$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: oLO9N88DjCh/wQAHJOnDgrvhMOo2GlOjzlzESJhxi+Y= Subject key identifier: 33:02:D9:CF:1A:9A:13:51:55:71:47:48:40:7E:13:C8:C5:70:12:D1 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 2376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2355 Signing time: Sat 14 Jun 2025 15:48:28 +0000 Manifest this update: Sat 14 Jun 2025 15:48:28 +0000 Manifest next update: Sat 21 Jun 2025 15:48:28 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: BZk32VXwk5XUp1G+GqPY+PYZbw7wSufu2gUlwT5uRMs=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9078 (0x2376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Jun 14 15:48:28 2025 GMT Not After : Jun 21 15:48:28 2025 GMT Subject: CN=684d99cc-b138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d3:b1:56:8d:c7:48:8f:79:0e:2d:c2:17:e4: a4:bb:16:73:31:2b:ba:f7:ac:ce:b8:41:25:97:b8: fa:1e:a8:00:2e:78:3b:89:09:0e:02:3e:c7:03:68: 8d:56:ee:89:35:ff:7f:d1:ad:5a:48:b0:63:c0:d8: 8d:f2:7c:42:ad:0a:e3:ae:3e:45:a2:8d:41:74:1d: 3c:19:4b:4a:fb:1a:1f:ce:3f:34:32:a1:75:5e:0c: f1:ec:02:8e:6a:b5:8f:98:4b:7d:7b:0a:fa:84:43: 81:c7:18:9f:92:58:33:4c:3c:88:50:a5:b0:d1:fd: af:52:59:46:00:70:e8:d7:de:92:00:09:c3:21:51: 0d:16:c1:df:6d:3f:20:8d:e2:9e:ee:94:5c:97:32: fd:85:ee:0b:f5:52:03:79:c8:44:fa:15:66:a4:9e: 7c:46:c6:6d:ce:5f:fe:f6:4c:60:5c:7a:b2:fc:63: 28:db:5e:99:61:cb:7a:a3:5e:da:67:c8:c0:38:1c: ae:5e:5c:79:8b:d2:88:29:72:da:7a:06:07:95:f8: 58:2e:79:61:2c:8a:c4:e6:9a:1e:47:68:e9:7e:0b: 51:63:85:53:36:9c:93:14:09:48:65:65:1e:3a:ee: 43:db:68:11:a0:bb:83:47:6d:e2:8b:22:d8:33:39: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:D9:CF:1A:9A:13:51:55:71:47:48:40:7E:13:C8:C5:70:12:D1 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8d:97:27:9c:0d:13:0d:4a:9e:d3:d1:fb:02:49:ec:6c:15: 4c:36:aa:7f:12:6d:48:00:8b:38:46:fd:33:7a:51:59:49:83: d4:91:a7:1c:c5:fd:a4:ad:a2:a6:87:58:30:f7:d3:bb:a1:86: 85:83:c8:ce:76:30:fc:06:ca:36:b3:da:c3:0c:24:89:6f:21: 1e:df:18:92:05:27:84:8f:87:7a:70:1e:43:7c:28:6c:5b:9f: 44:ed:9e:52:ca:42:f5:fe:d3:bd:5d:a9:7c:7a:73:05:85:74: 59:72:4c:e5:eb:02:47:f7:be:d7:45:11:8f:31:f2:c0:7f:5d: f6:cd:19:88:33:ad:9f:64:6a:10:1f:6d:98:74:25:ff:5b:d1: 8e:72:64:ce:05:c4:89:a2:a8:4b:1c:0a:d4:02:2a:f0:b1:17: d5:69:77:60:a4:cb:3b:23:85:87:6b:33:39:0d:bf:c0:ee:43: 60:55:9d:e4:69:1f:f1:26:c9:60:f6:ed:df:98:ca:2c:a6:17: 3c:3f:6e:2f:de:53:6a:bd:bb:34:89:21:79:69:db:2c:62:5f: 46:da:ce:b6:96:0a:f2:aa:11:6d:9a:ca:34:08:0d:ec:32:ec: ce:3e:13:68:09:89:8d:7a:ce:30:9f:af:90:c9:d7:37:ef:cf: 9a:43:34:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwNjE0MTU0ODI4WhcNMjUwNjIxMTU0ODI4WjAYMRYwFAYD VQQDEw02ODRkOTljYy1iMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tOxVo3HSI95Di3CF+SkuxZzMSu696zOuEEll7j6HqgALng7iQkOAj7HA2iN Vu6JNf9/0a1aSLBjwNiN8nxCrQrjrj5Foo1BdB08GUtK+xofzj80MqF1Xgzx7AKO arWPmEt9ewr6hEOBxxifklgzTDyIUKWw0f2vUllGAHDo196SAAnDIVENFsHfbT8g jeKe7pRclzL9he4L9VIDechE+hVmpJ58RsZtzl/+9kxgXHqy/GMo216ZYct6o17a Z8jAOByuXlx5i9KIKXLaegYHlfhYLnlhLIrE5poeR2jpfgtRY4VTNpyTFAlIZWUe Ou5D22gRoLuDR23iiyLYMzmw0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMC2c8a mhNRVXFHSEB+E8jFcBLRMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfjZcnnA0TDUqe09H7AknsbBVMNqp/Em1IAIs4Rv0zelFZSYPUkacc xf2kraKmh1gw99O7oYaFg8jOdjD8Bso2s9rDDCSJbyEe3xiSBSeEj4d6cB5DfChs W59E7Z5SykL1/tO9Xal8enMFhXRZckzl6wJH977XRRGPMfLAf132zRmIM62fZGoQ H22YdCX/W9GOcmTOBcSJoqhLHArUAirwsRfVaXdgpMs7I4WHazM5Db/A7kNgVZ3k aR/xJslg9u3fmMosphc8P24v3lNqvbs0iSF5adssYl9G2s62lgryqhFtmso0CA3s MuzOPhNoCYmNes4wn6+Qydc378+aQzQ7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:46 2025 by rpki-client