$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json) Hash identifier: angGasRRYcw6btuhG1Gu4qcXjXOxOIGWuOQaIeu1Uxs= Subject key identifier: 10:E0:AC:E9:18:02:D0:CC:83:26:F7:7A:30:CA:69:08:DF:66:AA:FC Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft Manifest number: 0A15 Signing time: Wed 18 Jun 2025 19:40:58 +0000 Manifest this update: Wed 18 Jun 2025 19:40:57 +0000 Manifest next update: Wed 25 Jun 2025 19:40:57 +0000 Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: XeFB7agM2mSPE9svl/JS1lDmAXhsihEq4OjiYmiIAIo=) 2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Validity Not Before: Jun 18 19:40:57 2025 GMT Not After : Jun 25 19:40:57 2025 GMT Subject: CN=68531649-c58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:ad:2d:52:0e:62:4e:78:66:3b:de:c1:b6: b0:9b:c1:07:8f:dc:02:ab:63:8a:27:8d:98:1f:c6: 93:1e:b5:3e:84:3e:5f:86:df:62:94:59:40:a9:9d: 62:22:cf:fe:30:ac:5c:ea:17:b9:84:64:9b:c9:ae: 6d:85:bb:6b:ef:e3:fe:f8:a1:9a:1f:f2:62:be:22: 27:97:a1:a7:b6:ee:d3:f6:19:3f:34:de:71:a4:c0: e9:91:a3:ee:68:90:62:b1:97:a4:ba:2a:a5:95:26: 85:c9:35:46:ee:9f:1e:ca:17:e9:1c:28:9c:75:27: ae:e5:1c:2f:60:0e:6c:d5:2c:69:aa:2b:2a:4f:03: 29:b4:78:83:4b:f7:cf:db:77:72:26:7b:82:89:94: f9:df:c4:c5:a0:2e:6e:2d:f5:3a:9d:7e:7c:a3:34: cc:43:89:8a:c8:a8:eb:47:ef:90:b7:42:d6:4b:76: e8:b0:06:bd:b2:dd:be:b8:e2:b1:4a:da:af:f7:49: fd:c8:03:ca:73:6a:57:c2:ea:df:1c:c8:98:19:6d: 5e:8a:38:6f:fa:32:eb:62:5f:ef:bd:bf:a1:ff:3c: 46:ec:a6:8c:ec:9c:d2:d4:f3:02:66:30:92:1d:9a: 5e:fa:ec:1a:2e:5a:77:17:45:93:e0:dc:96:f3:5a: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E0:AC:E9:18:02:D0:CC:83:26:F7:7A:30:CA:69:08:DF:66:AA:FC X509v3 Authority Key Identifier: keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:2f:3b:1d:5f:99:ec:5f:93:82:8f:19:15:8d:0c:87:a6:ec: c2:aa:24:d8:db:ad:f3:e7:83:10:cb:a5:14:96:7d:98:b4:54: 91:1a:55:82:9b:ec:f4:90:49:de:7b:c7:49:f2:0e:66:9c:fc: f5:f6:d3:92:31:40:bd:1a:f3:09:0c:25:05:a7:6d:2e:2f:dd: fa:ed:8b:c2:f2:e0:19:bf:b6:cd:04:2f:9d:89:76:e8:d7:58: c9:9c:4e:03:1e:10:a7:e7:d5:9f:88:0a:20:17:2f:2d:91:83: 70:d7:a0:41:bd:4c:7c:6c:0e:a0:67:f0:0d:fc:c1:b7:4e:01: 84:ae:bf:03:dc:1a:97:11:e1:ca:e1:27:ac:7f:99:66:1f:4f: 06:ff:24:0a:6a:5f:80:6c:99:82:6d:c6:9b:d3:8c:92:fe:1d: 04:4b:58:37:84:e3:7a:f4:a3:74:c7:80:db:12:cc:d9:06:7d: e7:61:3a:dc:77:c2:f1:6a:d5:d0:b8:3f:1a:8c:cf:64:a2:f4: 93:63:7b:32:15:68:2a:f0:d7:6f:62:56:77:57:5c:59:76:0a: 14:6c:09:bc:0e:53:e6:3e:9f:09:c4:0b:5a:74:80:43:c7:23: cd:74:94:b1:26:40:e7:1e:f7:ab:3f:fe:fa:85:c0:cd:2d:dd: 29:3c:8f:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE QjIzMTFCNEYwHhcNMjUwNjE4MTk0MDU3WhcNMjUwNjI1MTk0MDU3WjAYMRYwFAYD VQQDEw02ODUzMTY0OS1jNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNKtLVIOYk54Zjvewbawm8EHj9wCq2OKJ42YH8aTHrU+hD5fht9ilFlAqZ1i Is/+MKxc6he5hGSbya5thbtr7+P++KGaH/JiviInl6Gntu7T9hk/NN5xpMDpkaPu aJBisZekuiqllSaFyTVG7p8eyhfpHCicdSeu5RwvYA5s1SxpqisqTwMptHiDS/fP 23dyJnuCiZT538TFoC5uLfU6nX58ozTMQ4mKyKjrR++Qt0LWS3bosAa9st2+uOKx Stqv90n9yAPKc2pXwurfHMiYGW1eijhv+jLrYl/vvb+h/zxG7KaM7JzS1PMCZjCS HZpe+uwaLlp3F0WT4NyW81pHcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDgrOkY AtDMgyb3ejDKaQjfZqr8MB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0 MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzLzsdX5nsX5OCjxkVjQyHpuzCqiTY263z54MQy6UUln2YtFSRGlWC m+z0kEnee8dJ8g5mnPz19tOSMUC9GvMJDCUFp20uL9367YvC8uAZv7bNBC+diXbo 11jJnE4DHhCn59WfiAogFy8tkYNw16BBvUx8bA6gZ/AN/MG3TgGErr8D3BqXEeHK 4Sesf5lmH08G/yQKal+AbJmCbcab04yS/h0ES1g3hON69KN0x4DbEszZBn3nYTrc d8LxatXQuD8ajM9kovSTY3syFWgq8NdvYlZ3V1xZdgoUbAm8DlPmPp8JxAtadIBD xyPNdJSxJkDnHverP/76hcDNLd0pPI9X -----END CERTIFICATE-----Generated at Fri Jun 20 11:39:38 2025 by rpki-client