$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: KB0TkCONdP1Aqy3LUWZxX94V0A/qn5bK9q3ppTRPUds= Subject key identifier: 25:73:96:94:FA:5D:A4:40:E4:A7:4D:A7:C3:6A:37:B3:4E:5B:34:11 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 68 Signing time: Tue 17 Jun 2025 05:53:15 +0000 Manifest this update: Tue 17 Jun 2025 05:53:14 +0000 Manifest next update: Tue 24 Jun 2025 05:53:14 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: v9RGr2Cmj+DCsX8nmR4H0wshXhGAhjZH4XrUve7zeSo=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Jun 17 05:53:14 2025 GMT Not After : Jun 24 05:53:14 2025 GMT Subject: CN=685102ca-7753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:7f:d5:c4:60:1f:fc:1f:8d:63:ca:37:e6: 8f:2b:dd:98:39:40:07:fb:d6:38:f0:64:19:fb:dd: dd:e2:f9:9e:16:9a:7c:c8:31:43:c7:be:72:de:de: a8:51:bd:a1:33:94:25:f6:02:44:0d:b4:ad:40:f2: 60:89:c7:4f:38:60:c9:67:4d:89:47:22:77:26:a0: de:ad:e0:4d:ea:f4:88:27:1b:35:e6:a7:56:2f:86: 79:4d:32:19:4a:05:94:be:59:8a:93:dc:0c:f8:18: 86:10:6c:33:28:e1:fe:c3:d2:d6:22:b5:68:a1:59: 65:ef:4f:ab:e1:89:43:59:26:bb:c9:ea:bb:23:7a: 97:99:d9:07:46:1d:3f:fd:99:40:ae:d0:51:57:fe: 3c:a4:7c:73:de:8d:7b:4d:4d:ae:d8:92:36:6e:c8: fa:ba:b5:40:38:b0:c0:1a:a5:ab:45:6e:e2:96:f2: 09:90:65:3b:7f:29:d4:f8:7c:c5:45:85:d1:a2:0c: 14:3e:9a:8d:40:0d:cb:bb:c5:7b:a6:fe:1b:81:20: d1:62:14:4d:5b:4d:ab:bc:9c:65:5e:fe:b9:4c:62: 9c:78:66:31:38:ce:03:51:40:45:e5:63:28:5f:26: 70:29:b1:2b:95:fd:8c:f8:80:cc:96:f5:a8:9b:5e: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:96:94:FA:5D:A4:40:E4:A7:4D:A7:C3:6A:37:B3:4E:5B:34:11 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:50:cf:92:db:f3:19:57:3c:b0:ea:27:6b:77:91:ac:20: a4:37:61:07:0e:b6:57:05:60:1e:d0:dd:da:36:83:7b:19:0e: c0:ba:e1:a3:00:07:19:98:be:c6:1d:66:4b:c1:3f:0f:ce:9d: ef:46:57:14:05:68:e5:8f:95:49:1b:da:d9:b5:38:e3:67:f6: f7:4a:9c:47:a3:f8:d5:30:09:2d:3a:f5:49:68:3e:18:50:a6: 0a:ff:75:74:64:ed:a6:4e:6e:47:0a:e4:5a:89:2e:a6:ae:86: 92:86:05:10:c6:b8:1b:c1:db:d5:0b:d4:cc:c6:de:41:dd:ad: 42:40:2b:b1:1d:da:79:69:fc:2f:01:43:8f:4f:a2:75:4c:a8: 80:4f:51:71:1c:89:6e:18:55:c2:b9:c1:ad:32:5f:a5:b1:2f: 34:3f:e3:e1:bb:de:53:a3:88:de:51:64:26:9d:b2:df:a5:80: 8b:91:86:62:09:ea:e9:38:f6:a2:45:e4:63:11:2e:7a:ef:eb: 70:ed:e7:01:27:b8:07:38:30:a2:8f:00:70:94:7d:14:a9:41: e1:c9:ca:db:23:3c:47:c2:5d:0e:de:36:e8:13:26:7f:e7:25: 8c:0f:8a:c6:4f:18:6d:1d:61:6b:4e:e1:af:41:0a:d4:c3:0a: fe:18:ec:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA2MTcwNTUzMTRaFw0yNTA2MjQwNTUzMTRaMBgxFjAUBgNV BAMTDTY4NTEwMmNhLTc3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWX/VxGAf/B+NY8o35o8r3Zg5QAf71jjwZBn73d3i+Z4WmnzIMUPHvnLe3qhR vaEzlCX2AkQNtK1A8mCJx084YMlnTYlHIncmoN6t4E3q9IgnGzXmp1YvhnlNMhlK BZS+WYqT3Az4GIYQbDMo4f7D0tYitWihWWXvT6vhiUNZJrvJ6rsjepeZ2QdGHT/9 mUCu0FFX/jykfHPejXtNTa7YkjZuyPq6tUA4sMAapatFbuKW8gmQZTt/KdT4fMVF hdGiDBQ+mo1ADcu7xXum/huBINFiFE1bTau8nGVe/rlMYpx4ZjE4zgNRQEXlYyhf JnApsSuV/Yz4gMyW9aibXgXbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJXOWlPpd pEDkp02nw2o3s05bNBEwHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLTUM+S2/MZVzyw6idrd5GsIKQ3YQcOtlcFYB7Q3do2g3sZDsC64aMA BxmYvsYdZkvBPw/One9GVxQFaOWPlUkb2tm1OONn9vdKnEej+NUwCS069UloPhhQ pgr/dXRk7aZObkcK5FqJLqauhpKGBRDGuBvB29UL1MzG3kHdrUJAK7Ed2nlp/C8B Q49PonVMqIBPUXEciW4YVcK5wa0yX6WxLzQ/4+G73lOjiN5RZCadst+lgIuRhmIJ 6uk49qJF5GMRLnrv63Dt5wEnuAc4MKKPAHCUfRSpQeHJytsjPEfCXQ7eNugTJn/n JYwPisZPGG0dYWtO4a9BCtTDCv4Y7Ak= -----END CERTIFICATE-----Generated at Wed Jun 18 06:33:26 2025 by rpki-client