$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: 2MsPuUDvfhkNguldoYNVatuNFQ57vTqdfzCVH48PJmU= Subject key identifier: D9:A1:E0:C6:D7:ED:9A:C1:BA:F4:C9:C5:4F:DD:4F:9D:16:F9:67:C9 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 61 Signing time: Tue 03 Jun 2025 06:53:51 +0000 Manifest this update: Tue 03 Jun 2025 06:53:51 +0000 Manifest next update: Tue 10 Jun 2025 06:53:51 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: LoYC0qoUOB3LDbZs9sTWqGl7FIcZ1jeu/+3WAbXegTY=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Jun 3 06:53:51 2025 GMT Not After : Jun 10 06:53:51 2025 GMT Subject: CN=683e9bff-ca28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:e2:af:94:13:db:ce:4c:7c:f5:6e:6b:f1: 72:b9:1d:63:e2:b7:4c:9f:98:e1:89:5b:03:d1:13: b9:ed:89:fa:dd:7d:4d:3e:0f:7d:c8:99:90:02:30: fe:80:e8:f8:f2:b7:dd:91:ad:63:35:97:cd:17:5a: 44:e3:f9:a6:e3:37:d1:44:42:11:92:3a:0b:da:4a: 4c:05:d4:4b:bc:97:e5:9a:c2:ea:32:68:1c:ce:c6: d1:71:73:78:72:3d:c5:f2:cc:73:46:36:b5:f6:10: 05:55:ea:02:dd:d7:1c:29:64:09:d3:97:16:34:cf: 05:09:c5:2d:b9:71:49:15:77:33:ee:1f:61:aa:3b: bf:4f:18:f9:07:e2:91:ec:c5:20:26:f6:5d:86:00: 15:89:35:2e:3f:50:e6:a6:17:b1:e9:2e:30:70:94: 69:51:a9:7d:d0:bb:17:ab:be:24:50:c4:9f:c3:8f: ab:7f:c6:24:ae:33:9d:f9:16:3d:eb:22:e2:57:63: 39:09:a3:0c:e2:04:a2:a1:c6:8c:50:ab:7b:a8:c4: e3:c5:71:0d:5a:1a:41:b9:9b:18:77:4c:d8:5e:24: d5:d0:ae:bd:d1:54:a1:19:c1:78:51:3a:30:81:1c: 56:85:34:e3:d6:13:f6:97:5c:9a:be:b8:f8:c5:d2: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:E0:C6:D7:ED:9A:C1:BA:F4:C9:C5:4F:DD:4F:9D:16:F9:67:C9 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d8:33:9f:b0:bb:16:41:49:bc:91:64:e5:e6:bd:71:58:21: 2e:92:ff:dd:d2:44:8f:e7:86:cb:2c:64:06:1b:44:dc:1a:73: 7f:16:39:39:fb:96:41:27:60:e0:e9:5f:49:e3:b8:f5:96:26: a3:01:8a:45:a8:4c:91:f1:4b:e5:f7:e3:d0:25:ea:35:3a:3d: 91:b7:43:7b:f5:c9:b7:39:45:12:1e:4e:28:cb:1c:d8:6c:52: b3:ca:5d:35:94:c2:3e:a2:67:31:25:04:1f:36:db:d4:59:60: 3b:78:2f:31:50:ba:81:ac:9f:54:ce:e3:33:53:21:85:17:6c: f4:0c:6b:e6:ff:e1:4f:95:05:8d:51:96:7a:2d:51:b7:da:cc: 67:6f:ac:3c:61:ca:07:73:d3:f3:5f:5c:a3:5e:14:0f:c1:c8: a0:d5:4c:9d:02:4e:d8:45:cd:f2:69:4f:d3:98:57:c3:92:45: 58:55:54:7e:8c:17:16:56:7b:0f:aa:f4:a1:f8:fd:ab:e9:de: 7b:f9:5a:da:c0:e8:ec:28:fd:27:62:ef:e8:00:eb:52:a3:3b: 0b:81:5f:9b:76:81:da:4b:25:80:1d:bd:21:4e:47:6d:fb:5f: b1:33:e5:42:4c:d1:d2:9f:cb:22:e0:44:94:07:f9:62:f5:85: 63:c9:e7:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA2MDMwNjUzNTFaFw0yNTA2MTAwNjUzNTFaMBgxFjAUBgNV BAMTDTY4M2U5YmZmLWNhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM7eKvlBPbzkx89W5r8XK5HWPit0yfmOGJWwPRE7ntifrdfU0+D33ImZACMP6A 6Pjyt92RrWM1l80XWkTj+abjN9FEQhGSOgvaSkwF1Eu8l+WawuoyaBzOxtFxc3hy PcXyzHNGNrX2EAVV6gLd1xwpZAnTlxY0zwUJxS25cUkVdzPuH2GqO79PGPkH4pHs xSAm9l2GABWJNS4/UOamF7HpLjBwlGlRqX3QuxerviRQxJ/Dj6t/xiSuM535Fj3r IuJXYzkJowziBKKhxoxQq3uoxOPFcQ1aGkG5mxh3TNheJNXQrr3RVKEZwXhROjCB HFaFNOPWE/aXXJq+uPjF0ixbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2aHgxtft msG69MnFT91PnRb5Z8kwHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHLYM5+wuxZBSbyRZOXmvXFYIS6S/93SRI/nhsssZAYbRNwac38WOTn7 lkEnYODpX0njuPWWJqMBikWoTJHxS+X349Al6jU6PZG3Q3v1ybc5RRIeTijLHNhs UrPKXTWUwj6iZzElBB8229RZYDt4LzFQuoGsn1TO4zNTIYUXbPQMa+b/4U+VBY1R lnotUbfazGdvrDxhygdz0/NfXKNeFA/ByKDVTJ0CTthFzfJpT9OYV8OSRVhVVH6M FxZWew+q9KH4/avp3nv5WtrA6Owo/Sdi7+gA61KjOwuBX5t2gdpLJYAdvSFOR237 X7Ez5UJM0dKfyyLgRJQH+WL1hWPJ58s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:15 2025 by rpki-client