$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: Q8V5gzDEnqEOhuUHTraJKienaT/ArBPObQIZ/AJNESw= Subject key identifier: E2:35:BD:23:21:42:C1:33:F6:09:AC:81:EC:5F:83:33:EA:70:7E:2F Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 0786 Signing time: Fri 06 Jun 2025 21:41:11 +0000 Manifest this update: Fri 06 Jun 2025 21:41:10 +0000 Manifest next update: Fri 13 Jun 2025 21:41:10 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: VTFpWNJ8yzBUFJsOe5DieZjvmABO5xls7XxDWQRIJ0w=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Jun 6 21:41:10 2025 GMT Not After : Jun 13 21:41:10 2025 GMT Subject: CN=68436076-f6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:47:e7:df:22:15:d3:ea:93:6c:15:3a:c4: 92:55:09:b6:55:a9:36:d5:1f:e7:d6:c1:8d:4d:a3: 44:3e:86:93:f1:b3:50:e2:42:9a:59:ef:96:d1:fd: 32:43:48:f0:e9:a8:1d:2d:ea:4e:49:cc:d5:16:e0: 33:1e:61:20:2b:44:7d:aa:27:26:9f:5a:4f:f1:4b: 3d:f2:99:55:15:ba:6d:cc:f3:7f:87:06:67:12:1c: 43:87:e8:46:bb:55:54:fc:53:91:50:cf:7c:59:f6: c2:54:d7:82:8a:7b:99:4a:0e:82:15:80:ba:5c:f0: 9e:d2:c9:6f:32:51:21:9e:c6:b4:17:cf:15:2f:5b: 8c:6b:c2:dd:46:fa:26:64:b1:12:8b:79:a9:de:d1: cf:5f:f5:ef:bb:80:8f:8e:c7:4c:80:2a:8a:ae:85: 3a:e9:88:88:73:d3:64:da:76:6d:c9:69:73:10:c6: b3:b7:6d:b4:0a:3f:ce:6b:1a:38:32:a9:e0:d4:01: 6e:b9:08:e6:15:df:11:d6:6b:10:8f:73:2f:0e:be: b6:19:38:91:8d:bf:43:12:61:f3:30:52:02:e2:6c: 13:c5:11:af:8e:84:68:55:22:91:63:59:5c:47:ba: 42:73:09:ee:b4:05:5d:2c:c9:6a:ed:05:38:89:0c: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:BD:23:21:42:C1:33:F6:09:AC:81:EC:5F:83:33:EA:70:7E:2F X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8f:43:8e:f1:ce:65:51:3e:d4:fd:21:80:3f:8d:e5:f9:8a: 7a:82:27:18:15:5f:7d:8f:ae:76:ee:8e:b8:e9:b2:9d:38:8c: 43:89:6a:92:e0:1f:3c:7c:be:4a:56:d9:f2:30:f4:f8:1f:22: 93:bf:57:89:db:41:19:18:53:ac:dc:10:ad:c9:84:51:5b:16: 22:80:33:1d:18:b2:26:08:a7:21:b9:96:c2:2b:74:27:85:fd: 1f:73:4d:b7:8a:ea:78:00:b5:43:57:d8:7c:97:fe:60:8a:af: 00:93:80:fc:5c:59:dc:b2:37:7f:29:2c:5f:c9:ea:2b:69:10: 79:f1:74:ac:be:27:53:7c:e4:fc:cf:e7:84:de:c3:80:1c:fa: 1d:f3:d9:f6:4a:60:d7:d1:bf:50:05:20:48:c4:3f:a0:24:a1: 6b:8f:c2:9a:8c:38:bc:ca:09:28:c2:9e:64:ec:2e:50:87:29: 95:29:ed:c2:63:74:e6:be:67:f4:de:47:26:cb:35:a3:df:f4: 96:95:91:0d:23:16:b4:50:f1:e5:e8:f0:e5:b3:90:36:05:35: 6a:64:63:6c:e8:f6:94:7a:69:87:d8:c3:c7:fc:4a:5b:dc:c0: 15:ca:06:1e:00:45:91:0b:61:9b:ec:c8:72:86:ab:93:6a:f1: d3:3f:13:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwNjA2MjE0MTEwWhcNMjUwNjEzMjE0MTEwWjAYMRYwFAYD VQQDEw02ODQzNjA3Ni1mNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4xH598iFdPqk2wVOsSSVQm2Vak21R/n1sGNTaNEPoaT8bNQ4kKaWe+W0f0y Q0jw6agdLepOSczVFuAzHmEgK0R9qicmn1pP8Us98plVFbptzPN/hwZnEhxDh+hG u1VU/FORUM98WfbCVNeCinuZSg6CFYC6XPCe0slvMlEhnsa0F88VL1uMa8LdRvom ZLESi3mp3tHPX/Xvu4CPjsdMgCqKroU66YiIc9Nk2nZtyWlzEMazt220Cj/Oaxo4 Mqng1AFuuQjmFd8R1msQj3MvDr62GTiRjb9DEmHzMFIC4mwTxRGvjoRoVSKRY1lc R7pCcwnutAVdLMlq7QU4iQzhdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI1vSMh QsEz9gmsgexfgzPqcH4vMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCij0OO8c5lUT7U/SGAP43l+Yp6gicYFV99j6527o646bKdOIxDiWqS 4B88fL5KVtnyMPT4HyKTv1eJ20EZGFOs3BCtyYRRWxYigDMdGLImCKchuZbCK3Qn hf0fc023iup4ALVDV9h8l/5giq8Ak4D8XFncsjd/KSxfyeoraRB58XSsvidTfOT8 z+eE3sOAHPod89n2SmDX0b9QBSBIxD+gJKFrj8KajDi8ygkowp5k7C5QhymVKe3C Y3Tmvmf03kcmyzWj3/SWlZENIxa0UPHl6PDls5A2BTVqZGNs6PaUemmH2MPH/Epb 3MAVygYeAEWRC2Gb7MhyhquTavHTPxNm -----END CERTIFICATE-----Generated at Sat Jun 7 04:45:43 2025 by rpki-client