$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: cSXGsac41m36Yt+9+psfzRsxUp3ORynoJ3k6fzARMJc= Subject key identifier: E9:3C:9D:0C:E9:F6:26:FE:F1:DB:EF:94:98:BF:8E:5A:3F:D5:AA:8D Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B7E Signing time: Fri 18 Jul 2025 19:42:00 +0000 Manifest this update: Fri 18 Jul 2025 19:42:00 +0000 Manifest next update: Fri 25 Jul 2025 19:42:00 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: +sC++kaxOoTiayf56026Xqvjdi6Xzf1RIldvRNewNSQ=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: kKSJyoebjy15OgygZVoqq1dl8OzWQ/rL9QJn0Qbj8ag=) 7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 9: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) 10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: 8Tbgpx8gUvUc2SgE2bzhwZumwm0PHzRHYd3oL+k8YIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Jul 18 19:42:00 2025 GMT Not After : Jul 25 19:42:00 2025 GMT Subject: CN=687aa388-fe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:44:9a:1c:4e:07:63:31:5f:df:d3:81:3c: 11:fa:7f:3f:ea:02:38:64:19:49:ba:ac:5e:d3:0d: 80:54:55:d5:10:ba:87:33:bf:c6:17:75:c2:2d:72: d1:9f:66:6d:17:3b:7b:ed:de:64:1b:31:6e:4c:9a: dd:14:f4:d8:cf:26:13:3d:04:51:eb:92:97:38:a4: 97:31:41:3e:52:f3:34:3c:2f:ac:cc:1e:38:fa:38: 96:c7:16:45:93:33:02:d7:2c:37:74:27:97:8b:15: f6:b7:0a:99:2e:f4:7c:a1:b9:5d:5e:45:ce:ec:84: 28:8b:a6:8d:6c:b4:b3:de:ef:f1:97:06:af:1e:91: ee:13:18:14:81:7e:18:77:d9:83:03:f6:d7:82:cb: 3a:d5:2b:6d:02:2b:dd:8f:d4:b7:40:55:4c:a3:d6: 16:c7:75:48:56:a1:35:72:7e:44:9d:d4:fa:ce:89: 5e:56:bc:26:60:21:0d:2d:59:b4:43:3b:d2:b5:f1: 6e:d0:3e:93:9d:55:7a:63:d2:aa:00:e3:bd:15:84: d8:01:21:e2:d9:78:7f:ee:a1:e4:d2:82:0d:2a:9a: 14:c4:0e:6c:2b:ec:9b:d1:41:5a:91:49:16:07:24: 7d:d0:58:4c:38:14:82:9f:9f:62:f5:00:8b:10:25: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3C:9D:0C:E9:F6:26:FE:F1:DB:EF:94:98:BF:8E:5A:3F:D5:AA:8D X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bc:7b:a0:14:88:09:66:33:95:5c:d0:bb:05:0c:16:b5:1a: bc:ec:c4:83:f7:48:3a:97:c7:9a:54:9e:44:98:cc:fa:c9:6f: c1:90:74:30:4e:5e:25:ec:5c:5c:99:55:7d:9a:04:c3:2a:4b: f9:da:7e:47:e7:7c:04:40:e6:b8:37:17:b7:f8:4e:13:b6:c0: fb:4b:44:64:fc:97:aa:75:2c:e1:6b:bc:71:5c:93:9b:29:01: f6:df:38:88:36:bd:6c:c3:9b:df:4f:d6:16:91:ab:64:fd:19: e4:2b:27:10:c6:3a:44:4a:eb:74:f4:7d:b2:f7:ae:b0:42:bb: cc:dc:af:ea:94:b1:4d:7f:07:cd:aa:c9:02:5b:c0:60:46:ca: 53:a3:6d:36:3f:6f:f3:b3:c4:e5:cc:66:24:7d:83:b2:bf:d8: a7:ce:95:49:54:9d:be:b3:74:13:49:5c:7e:80:46:c7:79:e4: 42:90:51:be:8e:f3:e6:63:9a:b6:cf:e5:81:87:34:6d:d2:0d: 79:db:40:13:9f:43:2e:96:c1:0d:1c:3f:91:3a:d8:90:73:19: 3e:d6:aa:6a:83:83:1c:56:65:f4:24:31:60:e3:32:a1:b3:02: 00:ae:04:82:26:9c:d0:20:5d:35:24:1e:80:06:33:41:1f:bc: 55:2f:7f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNzE4MTk0MjAwWhcNMjUwNzI1MTk0MjAwWjAYMRYwFAYD VQQDEw02ODdhYTM4OC1mZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TpEmhxOB2MxX9/TgTwR+n8/6gI4ZBlJuqxe0w2AVFXVELqHM7/GF3XCLXLR n2ZtFzt77d5kGzFuTJrdFPTYzyYTPQRR65KXOKSXMUE+UvM0PC+szB44+jiWxxZF kzMC1yw3dCeXixX2twqZLvR8obldXkXO7IQoi6aNbLSz3u/xlwavHpHuExgUgX4Y d9mDA/bXgss61SttAivdj9S3QFVMo9YWx3VIVqE1cn5EndT6zoleVrwmYCENLVm0 QzvStfFu0D6TnVV6Y9KqAOO9FYTYASHi2Xh/7qHk0oINKpoUxA5sK+yb0UFakUkW ByR90FhMOBSCn59i9QCLECXwqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk8nQzp 9ib+8dvvlJi/jlo/1aqNMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnvHugFIgJZjOVXNC7BQwWtRq87MSD90g6l8eaVJ5EmMz6yW/BkHQw Tl4l7FxcmVV9mgTDKkv52n5H53wEQOa4Nxe3+E4TtsD7S0Rk/JeqdSzha7xxXJOb KQH23ziINr1sw5vfT9YWkatk/RnkKycQxjpESut09H2y966wQrvM3K/qlLFNfwfN qskCW8BgRspTo202P2/zs8TlzGYkfYOyv9inzpVJVJ2+s3QTSVx+gEbHeeRCkFG+ jvPmY5q2z+WBhzRt0g1520ATn0MulsENHD+ROtiQcxk+1qpqg4McVmX0JDFg4zKh swIArgSCJpzQIF01JB6ABjNBH7xVL3+D -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:45 2025 by rpki-client