$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: OMA5QZ3XBII3HdG8Ntbb6Gw9zAjRIMG8xquTXuO2oQI= Subject key identifier: 96:3C:55:9B:8D:08:E6:89:F9:7C:84:03:85:CE:85:E4:58:AF:E4:AD Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 030D Signing time: Sun 15 Jun 2025 00:55:15 +0000 Manifest this update: Sun 15 Jun 2025 00:55:14 +0000 Manifest next update: Sun 22 Jun 2025 00:55:14 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: OupOnktWToZUFTRsQ+Cl0md95IAkDJP9cDLwSchRizs=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Jun 15 00:55:14 2025 GMT Not After : Jun 22 00:55:14 2025 GMT Subject: CN=684e19f3-71e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:05:cb:4b:76:67:01:d2:fa:9b:8f:36:31: 87:7a:b8:eb:ae:35:c8:ec:e4:b3:37:4f:50:a7:eb: 85:6d:ba:75:41:41:f2:2f:ae:1f:07:91:9c:25:21: 4c:e6:a7:a4:29:cd:70:b3:33:6d:92:fd:a1:be:b5: 9e:66:55:7e:bd:24:a9:45:f9:64:1b:7c:da:3c:c9: b2:83:a5:6f:3c:9f:7f:f9:17:0b:4f:72:c8:a7:8a: 8e:10:aa:a1:7c:db:53:bc:db:92:9f:ea:95:51:ed: b7:f3:03:49:5b:2d:28:e6:b3:64:d2:43:fc:c1:64: 0a:01:b6:94:20:82:7e:15:e7:95:60:c2:24:a7:0b: 95:57:63:0a:40:69:6c:33:0f:af:2f:97:eb:0b:93: 9e:9e:b9:eb:99:a2:f2:7d:56:da:4d:04:0d:d7:82: a8:60:bf:89:a6:af:1b:49:62:08:49:96:bd:e2:69: e7:ee:67:ee:98:7d:09:fa:f9:55:b4:fe:5a:6e:ff: 6f:1f:2f:cb:5c:34:cf:90:46:70:fa:94:b2:05:6c: be:fe:c3:7e:be:63:83:be:d1:cd:44:b4:7d:f8:56: 82:67:bf:4f:24:dc:e2:2c:1a:a9:81:39:93:04:4c: 28:0c:4c:ca:7d:92:fa:d8:c6:75:dd:2b:7a:67:3f: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:55:9B:8D:08:E6:89:F9:7C:84:03:85:CE:85:E4:58:AF:E4:AD X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:52:be:86:fc:39:ed:f8:24:dd:b3:f0:cd:f2:40:3d:9c:64: e2:3c:84:8c:8e:80:4d:b9:87:56:20:82:71:2a:eb:2f:8e:14: e7:6d:cb:17:7e:59:d8:63:5b:3b:9f:02:9e:da:57:03:72:c4: 79:08:1f:12:28:0d:87:9f:a7:6c:3d:95:be:a3:7a:81:95:d1: 2f:49:b3:2a:5b:7a:b1:bb:89:a9:cf:02:15:4c:8a:bb:07:9d: 3e:3e:e6:5f:f3:b9:6e:67:a4:cf:98:b3:7b:0b:d2:9b:6c:5a: 9a:cd:15:80:79:90:7c:87:1a:e2:84:72:c3:14:fe:f8:91:6f: da:55:77:f7:5e:80:78:69:58:86:5a:11:17:0b:ec:10:3b:5c: 0d:de:05:b3:02:98:6d:e7:c7:82:89:4f:6d:d5:53:61:59:bb: d2:14:1b:37:42:12:78:5d:3c:88:c0:4e:a7:af:12:c0:3f:64: 46:ab:f7:aa:28:49:3e:e5:11:57:ac:de:08:fd:a7:65:88:61: c1:df:c0:50:14:a8:70:f7:d6:21:c7:e1:d0:65:5e:cc:9a:c7: 9b:f3:70:3d:b5:75:4e:62:bc:50:86:e3:51:5e:36:35:73:eb: ae:50:5f:40:bf:7e:d2:ac:75:a5:af:65:a8:36:14:ff:67:55: 21:36:98:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUwNjE1MDA1NTE0WhcNMjUwNjIyMDA1NTE0WjAYMRYwFAYD VQQDEw02ODRlMTlmMy03MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTYFy0t2ZwHS+puPNjGHerjrrjXI7OSzN09Qp+uFbbp1QUHyL64fB5GcJSFM 5qekKc1wszNtkv2hvrWeZlV+vSSpRflkG3zaPMmyg6VvPJ9/+RcLT3LIp4qOEKqh fNtTvNuSn+qVUe238wNJWy0o5rNk0kP8wWQKAbaUIIJ+FeeVYMIkpwuVV2MKQGls Mw+vL5frC5OenrnrmaLyfVbaTQQN14KoYL+Jpq8bSWIISZa94mnn7mfumH0J+vlV tP5abv9vHy/LXDTPkEZw+pSyBWy+/sN+vmODvtHNRLR9+FaCZ79PJNziLBqpgTmT BEwoDEzKfZL62MZ13St6Zz9YVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY8VZuN COaJ+XyEA4XOheRYr+StMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtUr6G/Dnt+CTds/DN8kA9nGTiPISMjoBNuYdWIIJxKusvjhTnbcsX flnYY1s7nwKe2lcDcsR5CB8SKA2Hn6dsPZW+o3qBldEvSbMqW3qxu4mpzwIVTIq7 B50+PuZf87luZ6TPmLN7C9KbbFqazRWAeZB8hxrihHLDFP74kW/aVXf3XoB4aViG WhEXC+wQO1wN3gWzApht58eCiU9t1VNhWbvSFBs3QhJ4XTyIwE6nrxLAP2RGq/eq KEk+5RFXrN4I/adliGHB38BQFKhw99Yhx+HQZV7Mmseb83A9tXVOYrxQhuNRXjY1 c+uuUF9Av37SrHWlr2WoNhT/Z1UhNphl -----END CERTIFICATE-----Generated at Sun Jun 15 09:53:33 2025 by rpki-client