$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: AJGQRm+ZpCGiAIIal9VZnpX29vSjUlSWAclnONk5bwc= Subject key identifier: 4C:E9:DC:7A:B1:8D:88:5F:01:E1:FE:C1:ED:76:F8:6A:77:68:D6:FA Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 070D Signing time: Sat 14 Jun 2025 21:39:39 +0000 Manifest this update: Sat 14 Jun 2025 21:39:39 +0000 Manifest next update: Sat 21 Jun 2025 21:39:39 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: UbBdejePemHs0vT5AJyumzgyF7B9xPFFaVELbQITL1E=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Jun 14 21:39:39 2025 GMT Not After : Jun 21 21:39:39 2025 GMT Subject: CN=684dec1b-4a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:9e:65:dd:93:c4:5b:f8:ce:f5:99:16:07: 2b:de:80:80:b3:c7:c1:0f:9d:f2:ec:ef:32:da:79: 10:ee:d7:4a:76:6b:5b:a9:ba:bf:db:be:3e:19:26: ea:00:65:9b:49:6a:5f:07:1c:a3:f3:4f:e6:a6:07: 79:e9:60:fd:35:60:07:da:4c:ee:be:a4:ee:3a:fc: aa:8a:43:49:3f:d8:a1:6b:c9:b3:48:94:11:22:72: 99:86:f1:24:fc:46:74:c2:c0:c3:a4:e1:9c:70:5e: 6c:cb:91:a5:63:ca:4c:27:4b:c9:49:90:97:a1:a2: 66:39:3a:8b:22:f4:26:64:0a:df:1a:a1:cc:f2:23: ef:c9:53:23:12:36:78:0a:88:35:91:b1:25:6a:1e: 32:72:a2:67:5c:91:5f:4a:24:81:4b:57:8e:8c:5a: 4f:51:57:e6:dd:4c:53:43:12:6e:56:44:ef:36:46: 4f:4b:76:94:25:85:c7:db:cb:3c:05:18:0a:8b:26: e0:23:b6:1e:4d:c7:95:13:6b:69:97:37:e0:fe:a7: 64:07:4e:d4:f0:df:2f:7e:3c:b1:7f:7e:30:0e:f1: 4f:58:7e:a8:24:ee:d8:03:04:3f:e3:93:2b:6b:f7: c9:91:5d:72:94:7b:fa:cf:bd:d7:79:fb:6d:ce:3e: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E9:DC:7A:B1:8D:88:5F:01:E1:FE:C1:ED:76:F8:6A:77:68:D6:FA X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:fd:17:3c:43:b9:d3:b5:bb:67:f4:22:4f:91:11:8b:75: bc:52:a3:24:ba:fc:a7:d3:25:1e:f6:02:d8:f5:95:c5:5f:b5: 93:d4:f1:e4:75:ff:e8:67:8f:dc:7d:f1:e4:a5:b1:e4:62:2f: 5d:fa:48:d4:44:72:62:ce:0c:2a:14:ce:e7:bf:7a:20:db:67: 11:5a:ab:df:f4:d5:2b:16:c5:f4:a1:46:43:c1:bf:62:2f:82: 0d:b5:db:a7:a2:a3:fe:5b:6a:46:83:0c:9b:aa:76:0f:c6:8c: bc:25:aa:72:00:25:b4:e1:9a:90:fd:90:05:fb:1c:4e:0b:e2: 70:ce:74:2b:a3:ee:31:d2:ec:9b:f7:69:d9:15:dc:ee:cf:9f: ff:9e:89:09:5c:c2:f9:c6:4a:13:9b:48:3b:c5:35:f3:70:9a: 23:9d:3e:0e:55:76:13:8b:41:a4:79:e1:19:3d:42:d6:2d:3e: 80:6b:98:ea:04:17:3f:b4:d4:c8:9f:3a:db:9a:ea:c1:08:a7: 22:aa:48:4e:1f:be:0b:c3:a0:23:2b:89:3a:99:37:39:b0:fb: 92:9c:24:8e:e3:61:95:6c:0e:d4:84:89:4d:94:fb:99:ac:a4: f9:c4:0f:05:98:77:18:ba:bd:1c:2f:9e:fe:f4:61:8e:e6:ec: 0e:dc:22:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNjE0MjEzOTM5WhcNMjUwNjIxMjEzOTM5WjAYMRYwFAYD VQQDEw02ODRkZWMxYi00YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcmeZd2TxFv4zvWZFgcr3oCAs8fBD53y7O8y2nkQ7tdKdmtbqbq/274+GSbq AGWbSWpfBxyj80/mpgd56WD9NWAH2kzuvqTuOvyqikNJP9iha8mzSJQRInKZhvEk /EZ0wsDDpOGccF5sy5GlY8pMJ0vJSZCXoaJmOTqLIvQmZArfGqHM8iPvyVMjEjZ4 Cog1kbElah4ycqJnXJFfSiSBS1eOjFpPUVfm3UxTQxJuVkTvNkZPS3aUJYXH28s8 BRgKiybgI7YeTceVE2tplzfg/qdkB07U8N8vfjyxf34wDvFPWH6oJO7YAwQ/45Mr a/fJkV1ylHv6z73Xefttzj68ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzp3Hqx jYhfAeH+we12+Gp3aNb6MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBpf0XPEO507W7Z/QiT5ERi3W8UqMkuvyn0yUe9gLY9ZXFX7WT1PHk df/oZ4/cffHkpbHkYi9d+kjURHJizgwqFM7nv3og22cRWqvf9NUrFsX0oUZDwb9i L4INtdunoqP+W2pGgwybqnYPxoy8JapyACW04ZqQ/ZAF+xxOC+JwznQro+4x0uyb 92nZFdzuz5//nokJXML5xkoTm0g7xTXzcJojnT4OVXYTi0GkeeEZPULWLT6Aa5jq BBc/tNTInzrbmurBCKciqkhOH74Lw6AjK4k6mTc5sPuSnCSO42GVbA7UhIlNlPuZ rKT5xA8FmHcYur0cL57+9GGO5uwO3CL5 -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:21 2025 by rpki-client