$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: OHn+5ay6UCAf4q+0QmwUzFebXaNmR5Yu5h2jccd6EpI= Subject key identifier: BC:EE:7F:25:57:AF:5E:92:15:2A:EF:34:6C:86:19:5A:FA:9A:8F:44 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 67 Signing time: Thu 19 Jun 2025 06:21:48 +0000 Manifest this update: Thu 19 Jun 2025 06:21:47 +0000 Manifest next update: Thu 26 Jun 2025 06:21:47 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: s+MyouV7zQDvuYtbH45ksyokfApKd89aEd1x3aLdUMQ=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Jun 19 06:21:47 2025 GMT Not After : Jun 26 06:21:47 2025 GMT Subject: CN=6853ac7b-fc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:c2:5e:8f:9a:2b:90:42:8e:31:7f:bc:b7: d3:c5:b7:f0:75:82:9f:fb:35:00:6c:61:04:bd:2b: 3a:98:78:82:e0:de:d9:ef:6d:ae:cc:a3:c3:0b:6d: f3:01:1e:ae:62:f2:e2:dc:40:f3:16:52:58:e0:90: ae:6a:1c:83:18:ae:66:ff:65:3c:c2:31:86:2f:a1: f2:56:73:e3:25:d4:d0:cf:0f:5a:46:4b:89:0e:27: 43:7c:99:59:f4:ce:45:5b:5e:a7:82:19:2a:11:9b: c3:39:55:c9:54:ca:83:3c:64:dd:a0:6f:94:54:88: a9:a4:37:0b:47:25:74:23:41:76:d1:5e:46:d4:46: 1d:19:59:aa:bc:55:44:49:cb:c7:5c:c6:f2:78:23: e6:7f:41:eb:eb:a4:7a:80:31:68:86:c3:ca:5c:c2: 0a:83:44:ca:96:26:0e:e2:65:d4:30:a9:8e:61:82: 83:17:e3:87:40:8e:79:82:af:39:b8:a9:2e:8e:46: 27:45:c6:04:a1:a7:bb:d5:f6:74:9b:5f:75:cf:cd: 28:a7:8f:e8:2c:c9:5b:76:67:7c:01:32:8c:38:0d: d4:c5:bb:27:62:ae:bd:af:f8:75:bb:2a:17:f9:51: 26:18:35:66:49:b0:95:b1:78:9f:bb:40:d1:cd:85: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:7F:25:57:AF:5E:92:15:2A:EF:34:6C:86:19:5A:FA:9A:8F:44 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f8:f3:0b:c8:4d:59:17:15:f2:49:45:52:a3:7b:d7:b6:cd: a1:74:c5:0c:55:00:cc:39:fd:10:db:82:36:54:b5:ad:52:57: 31:ec:c9:07:f0:7b:7f:51:a6:7e:9c:e7:81:84:90:13:74:88: b1:77:4d:3f:ca:21:57:1b:1e:68:66:9f:1c:f9:f7:4a:45:26: 5a:cc:30:a6:87:9b:a5:72:87:57:64:5e:aa:bd:09:0b:d0:73: 94:4c:d6:24:ed:93:4a:c7:8b:dc:81:b4:8a:50:23:19:63:e3: 40:5a:b5:68:74:fa:1c:4c:61:b7:36:b9:11:69:b2:c4:70:48: 6e:70:56:6a:b5:af:a5:68:47:03:6f:1a:e8:8a:b2:d4:25:eb: 32:7f:fe:b0:e1:ae:a2:4c:ac:22:c5:d0:34:f6:21:6b:87:a9: 18:71:af:54:2f:bf:8b:27:a4:42:eb:d0:f4:fa:41:b2:51:a5: f4:26:88:ec:ee:d5:6d:25:fc:6d:12:72:57:51:15:13:16:b8: 1d:2e:52:11:d0:e6:2f:ea:fe:5b:2b:60:ef:34:3f:e4:0a:0f: d5:c3:eb:c4:b0:ac:f1:2d:a4:19:c9:01:8a:05:e6:33:4a:e5: 9a:7e:3a:4d:ab:fe:dc:eb:8c:e8:4c:ee:d3:cb:2c:49:93:b4: 10:a0:5b:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA2MTkwNjIxNDdaFw0yNTA2MjYwNjIxNDdaMBgxFjAUBgNV BAMTDTY4NTNhYzdiLWZjM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQNsJej5orkEKOMX+8t9PFt/B1gp/7NQBsYQS9KzqYeILg3tnvba7Mo8MLbfMB Hq5i8uLcQPMWUljgkK5qHIMYrmb/ZTzCMYYvofJWc+Ml1NDPD1pGS4kOJ0N8mVn0 zkVbXqeCGSoRm8M5VclUyoM8ZN2gb5RUiKmkNwtHJXQjQXbRXkbURh0ZWaq8VURJ y8dcxvJ4I+Z/QevrpHqAMWiGw8pcwgqDRMqWJg7iZdQwqY5hgoMX44dAjnmCrzm4 qS6ORidFxgShp7vV9nSbX3XPzSinj+gsyVt2Z3wBMow4DdTFuydirr2v+HW7Khf5 USYYNWZJsJWxeJ+7QNHNhQ8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvO5/JVev XpIVKu80bIYZWvqaj0QwHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACH48wvITVkXFfJJRVKje9e2zaF0xQxVAMw5/RDbgjZUta1SVzHsyQfw e39Rpn6c54GEkBN0iLF3TT/KIVcbHmhmnxz590pFJlrMMKaHm6Vyh1dkXqq9CQvQ c5RM1iTtk0rHi9yBtIpQIxlj40BatWh0+hxMYbc2uRFpssRwSG5wVmq1r6VoRwNv GuiKstQl6zJ//rDhrqJMrCLF0DT2IWuHqRhxr1Qvv4snpELr0PT6QbJRpfQmiOzu 1W0l/G0ScldRFRMWuB0uUhHQ5i/q/lsrYO80P+QKD9XD68SwrPEtpBnJAYoF5jNK 5Zp+Ok2r/tzrjOhM7tPLLEmTtBCgW/Q= -----END CERTIFICATE-----Generated at Fri Jun 20 04:40:24 2025 by rpki-client