$ rpki-client -vvf rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft File: Fs6MGXC4akr081Y5EEZo0JWz1Og.mft (raw, json) Hash identifier: lGq9PwOVMaZKpETx+sKzQ0JXBybwg00UYP7elZn6aMM= Subject key identifier: C7:95:9E:01:04:75:0B:F8:C6:C9:F2:A0:1F:D3:26:26:75:3A:15:53 Authority key identifier: 16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8 Certificate issuer: /CN=A911C075/serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8 Certificate serial: 175C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft Manifest number: 1747 Signing time: Fri 30 May 2025 16:47:42 +0000 Manifest this update: Fri 30 May 2025 16:47:42 +0000 Manifest next update: Fri 06 Jun 2025 16:47:42 +0000 Files and hashes: 1: Fs6MGXC4akr081Y5EEZo0JWz1Og.crl (hash: 39NTjY3o6XbKS9OHdyR64scmG66DleB5IUY4KSCi5pI=) 2: 3EB855ACDE3A11E781926D6DC4F9AE02.roa (hash: AMcNfp7F2XxS6fYEUJYfNIYxis7dlQgn+VV4onEe0GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5980 (0x175c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C075, serialNumber=16CE8C1970B86A4AF4F35639104668D095B3D4E8 Validity Not Before: May 30 16:47:42 2025 GMT Not After : Jun 6 16:47:42 2025 GMT Subject: CN=6839e12e-cb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:48:c9:21:36:db:3a:1f:78:07:17:5f:42: 5d:fd:5e:f5:6a:f2:09:3f:1e:b1:7a:1b:cc:e1:a8: cf:ab:f9:2d:84:9f:a6:d8:f6:5b:03:ef:45:fe:1c: 05:6c:05:ed:bf:0a:67:75:91:50:8e:d9:7b:79:e9: 0d:76:bf:88:a0:fc:bf:71:2b:30:6a:b9:7e:92:0b: d4:60:03:bb:f8:1f:7a:93:d9:3b:8b:c5:f5:7a:79: 04:fd:a0:cc:de:78:e4:cb:a6:3b:eb:fd:35:cd:14: 30:26:e1:77:5a:a2:ae:07:a0:81:db:e2:57:ce:57: 83:17:d1:78:5b:46:2b:cc:e2:bb:1e:16:ba:cd:40: 36:3f:05:8a:55:2a:78:da:02:39:1f:5b:a8:cb:0c: 82:9b:cf:b4:f5:4f:33:1b:03:53:a2:43:f5:30:ab: 5e:02:c2:f5:2e:6c:75:9e:44:ff:a1:7c:3e:91:4d: 5f:1a:9a:ef:46:b8:32:de:c3:64:a3:0f:f1:b7:f2: c9:c3:79:d0:2a:09:bc:31:4e:30:61:6c:ce:c1:d0: 7a:b4:46:46:1d:fb:e6:2e:83:33:f9:7c:53:bb:f6: f0:af:9b:d3:11:dc:a6:2e:08:de:3a:49:21:83:86: e9:63:8b:db:05:c4:f2:68:e0:fe:b0:b6:cc:e3:f4: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:9E:01:04:75:0B:F8:C6:C9:F2:A0:1F:D3:26:26:75:3A:15:53 X509v3 Authority Key Identifier: keyid:16:CE:8C:19:70:B8:6A:4A:F4:F3:56:39:10:46:68:D0:95:B3:D4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fs6MGXC4akr081Y5EEZo0JWz1Og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C075/75A6218ADE3911E783B7CC6CC4F9AE02/Fs6MGXC4akr081Y5EEZo0JWz1Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0c:ed:91:8b:7c:78:71:9f:7f:a8:b8:9a:f5:74:23:87:bb: a7:ed:bc:2e:29:14:2c:c2:f3:14:3e:44:f4:62:45:5b:80:31: ed:74:f0:bc:6d:2d:99:97:34:5c:75:b2:73:72:53:6d:9b:fb: 25:2e:70:f7:7f:cd:fc:6e:a6:1d:52:2f:06:a4:4f:c7:54:01: ff:c4:0e:3e:43:16:7a:df:9e:39:a8:44:37:cc:dd:24:ee:36: 8e:91:3b:7c:e8:fc:c4:7b:c8:d0:01:24:fa:b8:96:ad:3b:b9: 5d:d3:40:fb:87:d8:2a:99:22:b6:45:48:bf:16:7f:2b:e1:e6: 16:6f:48:7b:36:35:33:48:96:2c:f7:13:3a:2c:f3:5e:61:15: cb:f3:75:0c:98:02:c3:e2:bc:09:4e:ca:d0:c3:80:97:2e:3f: 87:32:a8:39:85:dd:0d:e1:38:b7:af:f5:f9:e7:3c:6d:b0:6c: 96:f4:0c:c4:b2:e5:80:6a:94:e4:58:64:a0:24:af:fb:f4:46: 17:63:0f:eb:e3:7b:fe:38:9f:94:92:b8:f7:cc:61:14:3f:61: c9:74:e1:5f:ba:8a:ad:07:5a:17:20:85:50:f4:e0:71:ef:27: 2c:75:bb:d3:7c:d3:2d:b7:58:86:34:9b:42:ee:7b:ce:6e:08: 1d:ab:5b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwNzUxMTAvBgNVBAUTKDE2Q0U4QzE5NzBCODZBNEFGNEYzNTYzOTEwNDY2OEQw OTVCM0Q0RTgwHhcNMjUwNTMwMTY0NzQyWhcNMjUwNjA2MTY0NzQyWjAYMRYwFAYD VQQDEw02ODM5ZTEyZS1jYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3I9IySE22zofeAcXX0Jd/V71avIJPx6xehvM4ajPq/kthJ+m2PZbA+9F/hwF bAXtvwpndZFQjtl7eekNdr+IoPy/cSswarl+kgvUYAO7+B96k9k7i8X1enkE/aDM 3njky6Y76/01zRQwJuF3WqKuB6CB2+JXzleDF9F4W0YrzOK7Hha6zUA2PwWKVSp4 2gI5H1uoywyCm8+09U8zGwNTokP1MKteAsL1Lmx1nkT/oXw+kU1fGprvRrgy3sNk ow/xt/LJw3nQKgm8MU4wYWzOwdB6tEZGHfvmLoMz+XxTu/bwr5vTEdymLgjeOkkh g4bpY4vbBcTyaOD+sLbM4/SfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeVngEE dQv4xsnyoB/TJiZ1OhVTMB8GA1UdIwQYMBaAFBbOjBlwuGpK9PNWORBGaNCVs9To MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzA3NS83NUE2MjE4QURF MzkxMUU3ODNCN0NDNkNDNEY5QUUwMi9GczZNR1hDNGFrcjA4MVk1RUVabzBKV3ox T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzNk1HWEM0YWtyMDgxWTVFRVpvMEpXejFPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzA3NS83NUE2MjE4QURFMzkxMUU3ODNCN0NDNkNDNEY5QUUwMi9GczZNR1hDNGFr cjA4MVk1RUVabzBKV3oxT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqDO2Ri3x4cZ9/qLia9XQjh7un7bwuKRQswvMUPkT0YkVbgDHtdPC8 bS2ZlzRcdbJzclNtm/slLnD3f838bqYdUi8GpE/HVAH/xA4+QxZ63545qEQ3zN0k 7jaOkTt86PzEe8jQAST6uJatO7ld00D7h9gqmSK2RUi/Fn8r4eYWb0h7NjUzSJYs 9xM6LPNeYRXL83UMmALD4rwJTsrQw4CXLj+HMqg5hd0N4Ti3r/X55zxtsGyW9AzE suWAapTkWGSgJK/79EYXYw/r43v+OJ+Ukrj3zGEUP2HJdOFfuoqtB1oXIIVQ9OBx 7ycsdbvTfNMtt1iGNJtC7nvObggdq1uX -----END CERTIFICATE-----Generated at Sat May 31 17:24:51 2025 by rpki-client