$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: +xrHix0O/h9YUGyZz2tL2jZHvDoe9BW3hBRyG6UYaMo= Subject key identifier: 5C:6C:E7:6E:FF:88:67:A4:3D:EE:F5:5E:CE:0C:52:DE:D9:71:38:22 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 1052 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 103B Signing time: Sat 14 Jun 2025 17:20:53 +0000 Manifest this update: Sat 14 Jun 2025 17:20:53 +0000 Manifest next update: Sat 21 Jun 2025 17:20:53 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: vqy2jHNLlbBrfoAewTaAZQcYyejreww8V/2Uur0okMA=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: SaPDHfkJq6+olJp+pCEwWUsbU8ig75YR7kl23PYTmrE=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4178 (0x1052) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B, serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: Jun 14 17:20:53 2025 GMT Not After : Jun 21 17:20:53 2025 GMT Subject: CN=684daf75-0eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:ff:1c:3a:21:ca:47:6e:e9:4a:35:e4:84: e4:dc:72:93:f6:40:3b:31:86:30:a0:c9:dc:f6:61: c2:9f:a0:1e:52:12:e3:e2:2b:0e:6d:5d:4f:0c:e3: 22:fb:12:44:59:12:66:30:a4:99:9d:85:5e:69:65: ca:84:c5:a6:7b:6a:26:8f:0a:52:ec:97:80:84:ad: 17:4d:78:31:18:e9:cd:d5:48:77:94:cf:16:93:0d: c0:ed:8b:68:0d:7a:fa:67:21:4e:c4:8e:27:ee:68: 42:53:28:34:fe:d6:b1:35:e7:e5:53:ee:95:25:ca: 14:a3:fb:37:ae:77:96:e8:8a:bc:39:c2:85:8c:57: 7e:50:2d:4d:10:26:57:94:51:db:db:18:00:8b:38: c4:71:4f:07:01:19:f1:f0:4a:57:f8:ee:18:2a:42: b2:fd:9b:c3:5a:f1:63:85:36:7b:23:b0:df:84:74: 4a:5c:44:19:83:bc:d4:9d:42:95:d2:49:a8:eb:57: 0b:ff:f1:d8:77:05:34:e4:e4:72:5b:d5:0b:9c:09: 52:db:12:c4:2e:ba:52:ea:46:80:37:a1:ff:2f:74: e8:d0:9a:c9:5a:cf:18:dd:42:c0:c4:22:73:11:f9: b8:5b:48:69:75:f0:09:ef:7f:a6:36:e4:b4:40:68: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6C:E7:6E:FF:88:67:A4:3D:EE:F5:5E:CE:0C:52:DE:D9:71:38:22 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:21:db:43:e4:0a:ef:a7:ea:6a:8e:c1:e6:33:c9:ca:06:5c: 3e:f9:46:ba:96:f4:e4:48:ce:d4:f2:28:d4:66:f6:f1:8c:0b: 9f:67:ea:2d:ae:e8:7e:e1:31:63:eb:56:45:fe:aa:e4:a9:19: 22:90:fa:a6:a9:2b:5a:3d:28:c6:1a:a5:3d:02:a2:9c:6e:ad: 88:ac:d0:10:d0:48:d6:c2:69:77:15:83:09:76:38:d6:db:92: 2e:62:26:64:3e:f8:cc:75:0a:2e:f4:ec:c2:f3:3a:1d:46:bf: 0c:4c:41:3d:b1:48:b4:5f:2b:a7:a9:13:b3:2a:7f:df:d0:d5: ad:ce:fc:a9:ce:8f:eb:e8:d7:eb:81:06:e1:f0:80:d0:d4:d0: c5:97:05:c6:e1:da:dc:d7:55:ef:24:ae:de:84:1a:9c:44:6a: af:f7:e5:cf:0c:a8:d3:94:2b:c6:74:b4:5c:4e:50:e7:bd:88: fb:47:81:68:f6:47:09:2d:53:04:0f:4a:a5:7e:ca:36:d4:0e: 99:4c:81:91:de:82:00:02:e3:c9:39:83:87:6e:40:9e:2d:66: d7:4b:ef:b4:18:61:a3:23:e9:9e:a1:5a:c7:ae:30:87:60:92: 8d:5a:65:b4:70:fd:c0:58:7a:98:f5:bc:f4:5b:36:46:b5:85: 66:80:30:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjUwNjE0MTcyMDUzWhcNMjUwNjIxMTcyMDUzWjAYMRYwFAYD VQQDEw02ODRkYWY3NS0wZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1L/HDohykdu6Uo15ITk3HKT9kA7MYYwoMnc9mHCn6AeUhLj4isObV1PDOMi +xJEWRJmMKSZnYVeaWXKhMWme2omjwpS7JeAhK0XTXgxGOnN1Uh3lM8Wkw3A7Yto DXr6ZyFOxI4n7mhCUyg0/taxNeflU+6VJcoUo/s3rneW6Iq8OcKFjFd+UC1NECZX lFHb2xgAizjEcU8HARnx8EpX+O4YKkKy/ZvDWvFjhTZ7I7DfhHRKXEQZg7zUnUKV 0kmo61cL//HYdwU05ORyW9ULnAlS2xLELrpS6kaAN6H/L3To0JrJWs8Y3ULAxCJz Efm4W0hpdfAJ73+mNuS0QGhSlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxs527/ iGekPe71Xs4MUt7ZcTgiMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5IdtD5Arvp+pqjsHmM8nKBlw++Ua6lvTkSM7U8ijUZvbxjAufZ+ot ruh+4TFj61ZF/qrkqRkikPqmqStaPSjGGqU9AqKcbq2IrNAQ0EjWwml3FYMJdjjW 25IuYiZkPvjMdQou9OzC8zodRr8MTEE9sUi0XyunqROzKn/f0NWtzvypzo/r6Nfr gQbh8IDQ1NDFlwXG4drc11XvJK7ehBqcRGqv9+XPDKjTlCvGdLRcTlDnvYj7R4Fo 9kcJLVMED0qlfso21A6ZTIGR3oIAAuPJOYOHbkCeLWbXS++0GGGjI+meoVrHrjCH YJKNWmW0cP3AWHqY9bz0WzZGtYVmgDBp -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:57 2025 by rpki-client