$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: ipjbxbhV55YxNmrrQACrJs279+SuCERUop4DhXD70os= Subject key identifier: EA:08:02:78:9E:A2:16:FB:10:D2:F8:08:B4:CF:49:C5:C0:B4:25:41 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: A8 Signing time: Tue 17 Jun 2025 05:04:36 +0000 Manifest this update: Tue 17 Jun 2025 05:04:35 +0000 Manifest next update: Tue 24 Jun 2025 05:04:35 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: 1jzT/pi94OsRG5R3PIQyBsZG4i3jUHlbl3RPZcBtJho=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Jun 17 05:04:35 2025 GMT Not After : Jun 24 05:04:35 2025 GMT Subject: CN=6850f764-c741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:25:bd:7a:8e:70:eb:b9:1d:c7:eb:dd:42: 0a:d4:9b:72:46:d4:28:64:5b:c2:e3:a6:e0:21:12: 52:34:d2:5a:3d:ea:99:90:fa:00:48:76:96:57:ea: 2d:44:ad:3d:fd:9c:fd:0a:7e:ec:81:31:37:fc:d1: e8:2b:bd:6b:a4:7a:c5:f2:f4:ec:ba:ce:e0:de:f3: f8:b8:92:40:90:73:7c:d7:48:62:5a:6c:0a:1d:5b: f2:84:09:2e:67:a9:48:14:ec:c6:f5:02:36:fd:71: 63:36:55:74:2d:b2:f5:35:84:d9:5b:3e:2a:7f:66: 21:54:8b:ca:a0:2f:bf:cd:75:ce:41:6d:48:47:e4: 1e:0c:28:70:5a:63:09:6d:d3:83:4c:8b:fc:da:8a: 53:74:7c:34:b8:9a:dd:e0:64:9c:54:69:6f:a7:9b: 7d:3d:30:c8:50:5c:64:59:35:9e:dc:07:ab:9b:f9: 35:0e:0f:b7:3c:d1:75:ce:eb:17:11:d5:af:9e:40: ce:67:80:3b:2e:92:15:3c:6e:44:7e:8e:29:79:bb: 4f:11:45:ce:78:26:87:af:38:ca:d6:78:0c:67:b2: 22:8a:c7:fe:89:52:b3:e1:a0:84:01:a1:0e:96:ca: ea:d4:0a:1c:23:2f:40:f7:39:cd:2b:b5:0a:33:c4: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:08:02:78:9E:A2:16:FB:10:D2:F8:08:B4:CF:49:C5:C0:B4:25:41 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d6:e3:e8:be:80:5e:f2:f4:fc:7b:a4:93:a2:fa:e6:d4:85: 50:3b:23:79:5f:93:bf:d4:2e:c3:ea:62:9e:10:a5:af:a0:82: 76:fe:2e:34:ac:5e:be:7b:a7:fe:98:68:74:89:07:2a:58:c0: b9:5c:8b:d7:37:0b:34:6b:d7:e0:71:a5:2e:06:5a:8e:66:43: fd:b4:87:59:8d:2a:b1:aa:c9:a2:db:78:16:65:3a:83:3d:93: 13:86:f6:c4:ac:2d:d0:0f:f1:f7:1a:c9:30:fc:c8:05:4e:0c: c6:1e:d3:0d:d2:59:02:89:7b:2a:97:9d:62:3e:ef:24:a9:2a: 83:a3:8d:87:cd:4b:92:9a:0a:9f:fe:b4:e2:c3:98:ab:7c:c5: 23:a2:e5:9c:02:f8:e1:93:bd:b6:d6:0e:4b:d1:d3:86:3d:48: f5:e8:0b:1e:1a:6f:4f:35:9e:ab:6d:23:09:fa:23:99:4d:13: 75:3f:95:e4:ed:0b:b8:b8:07:3d:a2:47:46:a5:e1:03:d5:2b: 20:0b:8d:0b:d5:8c:6f:7c:36:bd:3f:3d:46:17:59:ee:0e:7b: 80:d6:e3:0e:fa:50:ef:24:47:7e:53:74:ff:90:b2:a3:bb:29: f4:9c:c1:1f:39:5b:51:db:3b:d5:80:83:3a:01:9e:3b:ce:73: 28:cb:cc:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwNjE3MDUwNDM1WhcNMjUwNjI0MDUwNDM1WjAYMRYwFAYD VQQDEw02ODUwZjc2NC1jNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHYlvXqOcOu5Hcfr3UIK1JtyRtQoZFvC46bgIRJSNNJaPeqZkPoASHaWV+ot RK09/Zz9Cn7sgTE3/NHoK71rpHrF8vTsus7g3vP4uJJAkHN810hiWmwKHVvyhAku Z6lIFOzG9QI2/XFjNlV0LbL1NYTZWz4qf2YhVIvKoC+/zXXOQW1IR+QeDChwWmMJ bdODTIv82opTdHw0uJrd4GScVGlvp5t9PTDIUFxkWTWe3Aerm/k1Dg+3PNF1zusX EdWvnkDOZ4A7LpIVPG5Efo4pebtPEUXOeCaHrzjK1ngMZ7Iiisf+iVKz4aCEAaEO lsrq1AocIy9A9znNK7UKM8S/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoIAnie ohb7ENL4CLTPScXAtCVBMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY1uPovoBe8vT8e6STovrm1IVQOyN5X5O/1C7D6mKeEKWvoIJ2/i40 rF6+e6f+mGh0iQcqWMC5XIvXNws0a9fgcaUuBlqOZkP9tIdZjSqxqsmi23gWZTqD PZMThvbErC3QD/H3Gskw/MgFTgzGHtMN0lkCiXsql51iPu8kqSqDo42HzUuSmgqf /rTiw5irfMUjouWcAvjhk7221g5L0dOGPUj16AseGm9PNZ6rbSMJ+iOZTRN1P5Xk 7Qu4uAc9okdGpeED1SsgC40L1YxvfDa9Pz1GF1nuDnuA1uMO+lDvJEd+U3T/kLKj uyn0nMEfOVtR2zvVgIM6AZ47znMoy8zs -----END CERTIFICATE-----Generated at Wed Jun 18 22:32:19 2025 by rpki-client