:b0:93:e2: 90:b0:96:93:64:bb:b0:33:12:7d:bf:96:f8:66:aa: 8e:7b:29:a8:d0:0c:62:6c:c8:70:23:a2:8e:bc:b2: 65:bd:78:72:85:e5:5c:f1:f3:25:3f:49:79:94:3c: 14:83:ef:d9:1c:89:77:86:1a:71:af:3c:1a:b4:c2: af:09:a0:c1:ec:0f:af:2b:3a:af:7e:30:15:fb:28: 21:96:f9:1a:c0:6b:3a:65:e2:4b:98:e1:9b:c1:07: 3e:19:76:d5:0c:49:9c:d4:af:b2:05:f5:66:65:98: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B8:06:6D:06:DD:BD:4A:C5:FB:29:1B:3F:EE:C1:59:32:0A:10:8E X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f4:3c:ee:43:c8:3f:02:9d:a5:20:c0:f8:2f:be:7b:cd:28: 0b:40:34:67:72:16:69:5e:8d:4b:fe:43:98:5b:ac:18:72:c6: f3:79:a7:26:e6:a5:ee:9c:a5:e8:d2:a3:2a:c6:85:7b:57:ad: f4:f2:c2:cd:f5:9f:9b:af:54:c8:31:3a:73:fa:1b:f1:34:39: 50:a5:6e:b2:57:09:f8:27:0e:c1:b7:50:77:06:89:8d:9a:0d: f2:7f:7d:aa:d0:2c:df:f6:d6:bd:3d:db:c0:bd:56:79:68:7c: 50:57:78:31:48:6e:58:5a:ec:40:43:0f:a5:41:f0:b9:c8:46: b8:6b:81:0c:35:d8:d2:d1:35:fc:c5:2a:ea:fe:b8:2b:ae:6e: c6:ae:a3:e7:65:17:4c:44:e1:fc:37:91:17:bd:1a:03:49:8d: ff:e6:61:73:13:ba:8b:a8:b1:47:19:32:e0:99:fa:01:f8:a2: 36:8e:aa:a4:b9:e7:ef:25:ef:ff:d7:65:47:4b:2f:40:d6:a5: 1e:57:ce:4a:a9:77:37:4a:a2:a3:c8:ce:61:09:41:ec:c7:4d: 2c:ae:a4:23:2b:36:bb:36:69:26:c7:c4:ac:34:14:02:9c:51: 1b:8d:b8:1d:63:3f:db:b1:98:af:d4:55:82:c6:fe:15:f7:62: 82:37:1e:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwNjE4MTY1MjM2WhcNMjUwNjI1MTY1MjM2WjAYMRYwFAYD VQQDEw02ODUyZWVkNC1mOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu5YRs30e3aPessHSMO6B9I7rvgBHtUYCS/qg8G8GocrT8MDLW/v/alVBVsB e42UM80Zp8J2Lm2KtAOT0ySBzbnk+Yc0cFr6SpbcGXbQ1fQZkqn7i6C6xbFA7nmn 70zHEqlxmZBRNMjLAcF1xKjYoMlaEHxRGezKZtv5f/9tdBAk/owhnsGCfvjGbqo1 HWo82Fywk+KQsJaTZLuwMxJ9v5b4ZqqOeymo0AxibMhwI6KOvLJlvXhyheVc8fMl P0l5lDwUg+/ZHIl3hhpxrzwatMKvCaDB7A+vKzqvfjAV+yghlvkawGs6ZeJLmOGb wQc+GXbVDEmc1K+yBfVmZZiUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK4Bm0G 3b1KxfspGz/uwVkyChCOMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm9DzuQ8g/Ap2lIMD4L757zSgLQDRnchZpXo1L/kOYW6wYcsbzeacm 5qXunKXo0qMqxoV7V6308sLN9Z+br1TIMTpz+hvxNDlQpW6yVwn4Jw7Bt1B3BomN mg3yf32q0Czf9ta9PdvAvVZ5aHxQV3gxSG5YWuxAQw+lQfC5yEa4a4EMNdjS0TX8 xSrq/rgrrm7GrqPnZRdMROH8N5EXvRoDSY3/5mFzE7qLqLFHGTLgmfoB+KI2jqqk uefvJe//12VHSy9A1qUeV85KqXc3SqKjyM5hCUHsx00srqQjKza7Nmkmx8SsNBQC nFEbjbgdYz/bsZiv1FWCxv4V92KCNx70 -----END CERTIFICATE-----Generated at Wed Jun 18 23:42:05 2025 by rpki-client