$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: uDa6x3LLHNaTJorMUNb1KV1DugrIrpP4Yf+lPXrZYJ0= Subject key identifier: 1C:5F:D1:B8:54:BB:5A:3C:77:B1:67:D1:85:28:26:BD:E5:07:F0:0F Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 060A Signing time: Mon 16 Jun 2025 22:31:12 +0000 Manifest this update: Mon 16 Jun 2025 22:31:12 +0000 Manifest next update: Mon 23 Jun 2025 22:31:12 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: Gu1J6YdIdPAJ7Z9UiJhesOBzam7eXMmeGwoSUHXk8NQ=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: g0yk2bIJuIxlslA37+MYT7bVXA+9AB9etIi570IlrAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Jun 16 22:31:12 2025 GMT Not After : Jun 23 22:31:12 2025 GMT Subject: CN=68509b30-1080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:1e:a7:63:c7:d2:36:75:0b:43:95:9d:6b: 24:35:26:4c:53:cc:a4:0a:b1:1b:20:06:3c:4d:01: f7:50:1d:68:48:18:e7:87:4e:71:76:a1:7e:43:07: a4:cf:bf:2a:42:3e:9d:da:9f:dc:12:28:77:2e:c7: fb:d8:04:2f:7b:76:dd:ab:7b:92:78:5b:0c:0d:de: 9b:e1:ef:32:56:6c:e2:1a:45:84:79:30:2f:82:80: c5:65:7f:ec:94:02:f9:df:1e:1d:56:a0:73:ee:d9: b9:2f:4b:b2:79:1c:19:88:cf:74:b1:c2:f6:1c:b6: 9d:ba:ac:ff:e8:0f:78:c1:35:92:e2:86:10:a6:94: 46:fa:e4:5f:d2:66:01:3b:4a:57:25:eb:9a:b9:71: 73:f9:be:34:e0:a4:53:6e:0b:81:60:93:71:0e:55: 98:51:6f:5d:b7:d5:4c:9f:c1:71:eb:4b:06:aa:b1: 6d:cb:2e:b4:53:18:aa:24:d8:76:52:c1:d8:7c:bf: af:6d:23:87:a7:3a:8f:fc:ca:a0:ca:da:77:5e:80: d7:41:7c:7e:37:9e:dd:f5:47:d6:df:49:bb:3e:37: c9:a3:d9:3e:65:2c:5d:71:1b:85:bf:c0:3a:5a:20: 5c:97:c3:3e:0b:50:c8:ab:3e:68:da:56:a8:f5:bc: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5F:D1:B8:54:BB:5A:3C:77:B1:67:D1:85:28:26:BD:E5:07:F0:0F X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:24:d4:ed:d9:52:78:fd:06:44:f8:73:c6:dc:5a:4e:c0:5a: ca:2e:3f:80:be:32:f7:ac:70:92:a6:4d:af:96:b9:fa:8d:44: 65:c6:0e:fd:6c:c4:b2:74:17:5f:29:bc:bf:8c:97:77:c5:82: dc:74:70:28:6a:b2:b3:01:16:2f:64:8a:7b:31:f0:64:30:63: 5f:be:92:a7:5b:0d:81:4b:84:08:fc:e6:6a:8f:f7:ad:24:59: 5f:8d:7e:d4:5e:63:6c:ef:77:36:e0:69:06:dc:c0:90:72:68: 8b:05:0c:62:7e:f9:d8:8d:75:9d:53:bf:45:71:68:93:bd:ab: 4a:72:ba:b8:f5:e7:23:6f:c0:f7:33:86:ab:d5:1a:e2:2f:78: 48:35:7e:c0:2d:8c:14:69:ef:96:a2:2a:8e:8c:39:2d:00:79: c2:a5:38:60:36:e6:6c:70:3b:5e:a2:af:78:07:ab:cb:6b:fd: 3a:80:d8:bc:8b:36:91:d1:fe:f5:5f:37:3a:cb:43:66:25:0b: ab:32:c0:48:15:72:98:bb:c4:96:df:de:9c:e6:32:d2:75:6f: 07:db:b3:e1:9b:e4:0d:c4:30:c7:34:84:54:ac:da:37:56:fc: d0:cb:52:71:6e:0d:ee:7d:44:f8:15:d7:e4:b2:b8:1d:05:dc: 54:a1:46:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUwNjE2MjIzMTEyWhcNMjUwNjIzMjIzMTEyWjAYMRYwFAYD VQQDEw02ODUwOWIzMC0xMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX0ep2PH0jZ1C0OVnWskNSZMU8ykCrEbIAY8TQH3UB1oSBjnh05xdqF+Qwek z78qQj6d2p/cEih3Lsf72AQve3bdq3uSeFsMDd6b4e8yVmziGkWEeTAvgoDFZX/s lAL53x4dVqBz7tm5L0uyeRwZiM90scL2HLaduqz/6A94wTWS4oYQppRG+uRf0mYB O0pXJeuauXFz+b404KRTbguBYJNxDlWYUW9dt9VMn8Fx60sGqrFtyy60UxiqJNh2 UsHYfL+vbSOHpzqP/Mqgytp3XoDXQXx+N57d9UfW30m7PjfJo9k+ZSxdcRuFv8A6 WiBcl8M+C1DIqz5o2lao9bw1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxf0bhU u1o8d7Fn0YUoJr3lB/APMB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnJNTt2VJ4/QZE+HPG3FpOwFrKLj+AvjL3rHCSpk2vlrn6jURlxg79 bMSydBdfKby/jJd3xYLcdHAoarKzARYvZIp7MfBkMGNfvpKnWw2BS4QI/OZqj/et JFlfjX7UXmNs73c24GkG3MCQcmiLBQxifvnYjXWdU79FcWiTvatKcrq49ecjb8D3 M4ar1RriL3hINX7ALYwUae+WoiqOjDktAHnCpThgNuZscDteoq94B6vLa/06gNi8 izaR0f71Xzc6y0NmJQurMsBIFXKYu8SW396c5jLSdW8H27Phm+QNxDDHNIRUrNo3 VvzQy1Jxbg3ufUT4FdfksrgdBdxUoUZt -----END CERTIFICATE-----Generated at Tue Jun 17 23:06:10 2025 by rpki-client