$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: FNLceD26p21r/XMeVnZ3PPO97dKfX3DKoXUUahu8yFg= Subject key identifier: 3A:3D:23:5E:98:6A:99:1D:17:35:C6:B3:B7:98:E3:ED:78:0C:7A:ED Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0171 Signing time: Fri 13 Jun 2025 02:50:15 +0000 Manifest this update: Fri 13 Jun 2025 02:50:15 +0000 Manifest next update: Fri 20 Jun 2025 02:50:15 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: D3ZNF8tCtWmGRFrYja4Zn4cFBWhGjDT35rmP1da7NDg=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: LI8+/YvVoONLxst6n4BQuIP1sskVexKZgRmcFhR/Qps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Jun 13 02:50:15 2025 GMT Not After : Jun 20 02:50:15 2025 GMT Subject: CN=684b91e7-67fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:6d:dd:80:69:f6:0f:24:39:5b:cd:2c:ce: 23:1c:6d:3a:4d:e8:1e:8f:22:e0:74:b0:21:17:d7: b6:11:41:02:c7:31:e4:bb:d6:e3:c8:38:de:83:7f: a1:6e:b3:51:95:ff:2b:22:e2:a0:98:0e:12:ee:2d: 9b:46:7d:cf:b1:1b:84:ef:00:a9:98:a8:fe:bc:b3: 77:4e:e5:fe:68:c6:80:0b:1e:ed:83:0f:e8:05:4e: ff:13:36:40:a3:19:a1:0f:e6:37:af:24:30:60:da: 13:8e:5d:46:a5:8e:ea:7e:09:33:97:ba:3a:2c:b3: b5:73:65:b7:ca:82:b5:d2:39:d8:d9:7a:75:d9:bd: 9e:7b:ce:c0:02:24:07:5b:1e:1a:bf:66:f0:71:fe: f3:e5:e6:c8:44:85:a4:64:6d:a6:27:e2:3a:b1:24: 42:dd:77:5e:1d:25:ad:16:29:40:99:86:6d:f3:af: cd:e8:f6:f1:a1:82:0e:a2:8b:0e:92:ee:3e:bf:e2: 49:f6:b6:b6:35:83:f3:6b:5e:f2:b6:4d:38:01:b7: 94:39:a3:d8:d9:88:02:62:82:40:2c:69:30:ee:0d: 03:88:66:fd:5c:84:3f:2f:a1:1b:d1:0a:70:2e:e7: 15:e0:df:a3:d3:57:e8:12:04:40:65:5a:91:80:f8: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:23:5E:98:6A:99:1D:17:35:C6:B3:B7:98:E3:ED:78:0C:7A:ED X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ab:4a:52:8b:2a:1a:96:36:97:db:6e:f8:09:d0:53:0b:92: 76:a6:14:9e:81:c9:16:8b:b5:59:ee:ba:ba:53:ab:39:b1:35: bd:d0:3d:c7:a1:31:0d:ea:1b:42:75:53:1e:7b:e2:42:a3:ca: 55:93:9d:34:14:bd:bb:21:c2:b1:99:f7:e1:68:64:c5:7c:1a: e4:d1:78:d5:d5:bf:a6:e6:f7:14:72:db:3c:ee:66:7a:c4:d7: 72:79:0a:41:23:63:20:87:d4:7b:f0:fa:38:31:93:d9:d2:ee: c3:ad:50:4a:24:87:0a:9d:13:4a:36:22:e3:85:78:b3:8a:17: ab:5e:b8:64:7c:98:ff:4a:83:07:cd:83:92:e8:ef:26:0b:42: 39:f9:8c:a4:10:39:89:cd:bd:ec:a4:6c:8b:a8:cd:f5:47:a7: 2d:f0:09:6a:2e:e3:94:af:d7:ed:af:54:82:34:a9:5a:9d:6d: 21:c9:43:22:ff:2c:fe:de:dc:6c:c4:96:10:63:db:6c:f3:ae: 36:58:1e:c3:bf:ff:0c:9f:00:fd:94:2e:1a:88:56:48:e6:9f: 6a:5c:67:c8:aa:63:fa:cc:ff:54:04:11:40:7d:73:58:ee:e8: 2c:75:be:60:16:4c:5d:e9:b2:49:5d:cd:39:30:ac:81:c5:fe: 11:1a:00:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwNjEzMDI1MDE1WhcNMjUwNjIwMDI1MDE1WjAYMRYwFAYD VQQDEw02ODRiOTFlNy02N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor1t3YBp9g8kOVvNLM4jHG06TegejyLgdLAhF9e2EUECxzHku9bjyDjeg3+h brNRlf8rIuKgmA4S7i2bRn3PsRuE7wCpmKj+vLN3TuX+aMaACx7tgw/oBU7/EzZA oxmhD+Y3ryQwYNoTjl1GpY7qfgkzl7o6LLO1c2W3yoK10jnY2Xp12b2ee87AAiQH Wx4av2bwcf7z5ebIRIWkZG2mJ+I6sSRC3XdeHSWtFilAmYZt86/N6PbxoYIOoosO ku4+v+JJ9ra2NYPza17ytk04AbeUOaPY2YgCYoJALGkw7g0DiGb9XIQ/L6Eb0Qpw LucV4N+j01foEgRAZVqRgPgEhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo9I16Y apkdFzXGs7eY4+14DHrtMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQq0pSiyoaljaX2274CdBTC5J2phSegckWi7VZ7rq6U6s5sTW90D3H oTEN6htCdVMee+JCo8pVk500FL27IcKxmffhaGTFfBrk0XjV1b+m5vcUcts87mZ6 xNdyeQpBI2Mgh9R78Po4MZPZ0u7DrVBKJIcKnRNKNiLjhXiziherXrhkfJj/SoMH zYOS6O8mC0I5+YykEDmJzb3spGyLqM31R6ct8AlqLuOUr9ftr1SCNKlanW0hyUMi /yz+3txsxJYQY9ts8642WB7Dv/8MnwD9lC4aiFZI5p9qXGfIqmP6zP9UBBFAfXNY 7ugsdb5gFkxd6bJJXc05MKyBxf4RGgBl -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:16 2025 by rpki-client