$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft File: fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json) Hash identifier: GiW5xIQ54/AneSwWvPW353zKBa27cMKnZlkhD4uOJ68= Subject key identifier: DF:D2:6D:8E:36:87:A2:B5:AD:7E:2C:4A:55:93:7C:E4:D6:ED:CD:2C Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED Certificate issuer: /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft Manifest number: 061E Signing time: Fri 30 May 2025 22:59:27 +0000 Manifest this update: Fri 30 May 2025 22:59:26 +0000 Manifest next update: Fri 06 Jun 2025 22:59:26 +0000 Files and hashes: 1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: +TcxF+y2LOIdQqhKby2Of6OzFapjXG8vdVezmHWyVjc=) 2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: 71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Validity Not Before: May 30 22:59:26 2025 GMT Not After : Jun 6 22:59:26 2025 GMT Subject: CN=683a384f-8f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:d2:4c:eb:89:35:39:3c:f6:14:b3:1e:f7: ec:90:2b:03:47:52:0e:8a:06:2d:5b:39:e6:6e:aa: d3:ad:87:44:aa:2b:02:03:55:7b:af:7e:10:0f:b6: f7:bb:c7:50:12:da:2b:8f:c9:b8:4d:77:ed:0f:de: 92:3e:b5:53:60:79:d8:5b:b0:9a:81:77:46:e2:29: 7b:9d:07:7d:b2:02:7c:e9:b8:95:85:8a:07:09:bc: 9f:3c:66:c3:da:11:6f:18:9c:1f:25:0b:cf:8e:ac: 24:ce:da:d1:96:e2:0d:03:e6:f6:5d:65:6c:bc:4f: 2c:f6:b7:df:13:4b:ce:cb:f1:4e:3a:3a:30:1a:50: 33:02:f3:a4:51:85:0f:8d:5c:b6:4a:20:55:d5:f4: 3b:d7:a7:fd:7c:16:10:96:1a:e7:66:19:1c:8e:c2: ef:e8:de:2e:6a:09:91:52:5d:03:2f:8a:b8:e1:81: 3f:68:ba:ce:c5:7d:ac:d5:70:c3:a0:e4:c3:92:db: 5b:d9:ba:c4:bf:c5:02:e8:39:0a:98:5a:72:b9:bb: 18:5c:00:05:28:fb:30:0b:05:46:d2:89:e0:26:23: 08:0b:8a:49:fe:63:6f:45:bd:91:c7:50:1b:77:7a: af:be:72:92:6a:8f:0e:cf:37:c3:76:f5:c2:52:b6: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D2:6D:8E:36:87:A2:B5:AD:7E:2C:4A:55:93:7C:E4:D6:ED:CD:2C X509v3 Authority Key Identifier: keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:06:e8:86:5c:8c:48:fa:33:d4:96:c5:fc:7d:fe:02:fc:13: 15:6e:4f:a0:01:5b:a7:52:09:53:ec:3a:ba:cc:65:a7:9a:98: eb:73:24:58:ea:e6:fa:14:5f:58:61:82:58:54:11:11:74:bf: 8c:9a:5f:9f:c8:cd:d7:27:9f:9e:f8:18:f3:0d:15:5f:a8:9b: 73:ea:3a:cf:06:3b:81:b4:52:c4:a7:c5:1a:42:c1:77:a0:ef: 7c:ee:86:3e:49:47:f2:b4:f6:37:a2:16:33:a0:b7:d2:3e:e9: 6b:13:5c:b2:1b:45:aa:4e:70:03:c2:d7:d0:37:02:57:53:b8: d7:56:d9:d0:d9:ec:98:0d:00:40:ae:36:07:ba:71:16:e6:03: df:24:72:22:de:0b:ed:60:ca:b9:86:8f:16:d0:47:84:bb:7b: af:55:1a:30:d3:e6:7c:68:de:0a:48:79:13:2c:57:2d:98:53: 99:d3:11:e3:4b:97:79:cf:a6:37:09:86:16:4a:3c:bf:df:34: a2:60:55:1e:d5:d3:6f:f4:06:34:5a:3e:de:91:02:88:6b:85: 27:85:22:ff:08:75:6d:d2:91:49:3f:2d:2b:94:c8:46:f3:5b: be:fb:6c:54:a3:ba:9f:d6:36:26:44:80:65:58:aa:cb:fc:ff: 0e:e5:93:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG M0IwODlBRUQwHhcNMjUwNTMwMjI1OTI2WhcNMjUwNjA2MjI1OTI2WjAYMRYwFAYD VQQDEw02ODNhMzg0Zi04ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pHSTOuJNTk89hSzHvfskCsDR1IOigYtWznmbqrTrYdEqisCA1V7r34QD7b3 u8dQEtorj8m4TXftD96SPrVTYHnYW7CagXdG4il7nQd9sgJ86biVhYoHCbyfPGbD 2hFvGJwfJQvPjqwkztrRluINA+b2XWVsvE8s9rffE0vOy/FOOjowGlAzAvOkUYUP jVy2SiBV1fQ716f9fBYQlhrnZhkcjsLv6N4uagmRUl0DL4q44YE/aLrOxX2s1XDD oOTDkttb2brEv8UC6DkKmFpyubsYXAAFKPswCwVG0ongJiMIC4pJ/mNvRb2Rx1Ab d3qvvnKSao8OzzfDdvXCUraPcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/SbY42 h6K1rX4sSlWTfOTW7c0sMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3 NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOBuiGXIxI+jPUlsX8ff4C/BMVbk+gAVunUglT7Dq6zGWnmpjrcyRY 6ub6FF9YYYJYVBERdL+Mml+fyM3XJ5+e+BjzDRVfqJtz6jrPBjuBtFLEp8UaQsF3 oO987oY+SUfytPY3ohYzoLfSPulrE1yyG0WqTnADwtfQNwJXU7jXVtnQ2eyYDQBA rjYHunEW5gPfJHIi3gvtYMq5ho8W0EeEu3uvVRow0+Z8aN4KSHkTLFctmFOZ0xHj S5d5z6Y3CYYWSjy/3zSiYFUe1dNv9AY0Wj7ekQKIa4UnhSL/CHVt0pFJPy0rlMhG 81u++2xUo7qf1jYmRIBlWKrL/P8O5ZMD -----END CERTIFICATE-----Generated at Sat May 31 17:51:42 2025 by rpki-client