$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: g0vG9XKbV3KYG6FyIKMUxCcyR4MsZT/22QI9AoTrgFE= Subject key identifier: 41:CD:93:5D:4F:64:15:AA:04:09:27:31:DF:3C:77:74:E3:70:24:60 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: BA Signing time: Sat 19 Jul 2025 06:09:08 +0000 Manifest this update: Sat 19 Jul 2025 06:09:07 +0000 Manifest next update: Sat 26 Jul 2025 06:09:07 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: 5PgG+oLH1ozAUFvhdfZTXBRkN2tz3lW6nGvYpORgjBM=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Jul 19 06:09:07 2025 GMT Not After : Jul 26 06:09:07 2025 GMT Subject: CN=687b3684-d95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:a2:c9:01:a9:8c:00:fb:d5:df:46:c5:d5: fc:cc:a7:65:e9:75:fd:16:5a:07:5f:1a:4d:10:e9: 42:6c:a5:b3:87:88:70:bc:25:a7:02:6a:38:30:d9: 81:d8:9d:51:3a:67:93:d6:f0:71:5e:34:09:7a:e7: 6c:c0:0e:10:8f:b2:37:c6:99:82:58:f9:45:ab:5a: 47:50:7e:e0:32:8f:34:07:26:46:e5:73:99:3a:31: 59:3d:61:7b:0b:91:f9:54:9a:79:46:4f:d5:8a:fe: 45:99:c2:69:50:87:43:27:c4:cb:ec:9b:5b:cd:9d: 28:ed:82:e8:2c:2d:d2:f7:1e:c4:39:f4:9c:9d:bf: e3:8a:65:66:e0:62:6b:96:77:d6:48:f2:ec:1a:30: 40:29:b8:c1:f8:89:05:fc:d6:13:f7:eb:2f:14:4c: 96:a2:89:cb:e0:d2:6c:b0:4b:c2:7b:fe:8b:61:b4: 14:bf:da:90:b2:c2:40:9e:ab:52:86:80:6d:c6:09: 1e:22:7c:d1:bf:38:12:6d:6f:02:de:77:6a:f5:c7: 77:ea:ef:dd:06:91:ea:b4:cf:77:98:b0:bd:5d:f6: 0e:13:02:47:e2:57:ca:2d:53:28:51:49:ae:ae:22: c4:63:b9:9a:66:98:6c:ca:a8:76:80:bd:d2:b1:2f: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CD:93:5D:4F:64:15:AA:04:09:27:31:DF:3C:77:74:E3:70:24:60 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:bd:53:c8:c4:41:58:78:be:77:0c:fb:16:9b:c6:54:cf:d3: b9:b5:0a:d3:1a:ce:70:3f:39:eb:d9:08:54:e0:2f:89:f7:b1: 9c:80:5c:72:9b:40:8f:ec:20:93:30:fb:0f:5d:84:dd:74:35: 26:cb:f7:49:42:7d:b1:7a:a6:df:cd:1e:da:c7:11:2b:04:71: b9:85:1c:d0:77:78:7d:8b:f9:dd:56:01:d5:38:19:58:26:a2: 79:ce:0e:23:ae:1d:24:fe:47:f9:8e:af:a4:35:29:5b:79:99: d3:2d:bf:be:83:6a:bd:d5:e0:7a:7c:09:5c:20:9b:e7:61:86: 8c:8f:bf:90:97:f2:14:69:b0:24:40:6e:ea:18:d1:d7:51:57: 24:6c:4b:fe:f4:e9:8a:0e:14:3d:42:a4:04:62:81:83:ca:63: 67:f4:ce:72:d5:f5:7b:bc:fe:73:a6:e9:34:2a:61:c1:7e:22: ad:7b:9e:6c:54:8c:5e:25:4a:44:b2:81:e0:f6:97:16:9c:4e: 41:31:3d:c7:5c:64:1e:81:fd:82:1c:89:33:91:9e:45:0a:80: aa:69:0d:71:d9:47:c5:eb:2d:d1:97:4a:9d:e8:7b:22:e8:cf: 07:f3:f6:69:e9:fa:83:a3:6f:1f:f7:6c:28:93:63:85:de:8b: e9:28:bf:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwNzE5MDYwOTA3WhcNMjUwNzI2MDYwOTA3WjAYMRYwFAYD VQQDEw02ODdiMzY4NC1kOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlu2iyQGpjAD71d9GxdX8zKdl6XX9FloHXxpNEOlCbKWzh4hwvCWnAmo4MNmB 2J1ROmeT1vBxXjQJeudswA4Qj7I3xpmCWPlFq1pHUH7gMo80ByZG5XOZOjFZPWF7 C5H5VJp5Rk/Viv5FmcJpUIdDJ8TL7JtbzZ0o7YLoLC3S9x7EOfScnb/jimVm4GJr lnfWSPLsGjBAKbjB+IkF/NYT9+svFEyWoonL4NJssEvCe/6LYbQUv9qQssJAnqtS hoBtxgkeInzRvzgSbW8C3ndq9cd36u/dBpHqtM93mLC9XfYOEwJH4lfKLVMoUUmu riLEY7maZphsyqh2gL3SsS/vlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHNk11P ZBWqBAknMd88d3TjcCRgMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRvVPIxEFYeL53DPsWm8ZUz9O5tQrTGs5wPznr2QhU4C+J97GcgFxy m0CP7CCTMPsPXYTddDUmy/dJQn2xeqbfzR7axxErBHG5hRzQd3h9i/ndVgHVOBlY JqJ5zg4jrh0k/kf5jq+kNSlbeZnTLb++g2q91eB6fAlcIJvnYYaMj7+Ql/IUabAk QG7qGNHXUVckbEv+9OmKDhQ9QqQEYoGDymNn9M5y1fV7vP5zpuk0KmHBfiKte55s VIxeJUpEsoHg9pcWnE5BMT3HXGQegf2CHIkzkZ5FCoCqaQ1x2UfF6y3Rl0qd6Hsi 6M8H8/Zp6fqDo28f92wok2OF3ovpKL8b -----END CERTIFICATE-----Generated at Sun Jul 20 03:27:51 2025 by rpki-client