$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: w+abyINEK0lvFcI07QRLGcO/KWDy4/cRHCeuVrL+dV4= Subject key identifier: F8:8B:FB:20:6C:05:2C:AF:8A:55:D4:69:F1:AE:24:16:44:32:DE:96 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 0705 Signing time: Fri 30 May 2025 22:08:54 +0000 Manifest this update: Fri 30 May 2025 22:08:54 +0000 Manifest next update: Fri 06 Jun 2025 22:08:54 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: izV8j8+K3MImH5PSQFfR5+2QCKQgYph9HuR5ENreK5o=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: May 30 22:08:54 2025 GMT Not After : Jun 6 22:08:54 2025 GMT Subject: CN=683a2c76-5589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cf:90:d6:a7:b2:ff:e1:65:ae:ea:84:0c:ed: f3:de:8c:f4:f5:ae:80:1f:96:dd:dc:49:b8:df:9d: 7e:b3:8b:a9:5b:8b:b6:04:56:95:35:54:99:f4:2d: ab:3e:da:af:1e:a9:e5:65:50:9a:c6:41:aa:2d:0d: 6e:c2:07:9e:bf:b1:b4:8d:fc:9c:e8:75:d2:66:f7: b1:ce:de:52:77:eb:03:d6:47:96:22:c4:11:7c:e6: 3e:67:27:57:39:8f:07:f2:b0:cd:cc:2d:f6:21:eb: 74:f7:ea:fc:f1:50:8e:8b:58:a8:a9:83:0b:47:52: c2:55:46:b3:68:7e:9a:a7:de:5a:5d:96:1a:0d:ad: 34:64:9b:c5:97:bc:e7:0a:52:ea:75:8c:0d:7d:15: cc:7a:8d:91:9d:8c:31:b1:15:9c:d8:02:d5:e0:50: 3f:5d:a0:8b:33:07:46:19:e9:07:2e:74:41:a7:83: e2:e9:15:6f:e8:45:b9:98:00:79:a5:f9:c8:f9:9e: ae:c2:b4:06:eb:8b:0f:17:e1:9a:73:9a:d0:c9:62: e0:4e:0d:a2:c6:e6:f8:bd:0b:d2:6c:4a:25:51:37: 16:49:83:29:3f:a9:cc:fe:8b:78:5b:e2:2f:b2:98: 58:6d:77:3f:f1:2b:ea:8f:88:60:f2:ab:bc:a4:4e: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:FB:20:6C:05:2C:AF:8A:55:D4:69:F1:AE:24:16:44:32:DE:96 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f8:29:a5:da:62:83:de:44:b0:2d:af:14:f5:55:e3:d6:c9: d2:47:fc:db:50:bb:dc:a5:3c:c5:02:47:84:07:8f:a5:03:ea: cf:1f:e9:e2:66:aa:1d:32:6c:b0:03:ef:89:6e:6d:99:ef:db: a2:27:88:d3:e3:5f:c2:14:f2:07:59:7a:14:fe:4d:28:d2:68: 40:2d:01:f8:2b:17:71:b4:4c:8f:02:48:b1:17:63:77:32:70: c1:0b:c6:0d:06:f2:37:1d:19:13:9f:02:9d:c7:7d:49:b3:73: 38:a3:a6:6f:15:c6:5f:f4:4d:b2:7e:c2:fc:91:80:12:98:0b: ee:23:07:76:69:a4:a1:62:dc:09:56:37:34:ea:a2:f9:41:ff: 24:0e:2f:54:89:e1:29:db:6d:ec:e5:d3:9e:af:cc:7d:08:48: f7:7e:13:2b:02:99:3c:0d:ce:8c:83:8b:9b:52:23:c5:38:d0: fb:68:76:6a:6d:56:fb:bf:42:05:1d:f4:a2:20:95:b0:4a:30: aa:f8:4a:f7:1a:15:ea:84:56:96:cc:0b:40:ee:0f:06:6a:dd: e9:7d:32:93:3c:53:bc:44:dc:18:37:a8:37:f3:6c:3c:21:34: b1:1d:52:c3:c0:75:8a:8f:91:ae:97:d1:52:d3:17:c8:b8:eb: 5b:28:c3:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNTMwMjIwODU0WhcNMjUwNjA2MjIwODU0WjAYMRYwFAYD VQQDEw02ODNhMmM3Ni01NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s+Q1qey/+FlruqEDO3z3oz09a6AH5bd3Em4351+s4upW4u2BFaVNVSZ9C2r PtqvHqnlZVCaxkGqLQ1uwgeev7G0jfyc6HXSZvexzt5Sd+sD1keWIsQRfOY+ZydX OY8H8rDNzC32Iet09+r88VCOi1ioqYMLR1LCVUazaH6ap95aXZYaDa00ZJvFl7zn ClLqdYwNfRXMeo2RnYwxsRWc2ALV4FA/XaCLMwdGGekHLnRBp4Pi6RVv6EW5mAB5 pfnI+Z6uwrQG64sPF+Gac5rQyWLgTg2ixub4vQvSbEolUTcWSYMpP6nM/ot4W+Iv sphYbXc/8Svqj4hg8qu8pE4aHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiL+yBs BSyvilXUafGuJBZEMt6WMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+Cml2mKD3kSwLa8U9VXj1snSR/zbULvcpTzFAkeEB4+lA+rPH+ni ZqodMmywA++Jbm2Z79uiJ4jT41/CFPIHWXoU/k0o0mhALQH4KxdxtEyPAkixF2N3 MnDBC8YNBvI3HRkTnwKdx31Js3M4o6ZvFcZf9E2yfsL8kYASmAvuIwd2aaShYtwJ Vjc06qL5Qf8kDi9UieEp223s5dOer8x9CEj3fhMrApk8Dc6Mg4ubUiPFOND7aHZq bVb7v0IFHfSiIJWwSjCq+Er3GhXqhFaWzAtA7g8Gat3pfTKTPFO8RNwYN6g382w8 ITSxHVLDwHWKj5Gul9FS0xfIuOtbKMMG -----END CERTIFICATE-----Generated at Sat May 31 17:18:56 2025 by rpki-client