$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: qXUaFnYDdnhyEbjQqcVXQChWIbieVROdsIvWv3SniUA= Subject key identifier: B0:BC:62:3A:CD:E1:42:C9:5E:F2:B6:90:37:99:82:CE:6B:85:98:A7 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 036C Signing time: Tue 17 Jun 2025 00:34:58 +0000 Manifest this update: Tue 17 Jun 2025 00:34:58 +0000 Manifest next update: Tue 24 Jun 2025 00:34:58 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: 6j0WaNAi+GB9/c9181TsoT4aw+tze4kmuTbglJ5XJvE=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Jun 17 00:34:58 2025 GMT Not After : Jun 24 00:34:58 2025 GMT Subject: CN=6850b832-3e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:53:c9:19:e1:a9:79:c7:f3:23:19:0c:0c: cf:17:4c:bc:88:97:b1:88:93:be:b7:1a:9e:89:e7: 5e:8d:01:9a:52:54:9f:32:ec:2b:a8:66:b6:81:5f: 2f:42:2a:ab:73:3a:82:4b:8a:ae:82:21:09:e7:d3: ff:20:ef:e1:9d:3c:3f:1c:10:bc:3c:84:16:a3:fc: e4:fd:2e:38:6c:3a:5f:8f:eb:5c:8d:4e:fb:51:58: 4c:59:52:5a:d4:0d:3c:e9:de:6d:e9:17:86:10:d5: ef:6c:27:64:98:6c:2f:3a:8d:20:2a:67:72:30:f5: 6c:f6:11:85:9f:6f:eb:d8:0c:42:6f:83:08:d2:be: b4:0d:74:5e:a5:e8:08:ba:03:74:ca:83:88:37:15: 51:10:48:35:d7:a3:2a:ad:a2:81:af:74:16:db:58: de:47:9c:2b:d4:5b:10:28:46:77:e5:21:73:b3:86: 08:27:41:fb:7d:fe:87:71:85:1a:33:42:54:e0:ad: 47:60:53:a5:2c:93:86:a4:a1:19:f8:72:9d:30:a2: 45:97:83:e0:d0:85:7a:41:49:9e:f2:96:16:3d:50: a3:73:e8:1f:91:9a:83:90:21:ea:78:92:30:cb:fe: a0:f7:22:35:31:e9:7f:a0:84:2a:1b:17:9f:22:7c: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:62:3A:CD:E1:42:C9:5E:F2:B6:90:37:99:82:CE:6B:85:98:A7 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:a0:71:f3:e7:f4:be:4b:a3:97:df:9b:21:fc:5f:7a:6a:be: 77:a2:07:82:07:dc:75:8d:6a:a5:12:df:17:5f:ed:7a:9f:7c: d0:d8:49:7e:eb:d0:83:3e:b0:21:c2:e3:7b:e7:9a:ff:0d:0a: 0a:b3:79:50:22:c0:28:30:a3:59:56:dd:c9:9d:02:da:a4:56: ce:ea:8a:ea:2b:7a:e8:e7:39:41:11:6f:22:d9:61:d2:8d:47: 60:ad:95:42:ad:27:40:4e:53:f6:79:c3:4e:40:6f:dd:b7:6c: 7e:dd:38:bd:0e:d6:36:7a:d4:8d:78:17:24:47:f5:4e:a1:95: 54:80:47:5b:e1:b6:2a:8f:9a:fd:d2:13:f3:32:87:38:cc:63: 3c:5c:7d:43:7e:37:04:54:c2:5a:02:3b:2e:f3:8e:31:76:80: 4d:fe:21:0f:ce:c6:31:15:7a:68:0c:4b:3a:4f:8e:c9:11:8f: ec:9c:75:ea:0b:3e:40:b9:03:2d:b9:61:e5:3b:f3:05:7d:e9: 43:f5:87:c8:1f:bd:c7:d3:85:4e:7e:5e:be:00:cf:ce:68:d1: 20:5e:59:f6:3a:c7:df:6a:92:0f:4c:ec:3a:a6:df:1f:ec:9b: 0b:61:c5:e3:8d:aa:49:43:63:26:98:34:44:91:41:93:6f:fd: d3:02:f6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwNjE3MDAzNDU4WhcNMjUwNjI0MDAzNDU4WjAYMRYwFAYD VQQDEw02ODUwYjgzMi0zZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUJTyRnhqXnH8yMZDAzPF0y8iJexiJO+txqeiedejQGaUlSfMuwrqGa2gV8v QiqrczqCS4qugiEJ59P/IO/hnTw/HBC8PIQWo/zk/S44bDpfj+tcjU77UVhMWVJa 1A086d5t6ReGENXvbCdkmGwvOo0gKmdyMPVs9hGFn2/r2AxCb4MI0r60DXRepegI ugN0yoOINxVREEg116MqraKBr3QW21jeR5wr1FsQKEZ35SFzs4YIJ0H7ff6HcYUa M0JU4K1HYFOlLJOGpKEZ+HKdMKJFl4Pg0IV6QUme8pYWPVCjc+gfkZqDkCHqeJIw y/6g9yI1Mel/oIQqGxefInxPKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8YjrN 4ULJXvK2kDeZgs5rhZinMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJoHHz5/S+S6OX35sh/F96ar53ogeCB9x1jWqlEt8XX+16n3zQ2El+ 69CDPrAhwuN755r/DQoKs3lQIsAoMKNZVt3JnQLapFbO6orqK3ro5zlBEW8i2WHS jUdgrZVCrSdATlP2ecNOQG/dt2x+3Ti9DtY2etSNeBckR/VOoZVUgEdb4bYqj5r9 0hPzMoc4zGM8XH1DfjcEVMJaAjsu844xdoBN/iEPzsYxFXpoDEs6T47JEY/snHXq Cz5AuQMtuWHlO/MFfelD9YfIH73H04VOfl6+AM/OaNEgXln2OsffapIPTOw6pt8f 7JsLYcXjjapJQ2MmmDREkUGTb/3TAvYJ -----END CERTIFICATE-----Generated at Tue Jun 17 12:08:34 2025 by rpki-client