$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: 1m1VCdgn027Fz/0czH0VXHOvFseVXRnMOd7G25+dNvI= Subject key identifier: C5:2C:92:5A:56:72:A1:28:9B:58:F7:A2:53:41:22:55:D0:31:72:F3 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C45 Signing time: Thu 12 Jun 2025 18:19:43 +0000 Manifest this update: Thu 12 Jun 2025 18:19:42 +0000 Manifest next update: Thu 19 Jun 2025 18:19:42 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: geMX6VUPyrRpsOhIz86+tJmH6ljV743WHpeccAOkxcE=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Jun 12 18:19:42 2025 GMT Not After : Jun 19 18:19:42 2025 GMT Subject: CN=684b1a3e-824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:76:57:25:d6:d0:00:4a:f9:1e:bd:21:e7: e2:52:4f:2c:d2:df:16:00:0a:89:bf:8a:bf:c0:e2: 7d:12:70:06:08:ac:29:00:f5:d5:e6:1d:fd:fa:4e: 58:3e:a5:07:f7:04:b5:78:19:2b:f7:9b:08:08:9d: c6:d6:16:e1:3b:c2:55:5e:3e:4c:23:1a:d6:ee:7d: 32:20:4b:95:16:6f:a2:b7:e2:73:05:d8:6f:2f:bd: 21:49:df:18:87:ac:88:1b:a2:31:80:b4:88:bb:aa: d9:ee:84:b8:47:9a:1e:9c:4a:b3:a7:99:68:e5:3b: 2f:51:19:32:d3:58:b2:09:55:43:ed:19:0f:80:54: 38:10:69:8c:c6:16:da:ed:96:08:1b:ff:e8:8c:13: b3:ee:8a:6e:b2:9b:cb:db:97:08:13:db:89:a1:a5: d7:c7:df:c8:8a:81:cc:35:54:85:57:f4:30:6a:a0: b6:b4:29:68:de:31:f8:dd:64:0f:37:21:1a:b2:7f: f5:34:5b:09:ee:c6:25:5e:6d:3e:15:c1:d2:7c:df: a7:c0:19:af:ce:18:c6:cb:1c:69:63:f2:97:fe:7a: b1:87:eb:a9:89:2c:30:43:63:56:46:73:49:7e:ea: af:40:44:68:73:ba:6e:2a:51:51:5f:de:d1:44:62: a2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:92:5A:56:72:A1:28:9B:58:F7:A2:53:41:22:55:D0:31:72:F3 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:4c:6b:06:c9:08:f6:aa:33:31:23:52:9d:bb:83:02:74:f2: 53:6d:a2:01:92:3a:64:21:1d:8e:c9:0f:04:6e:a1:a4:16:f9: 72:26:19:59:d7:3b:df:2f:2f:47:16:8f:46:9e:79:fd:52:9f: 64:12:75:d0:32:35:a3:3d:ae:d6:8e:f7:c6:39:27:90:7a:66: 98:ae:b4:77:ac:8a:31:42:4e:32:b6:ac:f2:72:ca:d1:0b:19: 32:29:69:db:a0:14:2a:27:ee:2f:2b:21:4e:27:c9:da:d5:2b: f3:d7:b1:25:35:8d:7c:bf:64:a9:a1:4f:7b:f1:e2:21:7d:fb: b4:72:34:89:d0:1d:0e:a1:0c:c9:d3:2c:7a:d4:25:dc:42:94: 66:83:a2:59:3a:18:01:6c:d3:06:9d:da:e1:06:67:30:cb:d9: 7e:08:fd:54:2b:47:ca:5b:f6:76:38:87:a3:0c:97:76:5e:90: 4c:5c:5f:fd:54:7f:e4:08:c7:1f:28:90:a2:73:c0:36:65:f0: 5c:77:9a:56:18:d2:14:9d:c1:92:5b:e7:38:e9:04:19:f4:1c: fe:a1:cd:b1:00:48:36:05:a0:2f:91:e4:95:c1:f0:53:30:33: ee:bc:91:d1:3c:2f:93:12:a2:fb:28:8f:78:5e:61:8e:0c:4a: 3d:a2:c7:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwNjEyMTgxOTQyWhcNMjUwNjE5MTgxOTQyWjAYMRYwFAYD VQQDEw02ODRiMWEzZS04MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZR2VyXW0ABK+R69IefiUk8s0t8WAAqJv4q/wOJ9EnAGCKwpAPXV5h39+k5Y PqUH9wS1eBkr95sICJ3G1hbhO8JVXj5MIxrW7n0yIEuVFm+it+JzBdhvL70hSd8Y h6yIG6IxgLSIu6rZ7oS4R5oenEqzp5lo5TsvURky01iyCVVD7RkPgFQ4EGmMxhba 7ZYIG//ojBOz7opuspvL25cIE9uJoaXXx9/IioHMNVSFV/QwaqC2tClo3jH43WQP NyEasn/1NFsJ7sYlXm0+FcHSfN+nwBmvzhjGyxxpY/KX/nqxh+upiSwwQ2NWRnNJ fuqvQERoc7puKlFRX97RRGKixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUsklpW cqEom1j3olNBIlXQMXLzMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLTGsGyQj2qjMxI1Kdu4MCdPJTbaIBkjpkIR2OyQ8EbqGkFvlyJhlZ 1zvfLy9HFo9Gnnn9Up9kEnXQMjWjPa7WjvfGOSeQemaYrrR3rIoxQk4ytqzycsrR CxkyKWnboBQqJ+4vKyFOJ8na1Svz17ElNY18v2SpoU978eIhffu0cjSJ0B0OoQzJ 0yx61CXcQpRmg6JZOhgBbNMGndrhBmcwy9l+CP1UK0fKW/Z2OIejDJd2XpBMXF/9 VH/kCMcfKJCic8A2ZfBcd5pWGNIUncGSW+c46QQZ9Bz+oc2xAEg2BaAvkeSVwfBT MDPuvJHRPC+TEqL7KI94XmGODEo9oscp -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:37 2025 by rpki-client