$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: JHIrcV5B4gn3hOz6eqdhCVfte2lMk8I5O3m5lMaZNR4= Subject key identifier: B4:FD:36:C1:51:EF:BE:6B:0A:F8:24:F1:27:F7:D9:5C:13:9B:0F:93 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0526 Signing time: Thu 12 Jun 2025 23:15:54 +0000 Manifest this update: Thu 12 Jun 2025 23:15:54 +0000 Manifest next update: Thu 19 Jun 2025 23:15:54 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: qfMOz5xFci5PVFblhRLdG232WBZRpLo+Dg3N40PDkiE=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jun 12 23:15:54 2025 GMT Not After : Jun 19 23:15:54 2025 GMT Subject: CN=684b5faa-fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:44:21:c2:aa:e6:96:58:22:f2:24:1f:e4:b7: 14:c5:eb:e0:4a:05:1a:83:8e:c4:89:0c:61:f6:a2: dd:2d:ba:30:7f:d4:3a:d7:9d:ed:ff:b9:23:1e:0d: 0b:c9:2d:c5:af:65:c7:44:fd:0c:d8:43:fe:4f:01: 53:0e:72:d8:f0:c5:62:5b:00:3a:43:f7:96:91:34: 77:3f:cd:fd:40:8e:16:3c:ee:b8:39:4d:85:b0:06: 7d:37:62:3c:d4:81:b1:29:74:19:aa:20:5c:92:85: 01:9e:a6:65:21:45:55:90:cf:de:c4:07:ac:c3:83: d0:d9:53:5f:f0:57:b6:30:e3:64:6b:ed:9e:28:d9: 74:97:1a:cf:3e:92:fb:6b:fe:f8:4e:77:5b:4d:83: 50:66:93:67:2c:28:a6:7d:ab:ce:38:a5:8f:1a:10: fe:4d:40:34:9f:80:a6:55:5b:01:0f:63:b7:c5:3c: 5c:57:ed:ed:95:84:32:db:30:e7:46:6e:4f:1e:68: b6:23:7d:90:34:b0:ae:bb:1e:39:ab:c8:1d:5f:14: 1f:15:f8:ca:bc:aa:72:75:74:a3:c2:40:cf:a2:2a: ef:63:b2:88:32:ea:56:89:96:ea:10:63:0d:79:de: dd:0a:07:d9:86:27:2a:f6:d0:37:c1:1b:6a:be:15: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FD:36:C1:51:EF:BE:6B:0A:F8:24:F1:27:F7:D9:5C:13:9B:0F:93 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:20:21:3b:8c:65:e2:d5:9b:bf:ee:6b:71:3f:54:c8:d3:98: 0d:88:46:47:07:14:03:76:cf:fc:2f:7e:80:d3:34:fd:0c:dd: 99:c9:39:4f:57:25:b3:f5:6c:09:0f:0b:5e:b0:5a:87:70:8a: f2:3b:1d:82:92:77:de:6f:2a:9a:87:d5:28:88:22:b0:30:ef: 27:2b:61:4b:c0:c7:e8:ec:20:1a:db:05:f8:ba:94:ef:67:8e: 1a:25:35:bd:05:80:f1:f7:16:d5:34:5a:9c:dc:31:cb:05:9e: 78:ee:69:c7:a2:b0:2e:2f:fe:8c:f9:56:c7:e5:15:eb:3c:0a: 2a:91:84:b1:4c:e5:f1:f6:e0:24:f6:9c:3a:c0:b5:e7:40:b1: 4c:1a:89:bc:34:b7:e6:f7:10:3f:05:af:8d:0d:e9:21:96:1e: 9d:ae:ba:85:34:76:8e:f5:e4:2d:68:e8:c5:87:15:d6:53:19: 47:ba:34:60:75:e8:c3:fb:c4:9a:91:df:1b:81:b1:10:a5:67: 72:4f:63:af:81:e0:a9:b8:65:f5:2d:b6:d3:99:15:5f:63:2a: 92:1f:c8:24:49:48:5f:df:e5:62:95:24:26:0b:07:44:56:b2: c3:47:8b:8d:26:3f:f1:ae:dc:d9:76:83:02:21:2b:3a:0c:e9: 8c:41:b7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNjEyMjMxNTU0WhcNMjUwNjE5MjMxNTU0WjAYMRYwFAYD VQQDEw02ODRiNWZhYS1mZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UQhwqrmllgi8iQf5LcUxevgSgUag47EiQxh9qLdLbowf9Q6153t/7kjHg0L yS3Fr2XHRP0M2EP+TwFTDnLY8MViWwA6Q/eWkTR3P839QI4WPO64OU2FsAZ9N2I8 1IGxKXQZqiBckoUBnqZlIUVVkM/exAesw4PQ2VNf8Fe2MONka+2eKNl0lxrPPpL7 a/74TndbTYNQZpNnLCimfavOOKWPGhD+TUA0n4CmVVsBD2O3xTxcV+3tlYQy2zDn Rm5PHmi2I32QNLCuux45q8gdXxQfFfjKvKpydXSjwkDPoirvY7KIMupWiZbqEGMN ed7dCgfZhicq9tA3wRtqvhXITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT9NsFR 775rCvgk8Sf32VwTmw+TMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiICE7jGXi1Zu/7mtxP1TI05gNiEZHBxQDds/8L36A0zT9DN2ZyTlP VyWz9WwJDwtesFqHcIryOx2Cknfebyqah9UoiCKwMO8nK2FLwMfo7CAa2wX4upTv Z44aJTW9BYDx9xbVNFqc3DHLBZ547mnHorAuL/6M+VbH5RXrPAoqkYSxTOXx9uAk 9pw6wLXnQLFMGom8NLfm9xA/Ba+NDekhlh6drrqFNHaO9eQtaOjFhxXWUxlHujRg dejD+8Sakd8bgbEQpWdyT2OvgeCpuGX1LbbTmRVfYyqSH8gkSUhf3+VilSQmCwdE VrLDR4uNJj/xrtzZdoMCISs6DOmMQbcI -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client