$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: rzizR8p1sKuJn588Yt5KZKy7605NGTYrOHapG+CngGM= Subject key identifier: 05:8E:2B:53:6B:E2:7B:53:B2:C2:09:EF:C6:E6:83:57:E7:55:28:35 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 0629 Signing time: Sat 14 Jun 2025 22:29:42 +0000 Manifest this update: Sat 14 Jun 2025 22:29:42 +0000 Manifest next update: Sat 21 Jun 2025 22:29:42 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: Nn3QVPbFx3ce4SGEg5O2XGexvpQv4+1ypnCZmuRNbWQ=) 2: D043FFB2EEEA11EF8476F316C4F9AE02.roa (hash: 2LmuP3C8i2g82+GxEzyhXfhPVuIYh5+gy6RWprCcpgs=) 3: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: DVBw64dsT56+0QYycGeLUBxP/l2bdU+aNtZ1EMIv6Js=) 4: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Jun 14 22:29:42 2025 GMT Not After : Jun 21 22:29:42 2025 GMT Subject: CN=684df7d6-2867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:68:4e:25:07:e4:9c:96:2e:2f:da:3a:fc: e7:a1:91:52:5d:b4:d2:cc:26:51:bd:7b:07:2d:c6: 0a:0e:9b:d8:90:4f:28:1b:ba:8c:0d:a1:77:7d:ff: 7f:7a:d0:9d:34:98:5f:13:eb:91:d7:fa:62:b1:3b: a2:0c:54:42:1e:9f:4a:2f:79:c5:e0:ed:d2:fc:d1: 80:a9:1b:b0:4c:4e:b0:e7:65:da:d3:18:d7:9f:17: 0d:d3:89:fe:94:4c:a9:01:a1:1d:43:2c:7b:a9:29: ef:17:cc:6f:57:e2:06:11:fd:41:96:a4:11:d6:2a: cd:9a:c0:ef:a1:33:8b:ac:ff:39:b8:86:68:c7:a5: a2:c0:18:5f:a7:22:0f:0e:37:18:8f:21:b9:55:b9: 6d:25:4a:94:01:0b:19:93:9f:fa:00:62:4a:88:9a: 22:d3:65:f6:e8:69:6c:33:78:b5:d8:0c:9a:14:6d: 23:27:3c:17:90:db:4f:91:ff:86:eb:39:90:19:a1: e2:0a:24:40:42:1a:01:3d:de:25:2d:25:67:35:ea: 5a:c1:50:b7:d1:90:be:c1:ba:50:ed:c4:f8:46:e2: e6:8f:ad:73:00:e8:34:d3:6e:2a:bf:26:6d:9a:19: e6:60:01:2d:66:2f:6f:dd:47:23:68:b9:7b:9f:31: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8E:2B:53:6B:E2:7B:53:B2:C2:09:EF:C6:E6:83:57:E7:55:28:35 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:24:41:29:58:a8:e0:12:06:2b:92:c3:09:34:10:8f:f3:3f: 5c:e9:61:93:cd:34:53:84:5e:f3:ee:a1:01:e7:48:36:71:25: 4a:8c:9c:ee:9d:b7:d1:22:e7:d8:87:b9:45:ab:8b:4f:55:ac: 69:71:9c:52:4a:2c:d4:e4:59:d4:db:c0:ed:b5:0b:fc:98:0f: 6a:40:3a:86:61:77:ef:22:2c:4f:63:12:eb:ae:fe:17:d3:fa: f2:5f:64:82:34:dd:fe:2d:e6:74:04:58:04:8b:33:ca:0d:9d: 46:60:a4:57:ee:6c:b9:01:a6:46:11:6e:16:da:de:64:c1:72: 31:49:98:a6:42:fd:d6:af:0b:34:aa:85:8c:db:36:9d:5d:32: 8b:f3:db:34:95:e2:dc:07:68:a0:48:e3:45:cc:04:47:b6:48: f3:a4:01:83:1c:c0:27:42:ed:3a:da:4c:52:d3:01:a2:47:72: ca:fc:5d:ed:b3:17:88:26:05:b5:ff:61:c8:e0:7b:31:95:57: 26:cf:c3:14:18:a3:33:84:0d:ff:f4:12:1e:58:36:f8:00:28: 43:ee:d1:a4:2c:79:84:08:08:36:30:be:1e:89:7b:bb:13:9e: 83:29:3b:9b:3b:0f:16:5b:6c:ed:1f:d5:c8:98:61:7b:d3:44: 94:65:65:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNjE0MjIyOTQyWhcNMjUwNjIxMjIyOTQyWjAYMRYwFAYD VQQDEw02ODRkZjdkNi0yODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cJoTiUH5JyWLi/aOvznoZFSXbTSzCZRvXsHLcYKDpvYkE8oG7qMDaF3ff9/ etCdNJhfE+uR1/pisTuiDFRCHp9KL3nF4O3S/NGAqRuwTE6w52Xa0xjXnxcN04n+ lEypAaEdQyx7qSnvF8xvV+IGEf1BlqQR1irNmsDvoTOLrP85uIZox6WiwBhfpyIP DjcYjyG5VbltJUqUAQsZk5/6AGJKiJoi02X26GlsM3i12AyaFG0jJzwXkNtPkf+G 6zmQGaHiCiRAQhoBPd4lLSVnNepawVC30ZC+wbpQ7cT4RuLmj61zAOg0024qvyZt mhnmYAEtZi9v3UcjaLl7nzGwzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWOK1Nr 4ntTssIJ78bmg1fnVSg1MB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJJEEpWKjgEgYrksMJNBCP8z9c6WGTzTRThF7z7qEB50g2cSVKjJzu nbfRIufYh7lFq4tPVaxpcZxSSizU5FnU28DttQv8mA9qQDqGYXfvIixPYxLrrv4X 0/ryX2SCNN3+LeZ0BFgEizPKDZ1GYKRX7my5AaZGEW4W2t5kwXIxSZimQv3Wrws0 qoWM2zadXTKL89s0leLcB2igSONFzARHtkjzpAGDHMAnQu062kxS0wGiR3LK/F3t sxeIJgW1/2HI4HsxlVcmz8MUGKMzhA3/9BIeWDb4AChD7tGkLHmECAg2ML4eiXu7 E56DKTubOw8WW2ztH9XImGF700SUZWVy -----END CERTIFICATE-----Generated at Sun Jun 15 05:28:13 2025 by rpki-client