$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: 246hVLNkT16nWZA7qgVDwH9QUtQuIMlX1wlj84UebCI= Subject key identifier: D8:D1:02:7E:E4:DA:55:2C:E2:FC:40:68:70:5F:D4:9D:6D:C8:10:35 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B69 Signing time: Thu 12 Jun 2025 19:18:57 +0000 Manifest this update: Thu 12 Jun 2025 19:18:56 +0000 Manifest next update: Thu 19 Jun 2025 19:18:56 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: YvPBtQ5ejWrb4qMFeP+ziZl9soxT+I+3k0NQN/o/k1k=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Jun 12 19:18:56 2025 GMT Not After : Jun 19 19:18:56 2025 GMT Subject: CN=684b2820-2a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:6e:80:83:28:cc:42:5f:04:be:05:58:a2: e6:70:a3:a6:7d:02:3b:2a:68:4e:b5:64:8e:af:b1: 34:65:e0:46:bb:ce:68:d7:a8:86:84:b5:57:4a:36: 32:19:81:1a:24:a3:77:b0:72:2c:75:4e:48:b2:cd: 2b:32:9b:13:9b:59:e5:ee:97:80:be:da:7e:0b:1d: 13:f3:8a:29:9e:22:4f:c5:6e:cf:02:b4:fb:4c:ee: 22:c1:35:16:51:4b:0e:96:58:81:2b:75:98:25:b4: 68:d2:ba:9f:12:5b:54:0e:cf:3f:49:56:7a:1f:89: 88:ad:98:67:60:8b:39:03:7b:78:35:0b:06:fa:0a: 2c:c4:73:83:f9:bd:d5:ef:14:2e:e9:12:3c:f7:ba: cc:19:a9:02:86:69:99:15:e9:14:2b:2e:fe:cb:fb: e9:3a:32:54:4c:02:62:6c:5d:d7:96:be:8e:8a:19: 48:81:6c:12:d9:42:cd:20:3d:7b:45:89:27:4b:f3: 50:7e:9a:d4:63:c9:f6:aa:f7:d2:ca:ae:98:69:e7: ae:50:36:9b:43:30:4a:c5:39:00:c5:60:b0:68:2a: ab:9f:38:cc:02:eb:c0:ce:18:a8:6d:f2:99:df:c0: 02:60:6b:75:2f:b9:f9:7f:04:f9:89:cd:e9:31:10: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D1:02:7E:E4:DA:55:2C:E2:FC:40:68:70:5F:D4:9D:6D:C8:10:35 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:65:c8:d2:97:49:ad:d2:8d:9a:10:53:33:3a:27:75:62:37: db:f4:af:b3:86:ab:4d:ab:9f:dc:72:9b:13:72:f4:30:87:96: f3:b9:c5:3f:c0:98:91:92:76:60:68:4f:81:b3:10:54:c2:f5: 97:b3:2b:43:32:4f:03:90:ae:f7:57:86:20:51:68:19:b2:43: a1:47:13:ed:46:db:d5:01:c4:e5:f7:e7:f1:16:d4:42:b8:83: 9e:16:8a:71:8f:4c:f5:17:f6:c5:c2:15:ce:fd:54:92:80:70: 82:66:5e:e1:09:79:3f:c3:f9:29:f7:b0:fd:03:d3:ee:77:06: 6c:bf:13:e1:cf:06:22:6e:42:ca:b0:42:18:fe:0a:78:be:1f: 95:ea:72:b4:27:83:b2:e7:68:90:cd:c7:04:2e:01:3c:d3:9f: fd:ba:c6:76:f2:ea:bb:ec:bf:d8:7d:ae:9f:fb:f7:bd:5e:bc: 14:87:8d:28:23:48:2c:cd:1c:c8:91:ef:8c:c7:13:07:3e:f7: e6:ce:90:6a:8d:b2:38:78:ab:2d:4e:dc:39:1c:7a:e8:4c:c3: 10:e3:e9:13:ab:92:3c:3c:3f:e2:fb:10:64:63:fa:30:95:2a: cd:62:4e:c0:32:e0:3b:8b:70:00:e8:25:2c:fb:09:6b:71:c2: 45:ab:39:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNjEyMTkxODU2WhcNMjUwNjE5MTkxODU2WjAYMRYwFAYD VQQDEw02ODRiMjgyMC0yYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYhugIMozEJfBL4FWKLmcKOmfQI7KmhOtWSOr7E0ZeBGu85o16iGhLVXSjYy GYEaJKN3sHIsdU5Iss0rMpsTm1nl7peAvtp+Cx0T84opniJPxW7PArT7TO4iwTUW UUsOlliBK3WYJbRo0rqfEltUDs8/SVZ6H4mIrZhnYIs5A3t4NQsG+gosxHOD+b3V 7xQu6RI897rMGakChmmZFekUKy7+y/vpOjJUTAJibF3Xlr6OihlIgWwS2ULNID17 RYknS/NQfprUY8n2qvfSyq6YaeeuUDabQzBKxTkAxWCwaCqrnzjMAuvAzhiobfKZ 38ACYGt1L7n5fwT5ic3pMRCpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjRAn7k 2lUs4vxAaHBf1J1tyBA1MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ZcjSl0mt0o2aEFMzOid1Yjfb9K+zhqtNq5/ccpsTcvQwh5bzucU/ wJiRknZgaE+BsxBUwvWXsytDMk8DkK73V4YgUWgZskOhRxPtRtvVAcTl9+fxFtRC uIOeFopxj0z1F/bFwhXO/VSSgHCCZl7hCXk/w/kp97D9A9PudwZsvxPhzwYibkLK sEIY/gp4vh+V6nK0J4Oy52iQzccELgE805/9usZ28uq77L/Yfa6f+/e9XrwUh40o I0gszRzIke+MxxMHPvfmzpBqjbI4eKstTtw5HHroTMMQ4+kTq5I8PD/i+xBkY/ow lSrNYk7AMuA7i3AA6CUs+wlrccJFqzkk -----END CERTIFICATE-----Generated at Sat Jun 14 17:57:24 2025 by rpki-client