$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: YptN8RyuYyXX2xSfmoQF68+rrxcc9RbJRZ2j7awyi0E= Subject key identifier: 08:82:28:90:AB:8C:DF:FD:45:B5:A3:28:07:69:F2:18:5E:82:3E:86 Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 02D9 Signing time: Fri 13 Jun 2025 00:52:27 +0000 Manifest this update: Fri 13 Jun 2025 00:52:27 +0000 Manifest next update: Fri 20 Jun 2025 00:52:27 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: WSzZmTQSDm5cVMntjGp+7eHfwGw4rSQxFP0x307vKPg=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: Jun 13 00:52:27 2025 GMT Not After : Jun 20 00:52:27 2025 GMT Subject: CN=684b764b-ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:88:f6:b5:21:c5:5a:c0:1d:e7:34:ba:c7: da:43:2a:28:a5:9b:18:b0:03:f9:7f:b1:ae:90:55: a1:90:55:bd:9f:71:a3:4a:ac:9c:24:7e:75:c6:d1: a8:8a:e9:bf:36:0f:66:83:cf:d0:e2:91:d3:c4:78: e3:be:bd:a5:09:3d:2e:93:9e:7f:93:8b:35:ca:e5: 42:41:40:04:09:e5:4b:be:12:ff:ee:2e:8e:b1:47: c5:d2:97:83:bb:51:4e:45:a5:a8:62:6f:b1:62:81: 63:85:0c:98:77:54:8e:d0:0e:f6:a0:e0:3a:6c:18: a6:ec:92:d3:14:3a:a9:04:b4:66:a3:97:ba:68:f4: 43:fa:32:83:dc:6e:b4:da:0a:19:41:6d:ab:d4:7a: 92:ba:75:50:0a:b2:dd:bc:6e:76:5e:54:85:18:42: dc:28:0b:39:75:22:6c:08:b4:0b:e6:50:b3:64:d7: 25:5d:19:1c:e2:5c:e5:12:d9:d0:64:c6:47:b8:43: 99:a4:73:e7:81:e3:fe:26:f5:44:5c:f7:f7:de:5c: 43:48:7e:98:de:27:ed:9b:9e:dd:1a:bc:5e:6c:17: b0:3d:2b:08:64:c9:59:50:a3:a7:5a:c6:e2:bb:3f: 1f:c1:3f:c4:c0:94:20:01:06:7e:56:3b:d3:4c:71: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:28:90:AB:8C:DF:FD:45:B5:A3:28:07:69:F2:18:5E:82:3E:86 X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:79:f8:58:f7:8c:38:95:c9:19:cf:fb:4a:45:03:88:66: b0:6c:7a:99:31:b0:61:37:51:84:93:d0:48:82:6c:96:48:90: 48:3f:8d:a1:7f:74:8c:86:5d:a0:aa:9f:75:2f:66:de:bc:d3: 3c:34:51:d6:26:ef:4f:6a:7d:64:5d:a9:ae:fc:9a:d7:e3:e1: 8e:eb:41:8d:45:34:97:ea:20:e6:70:ef:67:ac:65:33:18:25: 29:58:05:1f:c5:bf:74:ff:29:47:ff:2a:f5:d1:24:d9:7b:4c: 89:d3:61:39:5f:3d:5c:60:b1:7a:bb:b5:3f:11:e5:dc:fd:1b: 87:bb:8b:34:ae:3e:3b:1f:4d:f8:80:5f:e9:f4:03:72:a9:97: 74:e6:ec:11:d6:7d:dc:66:ef:0d:c4:9d:95:10:8f:18:99:bf: 72:8f:2c:19:a5:6d:e3:8b:36:61:41:39:91:c7:2f:94:96:45: 64:92:d8:e4:48:58:81:ce:cb:2e:d2:d1:e1:64:31:79:5d:f1: ec:bf:7a:cb:4d:4b:62:71:b6:a1:1c:98:5a:e1:6f:05:7b:a5: 6c:26:be:7e:e5:3c:23:fa:94:ea:4c:ec:6f:bb:e8:49:42:1d: de:fe:06:92:3e:74:af:5b:5f:6a:e1:43:5a:a2:29:7a:79:1a: f2:80:fe:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjUwNjEzMDA1MjI3WhcNMjUwNjIwMDA1MjI3WjAYMRYwFAYD VQQDEw02ODRiNzY0Yi1jZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVOI9rUhxVrAHec0usfaQyoopZsYsAP5f7GukFWhkFW9n3GjSqycJH51xtGo ium/Ng9mg8/Q4pHTxHjjvr2lCT0uk55/k4s1yuVCQUAECeVLvhL/7i6OsUfF0peD u1FORaWoYm+xYoFjhQyYd1SO0A72oOA6bBim7JLTFDqpBLRmo5e6aPRD+jKD3G60 2goZQW2r1HqSunVQCrLdvG52XlSFGELcKAs5dSJsCLQL5lCzZNclXRkc4lzlEtnQ ZMZHuEOZpHPngeP+JvVEXPf33lxDSH6Y3iftm57dGrxebBewPSsIZMlZUKOnWsbi uz8fwT/EwJQgAQZ+VjvTTHHj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiCKJCr jN/9RbWjKAdp8hhegj6GMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiXn4WPeMOJXJGc/7SkUDiGawbHqZMbBhN1GEk9BIgmyWSJBIP42h f3SMhl2gqp91L2bevNM8NFHWJu9Pan1kXamu/JrX4+GO60GNRTSX6iDmcO9nrGUz GCUpWAUfxb90/ylH/yr10STZe0yJ02E5Xz1cYLF6u7U/EeXc/RuHu4s0rj47H034 gF/p9ANyqZd05uwR1n3cZu8NxJ2VEI8Ymb9yjywZpW3jizZhQTmRxy+UlkVkktjk SFiBzssu0tHhZDF5XfHsv3rLTUticbahHJha4W8Fe6VsJr5+5Twj+pTqTOxvu+hJ Qh3e/gaSPnSvW19q4UNaoil6eRrygP7Y -----END CERTIFICATE-----Generated at Sat Jun 14 19:22:07 2025 by rpki-client