$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: WHrs1cxBU/77iV4bHgbr0HPnb9epu3wFo42tKDxIxQU= Subject key identifier: A0:D0:92:E3:4B:F0:78:0E:09:66:0C:4E:47:B7:04:06:24:9A:6C:D6 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 088B Signing time: Sat 14 Jun 2025 20:23:56 +0000 Manifest this update: Sat 14 Jun 2025 20:23:55 +0000 Manifest next update: Sat 21 Jun 2025 20:23:55 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: oYXsqB+/xClbUGmG7Hmf9HdPdCJ1yJ/CzoQ6xAu4ibs=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Jun 14 20:23:55 2025 GMT Not After : Jun 21 20:23:55 2025 GMT Subject: CN=684dda5b-c11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fc:1d:ea:0c:3d:5e:d5:e5:31:e1:78:45:a5: 39:b6:2e:fe:da:77:9e:dc:84:c8:1c:50:3d:24:91: 59:f5:aa:2b:54:49:c7:8d:66:30:1d:f3:94:e2:36: 90:ea:47:2f:59:ff:7c:e1:d0:9b:f8:e1:7c:2a:b4: 6c:3b:16:ff:63:eb:87:c1:d8:8d:15:12:d1:e9:40: 1c:da:48:fc:99:f9:7f:e8:b2:00:9d:29:b5:f0:d5: b6:65:44:66:6d:41:a9:7a:8e:cd:ab:0d:96:65:e4: ca:9f:9b:a5:89:81:75:ab:53:06:bb:77:4f:2d:ea: 59:a1:43:60:df:4f:bb:fc:7a:05:7f:03:c2:4a:48: 24:04:7c:f6:0f:e2:54:7e:ac:8c:46:3d:2a:21:2a: 36:c2:42:b4:9f:3e:3d:4f:1f:48:d4:47:69:45:73: d1:03:0b:19:5f:b2:cc:76:db:75:3a:be:9a:c1:8c: f4:d9:66:7a:05:e5:8d:bb:60:13:e9:92:37:b7:ec: 06:5e:25:99:db:09:70:b6:28:49:66:32:29:93:0b: 76:08:4f:da:25:7c:7b:7f:20:f5:74:a1:94:2a:96: ae:52:68:db:0f:d2:b5:1b:15:d1:66:53:7a:ed:12: a5:95:55:97:e7:23:ac:a9:2b:b5:45:86:86:36:4d: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D0:92:E3:4B:F0:78:0E:09:66:0C:4E:47:B7:04:06:24:9A:6C:D6 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f9:4f:36:de:7c:69:6a:4f:62:7b:f9:9d:b7:69:26:23:43: 9d:52:3c:de:51:90:d5:a9:1f:ac:63:65:d4:c2:8c:dd:22:22: 00:33:31:21:7d:3b:8b:b0:9a:fa:e8:a3:ad:bc:cf:59:30:fa: bd:0f:e3:1a:4e:a5:59:0f:c8:08:85:42:b1:0f:13:af:79:88: 1d:9d:3a:a9:83:e3:39:1e:89:35:7e:31:97:c3:34:9b:cc:de: ce:a4:8b:1d:d7:9d:55:06:4b:b3:6e:f1:ad:02:a1:c1:6b:d7: 8e:1c:0a:dc:cc:e7:c1:0d:f9:e1:07:7a:86:1d:4d:60:b8:ee: 2b:e5:c0:65:fd:75:40:2c:b8:22:5f:cd:9b:3e:0b:d1:72:6f: 8c:97:86:68:dc:8c:ef:b5:22:63:4b:80:8a:82:08:ec:98:62: be:7f:e6:da:00:a7:df:48:40:73:46:e1:3e:3a:27:62:30:50: 62:97:a0:2b:fe:84:0d:1e:db:7b:99:5f:b3:78:93:18:ae:a3: 5e:a7:d3:0f:1e:73:1b:94:86:5b:77:54:c6:a5:3b:00:78:99: 99:72:32:fb:cc:26:01:fc:b2:60:d4:94:66:c5:46:cb:04:13: e9:fd:a9:41:4c:fd:16:1c:af:5b:4f:07:10:7f:f9:ca:b6:96: 51:8a:81:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwNjE0MjAyMzU1WhcNMjUwNjIxMjAyMzU1WjAYMRYwFAYD VQQDEw02ODRkZGE1Yi1jMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9vwd6gw9XtXlMeF4RaU5ti7+2nee3ITIHFA9JJFZ9aorVEnHjWYwHfOU4jaQ 6kcvWf984dCb+OF8KrRsOxb/Y+uHwdiNFRLR6UAc2kj8mfl/6LIAnSm18NW2ZURm bUGpeo7Nqw2WZeTKn5uliYF1q1MGu3dPLepZoUNg30+7/HoFfwPCSkgkBHz2D+JU fqyMRj0qISo2wkK0nz49Tx9I1EdpRXPRAwsZX7LMdtt1Or6awYz02WZ6BeWNu2AT 6ZI3t+wGXiWZ2wlwtihJZjIpkwt2CE/aJXx7fyD1dKGUKpauUmjbD9K1GxXRZlN6 7RKllVWX5yOsqSu1RYaGNk0XsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDQkuNL 8HgOCWYMTke3BAYkmmzWMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk+U823nxpak9ie/mdt2kmI0OdUjzeUZDVqR+sY2XUwozdIiIAMzEh fTuLsJr66KOtvM9ZMPq9D+MaTqVZD8gIhUKxDxOveYgdnTqpg+M5Hok1fjGXwzSb zN7OpIsd151VBkuzbvGtAqHBa9eOHArczOfBDfnhB3qGHU1guO4r5cBl/XVALLgi X82bPgvRcm+Ml4Zo3IzvtSJjS4CKggjsmGK+f+baAKffSEBzRuE+OidiMFBil6Ar /oQNHtt7mV+zeJMYrqNep9MPHnMblIZbd1TGpTsAeJmZcjL7zCYB/LJg1JRmxUbL BBPp/alBTP0WHK9bTwcQf/nKtpZRioF8 -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:15 2025 by rpki-client