$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: xIj2TF66wUziegVuVbsr95oM2IYGrwO6/yT0h1AWHTI= Subject key identifier: BB:C9:D6:07:23:09:E7:1E:0C:BA:41:E5:45:D6:3E:22:F7:77:9F:E2 Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 05EF Signing time: Fri 06 Jun 2025 22:59:11 +0000 Manifest this update: Fri 06 Jun 2025 22:59:10 +0000 Manifest next update: Fri 13 Jun 2025 22:59:10 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: /B0qpCuTlJhw4SNEm99jWHlgAzRQTkYV+FwnnyOFdfc=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: IJ+fkHbxBE1SHSjZ2ko97tJx/Im9hMimIC1imqln5xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Jun 6 22:59:10 2025 GMT Not After : Jun 13 22:59:10 2025 GMT Subject: CN=684372bf-6021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:7b:75:17:9f:99:1d:fe:89:31:96:6b:5e: 7c:80:68:d0:19:1a:c7:c5:22:23:4b:7f:ea:64:15: c3:24:6b:62:2b:9b:29:ad:50:c5:19:8f:9f:0c:9f: f2:7a:7e:e6:68:ab:39:e7:7d:95:37:42:8f:cd:6e: 64:b3:da:2d:3e:a1:89:47:8e:40:e0:73:8d:6c:04: ad:da:c5:f6:5d:8c:09:14:3c:cc:49:86:c5:b3:87: c4:3f:db:d6:59:49:f6:22:9d:64:ff:5d:71:42:1c: e6:48:51:22:9e:85:2a:d5:52:65:ac:2e:cb:dc:35: 01:44:5e:e3:a6:35:81:24:1b:49:ed:eb:0d:59:f0: 9b:ab:fb:6b:fc:23:4d:cc:93:eb:84:63:46:4c:c2: 3c:01:51:0f:17:2e:ce:e5:52:d1:81:4a:cd:dd:34: df:19:cc:54:a3:8d:a5:80:7d:ec:ae:92:d6:b8:ea: 31:60:d1:ac:51:75:f2:71:9f:63:50:4e:71:a2:f2: b0:68:f4:f8:85:a3:9d:13:10:0e:b1:45:11:3b:86: 3e:10:89:91:8a:02:7a:36:17:83:a4:39:6b:a0:56: d9:bd:2f:f7:b3:05:32:8e:8f:44:27:4d:61:6e:ed: 01:41:a4:3c:8d:66:cb:fc:eb:d0:71:4e:04:f2:f8: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:D6:07:23:09:E7:1E:0C:BA:41:E5:45:D6:3E:22:F7:77:9F:E2 X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:22:0c:4a:a2:c1:b9:5c:c9:80:a1:c7:30:5a:8c:2c:ed:e2: 6a:b1:67:a5:8f:dc:cc:f4:8b:a8:b1:dd:fa:69:34:62:d5:b2: 28:2e:c0:b3:7d:87:ed:95:fc:8c:c7:21:02:73:6b:43:34:bb: 48:ee:3c:b3:45:57:6b:70:36:60:72:4b:19:56:1a:cd:64:be: dd:9e:e0:55:9e:29:a9:e5:24:7a:4a:53:16:60:42:a7:0d:26: e1:fa:3f:c1:7c:77:e8:ac:b4:69:e4:d3:81:f7:57:84:cf:ae: 43:b0:81:ee:67:fc:19:1e:59:11:08:82:d5:76:ce:27:fa:c1: d3:f7:fd:b2:d9:1f:dc:5b:23:d1:23:6a:6a:46:2e:3d:e3:03: f0:f4:96:37:fc:4d:49:ae:97:b9:91:d4:44:12:22:a3:1b:36: a4:3d:6b:ba:ec:14:4b:4b:e1:5f:cf:36:95:fa:e5:1a:68:05: 81:4d:0e:3b:d9:f4:ae:1b:98:01:74:3e:69:27:d6:51:f3:09: 19:ae:c4:aa:05:97:5f:f3:9a:c1:d8:c3:49:67:a9:84:01:23: 76:3d:39:a1:b1:28:09:89:db:80:86:ad:5b:18:ce:0d:21:e0: 56:82:fd:3d:e1:7a:8f:7a:aa:29:17:36:a5:b1:59:0c:4f:95: 02:41:5c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjUwNjA2MjI1OTEwWhcNMjUwNjEzMjI1OTEwWjAYMRYwFAYD VQQDEw02ODQzNzJiZi02MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfR7dRefmR3+iTGWa158gGjQGRrHxSIjS3/qZBXDJGtiK5sprVDFGY+fDJ/y en7maKs5532VN0KPzW5ks9otPqGJR45A4HONbASt2sX2XYwJFDzMSYbFs4fEP9vW WUn2Ip1k/11xQhzmSFEinoUq1VJlrC7L3DUBRF7jpjWBJBtJ7esNWfCbq/tr/CNN zJPrhGNGTMI8AVEPFy7O5VLRgUrN3TTfGcxUo42lgH3srpLWuOoxYNGsUXXycZ9j UE5xovKwaPT4haOdExAOsUURO4Y+EImRigJ6NheDpDlroFbZvS/3swUyjo9EJ01h bu0BQaQ8jWbL/OvQcU4E8vgiAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvJ1gcj CeceDLpB5UXWPiL3d5/iMB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIgxKosG5XMmAoccwWows7eJqsWelj9zM9Iuosd36aTRi1bIoLsCz fYftlfyMxyECc2tDNLtI7jyzRVdrcDZgcksZVhrNZL7dnuBVnimp5SR6SlMWYEKn DSbh+j/BfHforLRp5NOB91eEz65DsIHuZ/wZHlkRCILVds4n+sHT9/2y2R/cWyPR I2pqRi494wPw9JY3/E1Jrpe5kdREEiKjGzakPWu67BRLS+FfzzaV+uUaaAWBTQ47 2fSuG5gBdD5pJ9ZR8wkZrsSqBZdf85rB2MNJZ6mEASN2PTmhsSgJiduAhq1bGM4N IeBWgv094XqPeqopFzalsVkMT5UCQVzC -----END CERTIFICATE-----Generated at Sat Jun 7 06:58:00 2025 by rpki-client