$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: 96PbHtdneg9QTTyFOOHR6aaKe8H1MR2V9q9Xe8b0Vyg= Subject key identifier: AA:03:BA:23:D7:4B:94:F2:05:2B:EA:4C:A0:53:06:E1:E9:9E:91:A9 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 0832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 1451 Signing time: Thu 12 Jun 2025 18:26:26 +0000 Manifest this update: Thu 12 Jun 2025 18:26:26 +0000 Manifest next update: Thu 19 Jun 2025 18:26:26 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: Wo5+s8kBWtS8uey2YV4f2J755+wWx2RQXG+YyxQkv4w=) 2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: Jun 12 18:26:26 2025 GMT Not After : Jun 19 18:26:26 2025 GMT Subject: CN=684b1bd2-810c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:a0:9e:26:36:6f:66:68:92:40:04:39:ed: e1:92:a0:cc:01:07:53:ad:b0:4e:0f:64:15:98:49: ad:db:12:f9:d3:73:50:6c:cf:3c:70:af:00:b3:c1: 76:31:67:8d:cb:5e:8d:fd:36:df:d2:07:5f:f5:ac: c7:f6:8f:d2:f4:e8:ac:67:6e:d1:91:bf:47:eb:b2: 99:47:9a:7f:c8:61:0e:7d:e6:74:c6:89:82:72:ec: 48:c6:f6:b8:23:a6:5e:46:ee:82:8d:93:0f:16:fe: 5b:ab:91:5b:a8:cc:2d:95:26:20:37:07:f5:40:6b: 3d:2e:b6:3e:ce:dc:5a:97:c2:aa:90:a1:c7:7a:5c: 77:c0:0d:c2:44:9b:ec:8d:59:ec:4c:94:a1:b9:54: d4:da:58:fe:45:be:03:f8:7f:f3:e4:6f:2f:03:04: e2:b7:bc:34:73:a9:0f:8b:0f:a2:5a:6c:c1:19:57: d8:30:1c:48:31:10:00:c3:8b:33:d0:c2:ed:2f:61: 0a:6b:3a:e1:be:71:6c:02:a7:40:ad:5d:1f:b6:f7: a2:48:18:df:fe:4f:84:b7:9e:83:29:44:f2:f6:7b: f8:8b:8a:e7:ce:3b:c6:06:1d:e5:aa:b0:2d:53:bf: ea:d7:5a:cd:5a:a1:64:68:fe:65:66:e3:3c:1f:6e: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:BA:23:D7:4B:94:F2:05:2B:EA:4C:A0:53:06:E1:E9:9E:91:A9 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e4:76:56:01:23:fe:f6:b1:9d:c3:c4:19:f3:22:03:a3:7b: 72:ed:03:5d:ad:92:ca:7d:e1:c3:34:1c:f6:c2:9d:99:59:9b: 46:b4:cd:db:98:2c:aa:66:72:ff:fb:66:98:e5:e7:08:f2:d1: 5f:45:98:0f:d0:31:50:11:66:6d:5f:27:97:aa:fa:08:4a:77: 6c:0c:fe:b7:22:76:6c:49:df:e6:a2:e3:77:21:b6:49:ea:66: 60:39:c6:73:e4:5d:f8:96:67:24:ef:17:57:f3:52:cf:f7:ab: a9:68:24:be:56:dd:4e:6c:e1:7f:a6:53:70:b9:17:d0:34:12: 19:5f:c6:b6:84:6b:bd:f1:77:27:01:36:b8:32:86:bc:b0:05: 11:64:74:e5:71:de:03:c4:55:9a:14:5a:6d:12:01:45:71:f9: 0e:86:cc:b8:83:6d:5f:4b:19:68:26:2c:bf:67:b9:19:38:f7: 11:ab:cd:fb:5c:85:53:07:36:23:2d:a1:e6:62:3f:d4:83:8a: cc:c7:6b:4f:e6:1d:2a:06:d2:21:cf:68:b2:37:fa:52:f1:ad: c0:cc:22:80:f8:a1:6a:23:4b:6a:1e:48:86:8b:b1:79:21:98: 3c:dd:d5:d3:44:34:54:ac:fd:42:1a:4b:e0:73:92:1b:72:0d: 05:d7:73:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwNjEyMTgyNjI2WhcNMjUwNjE5MTgyNjI2WjAYMRYwFAYD VQQDEw02ODRiMWJkMi04MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH2gniY2b2ZokkAEOe3hkqDMAQdTrbBOD2QVmEmt2xL503NQbM88cK8As8F2 MWeNy16N/Tbf0gdf9azH9o/S9OisZ27Rkb9H67KZR5p/yGEOfeZ0xomCcuxIxva4 I6ZeRu6CjZMPFv5bq5FbqMwtlSYgNwf1QGs9LrY+ztxal8KqkKHHelx3wA3CRJvs jVnsTJShuVTU2lj+Rb4D+H/z5G8vAwTit7w0c6kPiw+iWmzBGVfYMBxIMRAAw4sz 0MLtL2EKazrhvnFsAqdArV0ftveiSBjf/k+Et56DKUTy9nv4i4rnzjvGBh3lqrAt U7/q11rNWqFkaP5lZuM8H267hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoDuiPX S5TyBSvqTKBTBuHpnpGpMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy5HZWASP+9rGdw8QZ8yIDo3ty7QNdrZLKfeHDNBz2wp2ZWZtGtM3b mCyqZnL/+2aY5ecI8tFfRZgP0DFQEWZtXyeXqvoISndsDP63InZsSd/mouN3IbZJ 6mZgOcZz5F34lmck7xdX81LP96upaCS+Vt1ObOF/plNwuRfQNBIZX8a2hGu98Xcn ATa4Moa8sAURZHTlcd4DxFWaFFptEgFFcfkOhsy4g21fSxloJiy/Z7kZOPcRq837 XIVTBzYjLaHmYj/Ug4rMx2tP5h0qBtIhz2iyN/pS8a3AzCKA+KFqI0tqHkiGi7F5 IZg83dXTRDRUrP1CGkvgc5Ibcg0F13NC -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:16 2025 by rpki-client