$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: nHlPh3P2er9hn67kE2MZT7ZqbtKRjwtQ3pRhXtBw4oc= Subject key identifier: 26:56:4B:66:58:10:E5:F7:CE:00:45:EC:E1:8A:BD:1F:E6:BF:10:5D Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: C5 Signing time: Fri 13 Jun 2025 04:48:42 +0000 Manifest this update: Fri 13 Jun 2025 04:48:41 +0000 Manifest next update: Fri 20 Jun 2025 04:48:41 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: AJEShNgOCybAQzSWj7tVk0shuEe7PqIFjwI/WgFAmDI=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: rqaw6gYQFHtDXhAs9qwdnQlxs87gmG1kJR92kC6fKaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Jun 13 04:48:41 2025 GMT Not After : Jun 20 04:48:41 2025 GMT Subject: CN=684badaa-a096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:68:43:03:85:52:67:ad:10:a2:18:c8:3f: eb:bf:34:74:d5:20:40:af:8e:d1:c0:3c:94:24:d9: 2c:96:72:d9:2b:94:63:d1:d7:db:28:4b:0d:72:f0: 75:7b:bf:c0:6a:7f:ad:6d:d5:0d:db:81:38:5c:81: fe:b2:2f:18:bc:ab:15:9d:a9:80:e0:56:69:39:a0: c5:68:5b:48:d3:f2:6d:54:79:41:d0:7a:71:7d:3e: 8d:1f:49:2c:03:24:a4:17:82:3f:d0:86:0d:94:1a: 2d:88:8c:3a:c7:61:90:88:51:86:de:3e:42:5d:77: 9e:fa:38:5a:2e:cb:d2:18:97:ab:18:7d:ac:95:2d: 9a:9f:15:b6:19:42:59:0d:17:23:6c:69:f2:25:29: 00:42:f3:e4:b5:68:1d:8f:ea:91:71:aa:75:b0:de: 63:8d:fa:be:3b:9f:22:2c:40:92:0f:48:f0:18:51: b2:5e:b0:4f:e4:4e:c3:e3:6d:1a:43:3e:2e:b2:11: a7:ee:38:5c:37:ca:1c:3c:6d:5d:55:ee:f6:ff:2f: 44:46:4a:0c:7e:18:c9:ed:27:eb:52:55:c3:28:dd: 5a:77:4a:aa:89:e7:08:5b:ce:18:ba:71:3a:d6:fb: a8:a7:9c:9f:f4:53:eb:2a:a0:62:30:be:ef:da:d7: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:4B:66:58:10:E5:F7:CE:00:45:EC:E1:8A:BD:1F:E6:BF:10:5D X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2e:8f:9e:e2:33:09:ec:a2:9a:98:2d:55:3c:57:55:7a:9b: b9:e5:d2:37:05:e1:48:d8:2d:ba:8e:a1:c3:c3:6a:06:8e:cc: 34:b3:14:55:bd:e4:25:c6:a3:60:9a:f5:70:18:64:00:d8:bb: 1c:c9:2c:23:17:e4:0b:96:6a:05:42:4b:74:01:59:dc:0d:ad: f3:28:4c:28:f0:9e:68:bd:f7:a4:62:84:e3:d4:de:ea:03:49: 52:e3:ca:a9:3a:49:f4:00:d2:6b:bd:32:3a:c1:b8:67:43:1d: a4:24:0c:3a:d0:38:d2:3d:a5:86:fb:09:92:fc:36:04:fd:10: b9:ff:b8:97:87:d0:fb:90:2c:86:91:8f:cb:d7:11:4a:5b:f6: 60:ec:43:a4:a2:2f:1c:f5:02:8a:32:07:60:70:df:5b:d6:c9: 22:e4:22:8a:42:55:bc:b6:45:9f:ce:fb:77:25:c6:48:8b:ab: 8e:44:8e:44:4d:c1:fc:9d:8d:01:d9:9d:68:fd:ef:c2:95:1a: ee:b5:16:f3:4c:35:87:c7:6b:b5:cf:83:f9:98:4d:81:e4:e9: 3c:03:92:d2:da:3e:8c:a5:41:96:4b:66:fa:31:1a:a3:2d:1e: 49:ce:08:16:00:6a:c5:2f:2b:bc:54:b3:8f:7e:73:aa:b9:bf: df:7e:9a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUwNjEzMDQ0ODQxWhcNMjUwNjIwMDQ0ODQxWjAYMRYwFAYD VQQDEw02ODRiYWRhYS1hMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu5oQwOFUmetEKIYyD/rvzR01SBAr47RwDyUJNkslnLZK5Rj0dfbKEsNcvB1 e7/Aan+tbdUN24E4XIH+si8YvKsVnamA4FZpOaDFaFtI0/JtVHlB0HpxfT6NH0ks AySkF4I/0IYNlBotiIw6x2GQiFGG3j5CXXee+jhaLsvSGJerGH2slS2anxW2GUJZ DRcjbGnyJSkAQvPktWgdj+qRcap1sN5jjfq+O58iLECSD0jwGFGyXrBP5E7D420a Qz4ushGn7jhcN8ocPG1dVe72/y9ERkoMfhjJ7SfrUlXDKN1ad0qqiecIW84YunE6 1vuop5yf9FPrKqBiML7v2tfr0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZWS2ZY EOX3zgBF7OGKvR/mvxBdMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAALo+e4jMJ7KKamC1VPFdVepu55dI3BeFI2C26jqHDw2oGjsw0sxRV veQlxqNgmvVwGGQA2LscySwjF+QLlmoFQkt0AVncDa3zKEwo8J5ovfekYoTj1N7q A0lS48qpOkn0ANJrvTI6wbhnQx2kJAw60DjSPaWG+wmS/DYE/RC5/7iXh9D7kCyG kY/L1xFKW/Zg7EOkoi8c9QKKMgdgcN9b1ski5CKKQlW8tkWfzvt3JcZIi6uORI5E TcH8nY0B2Z1o/e/ClRrutRbzTDWHx2u1z4P5mE2B5Ok8A5LS2j6MpUGWS2b6MRqj LR5JzggWAGrFLyu8VLOPfnOqub/ffprY -----END CERTIFICATE-----Generated at Sat Jun 14 17:36:00 2025 by rpki-client