$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: lbpVfsRGhFRlJ9u+RwX/UKOE+ZOiK94lPYI49fPrbW0= Subject key identifier: 09:AA:CF:1A:3A:E7:1A:77:56:43:F4:6D:07:46:E2:A2:CC:AD:B3:70 Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 02F7 Signing time: Sun 15 Jun 2025 00:58:51 +0000 Manifest this update: Sun 15 Jun 2025 00:58:50 +0000 Manifest next update: Sun 22 Jun 2025 00:58:50 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: Rc39b/ITVYvyb1Qz7u3TYw4//bkwlRynv48Iqv8IbCY=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: Cq6mdfvGMSMUVVy722vXaVlEzZ5zjpH7LRI1e0MUF1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Jun 15 00:58:50 2025 GMT Not After : Jun 22 00:58:50 2025 GMT Subject: CN=684e1acb-30cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:e0:89:92:d1:7d:3e:05:56:8a:5f:b4:10: f7:89:a0:86:0b:bf:fe:c0:c5:15:69:45:8d:40:eb: 47:af:3f:44:fa:50:3e:c7:0b:e9:25:ba:59:db:33: cc:d2:39:d3:57:56:e2:51:6d:5b:de:87:8a:1d:d8: f2:6d:ec:94:c0:0a:2d:5b:49:b6:ec:01:33:59:4b: 4e:9e:ab:5d:54:98:af:fe:3e:7e:c5:62:27:8a:ed: 70:72:87:74:5e:a3:0d:4a:2e:4e:fd:10:53:1f:61: 34:12:5a:c5:b1:36:bd:38:d3:53:4f:59:19:16:3a: f0:68:89:cf:61:5a:53:e5:e7:9b:92:a4:45:0e:cc: 34:a4:f6:31:94:5a:8a:04:d3:41:05:42:93:fc:3a: 02:d9:93:82:a1:ee:6b:00:cf:08:a5:07:73:09:d0: e4:08:61:79:99:a3:95:03:1c:e4:a3:2a:94:a9:cc: 9d:be:3c:fc:59:11:82:35:fc:f8:cb:15:82:cd:13: cb:e7:87:f9:72:02:e3:1f:45:8d:ca:59:fb:02:39: 5f:6e:cc:98:1c:02:66:92:93:68:85:b3:93:92:d1: ab:23:e2:36:a2:58:7d:03:fd:09:93:5d:1d:63:45: e0:97:63:49:a1:e4:40:e4:90:57:1f:cb:b8:8a:ed: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AA:CF:1A:3A:E7:1A:77:56:43:F4:6D:07:46:E2:A2:CC:AD:B3:70 X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:71:cb:5f:1e:39:98:bf:65:75:0d:55:f0:8c:93:73:90:f7: aa:1c:ad:4c:0d:0d:1c:18:37:89:4e:ea:0c:65:11:2e:9e:aa: 73:23:b9:62:08:9b:6a:97:01:3b:cb:97:1b:39:88:9b:bf:0a: f6:f9:72:ee:ae:e9:b6:93:3c:2b:cc:cd:8e:ef:e9:56:52:16: 93:3f:c3:c5:82:dc:57:24:5c:5d:ae:6d:4d:98:b8:a3:ad:7f: 15:f5:30:4e:9d:b8:c4:d8:ed:b6:90:72:dc:92:0b:65:a7:15: 44:3b:29:df:a3:3f:c6:98:80:6d:e7:d2:ab:51:90:af:61:57: 8c:87:0f:13:0a:7a:a5:53:ae:4f:50:66:71:3c:3f:2a:d6:a2: 1b:07:80:25:41:36:12:2c:ff:07:54:33:d1:c7:c3:c0:c4:c4: 28:01:11:6d:15:2d:fd:85:bc:8c:6f:6b:c4:a0:2f:0a:ec:fd: 34:57:d4:46:71:7a:60:ac:31:89:9f:2a:ba:42:7c:09:30:5f: 09:c2:d8:ab:0a:e4:b4:51:c5:ab:2b:03:18:69:96:ca:a2:23: 64:c3:ed:80:2b:91:1d:9c:cf:c5:a1:8a:ab:1a:b8:fc:01:9f: ed:77:9f:e8:86:c9:44:ce:d7:4c:2b:7b:e7:11:b4:4e:eb:c4: 0d:69:d4:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjUwNjE1MDA1ODUwWhcNMjUwNjIyMDA1ODUwWjAYMRYwFAYD VQQDEw02ODRlMWFjYi0zMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKfgiZLRfT4FVopftBD3iaCGC7/+wMUVaUWNQOtHrz9E+lA+xwvpJbpZ2zPM 0jnTV1biUW1b3oeKHdjybeyUwAotW0m27AEzWUtOnqtdVJiv/j5+xWIniu1wcod0 XqMNSi5O/RBTH2E0ElrFsTa9ONNTT1kZFjrwaInPYVpT5eebkqRFDsw0pPYxlFqK BNNBBUKT/DoC2ZOCoe5rAM8IpQdzCdDkCGF5maOVAxzkoyqUqcydvjz8WRGCNfz4 yxWCzRPL54f5cgLjH0WNyln7AjlfbsyYHAJmkpNohbOTktGrI+I2olh9A/0Jk10d Y0Xgl2NJoeRA5JBXH8u4iu2OuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmqzxo6 5xp3VkP0bQdG4qLMrbNwMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8cctfHjmYv2V1DVXwjJNzkPeqHK1MDQ0cGDeJTuoMZREunqpzI7li CJtqlwE7y5cbOYibvwr2+XLurum2kzwrzM2O7+lWUhaTP8PFgtxXJFxdrm1NmLij rX8V9TBOnbjE2O22kHLckgtlpxVEOynfoz/GmIBt59KrUZCvYVeMhw8TCnqlU65P UGZxPD8q1qIbB4AlQTYSLP8HVDPRx8PAxMQoARFtFS39hbyMb2vEoC8K7P00V9RG cXpgrDGJnyq6QnwJMF8JwtirCuS0UcWrKwMYaZbKoiNkw+2AK5EdnM/FoYqrGrj8 AZ/td5/ohslEztdMK3vnEbRO68QNadRV -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:39 2025 by rpki-client