$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: /YXp4Sx+g5zGOdJ2dL/WjWppNGU5ZYoBUsEh5tf2yg0= Subject key identifier: 91:0C:B9:F3:8C:F8:AC:8E:39:7A:29:9F:55:D1:82:45:F0:F9:3C:9B Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C59 Signing time: Tue 22 Jul 2025 18:39:34 +0000 Manifest this update: Tue 22 Jul 2025 18:39:34 +0000 Manifest next update: Tue 29 Jul 2025 18:39:34 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: bRG2+ReJTJgR71Y53eWeWXr93xu7KprUcQNVSsqNxxw=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Jul 22 18:39:34 2025 GMT Not After : Jul 29 18:39:34 2025 GMT Subject: CN=687fdae6-8e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:d8:57:ae:14:fd:b3:ac:8a:3c:04:ec:d0: b8:5f:0e:ff:60:1d:d9:d4:74:37:3d:3a:38:c8:ee: 74:eb:cc:d0:53:a3:d4:52:44:14:17:03:72:4f:f4: de:29:1a:c9:d3:48:8b:ce:f5:00:9d:67:00:f9:63: 02:69:e7:48:a1:fc:8d:62:4f:5d:7e:4e:d7:5c:82: 9a:fd:85:98:6e:0b:f1:48:56:67:84:a2:55:7d:de: 20:90:00:45:dc:24:99:34:74:5c:d1:9a:41:44:8e: 45:31:c1:3f:0b:17:58:cd:92:a6:cf:32:6c:29:80: ac:60:93:fd:01:8c:1e:7d:a6:3b:0e:8d:4f:23:94: 1a:97:58:82:4b:c0:32:b0:c4:fa:ac:19:21:94:fc: 71:c1:e3:2d:03:b5:c7:dc:00:f5:2f:05:78:a3:99: 63:31:0d:24:d7:b6:42:c6:98:f2:e1:ee:de:de:8a: 4d:25:f9:08:a0:ea:a0:3f:cb:24:aa:a2:f0:ed:f1: e4:70:dd:24:06:e4:b2:db:84:47:29:d2:4a:2d:40: 9d:c2:35:ae:db:2a:72:a7:2a:63:9b:43:d0:02:25: d3:fb:da:cf:5c:fb:d7:d6:b6:78:e2:c9:ec:4e:24: 9c:d6:02:ec:9c:6a:1c:26:7a:5d:23:9e:01:cc:c7: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:B9:F3:8C:F8:AC:8E:39:7A:29:9F:55:D1:82:45:F0:F9:3C:9B X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:47:0f:c9:7e:65:d0:84:9d:cf:5b:25:e9:b9:34:3a:9f:24: d9:22:e6:a2:3a:9e:00:80:0b:94:0a:2f:0b:04:c6:ed:f0:d3: 6a:e0:05:c9:f2:46:12:eb:b9:33:d1:d1:b6:31:70:1e:77:9d: 70:a8:5d:e6:29:92:d5:ab:7a:cd:9f:a3:c2:8c:a1:05:3a:7d: 98:77:77:43:4b:e0:6d:97:27:d4:cf:15:c3:ec:2e:f0:c4:67: 63:60:8a:4d:ab:f6:3f:a0:a3:3a:be:e7:98:5c:9f:f5:14:f4: ba:60:cf:3b:93:8c:78:dc:e4:ac:24:3f:cb:74:a7:1f:35:de: 49:fc:07:35:2e:38:f6:0a:16:6d:ee:6e:d8:35:d2:16:e8:da: fb:68:c8:b6:5b:33:fa:98:d2:96:c8:84:a0:27:a0:70:ab:e1: 13:23:0c:84:f2:b3:d8:55:fc:87:6e:b3:5a:c5:18:77:92:f9: 7c:00:3b:a4:98:f9:d6:2a:73:12:6d:41:36:c4:ef:6a:91:9c: ce:f0:69:54:6a:e0:f9:78:d3:55:f8:43:37:17:cd:19:86:97: 43:cf:55:de:6b:2d:b8:88:d7:c7:17:a4:92:6a:e5:98:32:30: 6b:8f:82:c1:3f:e7:0a:e1:36:c6:17:12:e4:b7:07:1c:b4:21: 70:a1:b3:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwNzIyMTgzOTM0WhcNMjUwNzI5MTgzOTM0WjAYMRYwFAYD VQQDEw02ODdmZGFlNi04ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1DYV64U/bOsijwE7NC4Xw7/YB3Z1HQ3PTo4yO5068zQU6PUUkQUFwNyT/Te KRrJ00iLzvUAnWcA+WMCaedIofyNYk9dfk7XXIKa/YWYbgvxSFZnhKJVfd4gkABF 3CSZNHRc0ZpBRI5FMcE/CxdYzZKmzzJsKYCsYJP9AYwefaY7Do1PI5Qal1iCS8Ay sMT6rBkhlPxxweMtA7XH3AD1LwV4o5ljMQ0k17ZCxpjy4e7e3opNJfkIoOqgP8sk qqLw7fHkcN0kBuSy24RHKdJKLUCdwjWu2ypypypjm0PQAiXT+9rPXPvX1rZ44sns TiSc1gLsnGocJnpdI54BzMfPSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEMufOM +KyOOXopn1XRgkXw+TybMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmRw/JfmXQhJ3PWyXpuTQ6nyTZIuaiOp4AgAuUCi8LBMbt8NNq4AXJ 8kYS67kz0dG2MXAed51wqF3mKZLVq3rNn6PCjKEFOn2Yd3dDS+BtlyfUzxXD7C7w xGdjYIpNq/Y/oKM6vueYXJ/1FPS6YM87k4x43OSsJD/LdKcfNd5J/Ac1Ljj2ChZt 7m7YNdIW6Nr7aMi2WzP6mNKWyISgJ6Bwq+ETIwyE8rPYVfyHbrNaxRh3kvl8ADuk mPnWKnMSbUE2xO9qkZzO8GlUauD5eNNV+EM3F80ZhpdDz1Xeay24iNfHF6SSauWY MjBrj4LBP+cK4TbGFxLktwcctCFwobOo -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:33 2025 by rpki-client