$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: VaQB8L4Z24TGIwQzId1ksWymfP0xG7Umt6qgiWR/Wbk= Subject key identifier: 03:FC:9D:F8:74:D1:6F:97:4D:DF:44:94:0F:CF:C7:02:7E:04:B1:53 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C3E Signing time: Fri 30 May 2025 18:42:04 +0000 Manifest this update: Fri 30 May 2025 18:42:04 +0000 Manifest next update: Fri 06 Jun 2025 18:42:04 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: C7jVtnN5z+NnaB2wAYZeKDgKeJw6GQpe6ORSgWEGgYA=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: May 30 18:42:04 2025 GMT Not After : Jun 6 18:42:04 2025 GMT Subject: CN=6839fbfc-eee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:b6:97:78:95:7f:9a:7e:1f:1c:ba:9c:cf: 73:aa:a8:2d:87:d4:c4:ca:e3:28:2e:9d:bd:c0:e9: c4:0b:38:bf:3b:57:9a:1a:d5:ac:40:7b:30:35:db: 6b:70:eb:92:f1:d9:e3:50:d0:8b:36:10:a8:cb:fb: 50:e4:01:ef:c3:ec:db:83:a8:95:90:43:8a:b6:e1: 82:d1:3f:a3:fd:e2:68:0e:59:d6:e4:18:db:99:46: b4:e6:0b:07:24:2f:5b:df:b0:16:09:1e:ec:07:bd: a6:f6:e4:3a:6f:3c:94:74:35:5c:6d:a1:a7:2d:fd: 6a:c3:d0:e5:06:47:17:54:e6:eb:f8:12:67:41:32: c1:08:9c:04:65:1b:eb:76:93:e3:c1:9e:ae:4d:56: 59:19:38:55:15:81:2e:0f:7a:c9:16:41:bc:c3:6a: b5:3d:69:a3:0f:f2:5a:9f:92:f8:02:c6:7d:21:3d: 65:21:17:e1:4e:00:3a:25:ab:b0:05:0b:e8:74:40: 18:66:ea:b5:da:1e:c4:88:b3:62:00:12:e8:02:df: bb:1a:55:ea:fe:50:1d:6f:15:9b:ff:fb:5b:b8:0a: b2:50:d2:5e:b6:08:50:41:76:1e:00:c0:0d:ed:0d: 0d:6c:79:36:25:0a:58:1b:07:02:7c:58:9d:5d:af: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FC:9D:F8:74:D1:6F:97:4D:DF:44:94:0F:CF:C7:02:7E:04:B1:53 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b6:df:d7:e2:ab:f1:fe:ea:7d:b4:99:b4:2c:70:53:ca:b9: 09:7d:7c:a4:f1:59:70:9b:24:c0:2e:3d:86:9c:16:32:98:fe: f3:af:67:8c:67:cb:bf:89:9b:cf:3e:bf:ab:7f:8f:f4:17:af: 35:64:3e:8a:82:be:de:69:d6:d1:be:66:f8:cf:bb:8c:d8:e7: b7:93:c3:49:47:f1:0f:97:32:87:58:e1:86:c7:d8:4d:c4:fc: a8:c8:e2:6c:a8:2d:a1:f5:15:95:af:70:1c:52:e2:c2:db:0a: 32:6e:b0:61:61:51:29:31:48:d9:61:47:17:84:64:97:b7:dd: cc:eb:62:f5:72:93:60:4c:b0:da:7e:fb:6b:e4:53:36:b2:8e: 00:01:8b:3e:bf:67:80:3d:b3:66:e9:6a:cb:aa:d3:b2:b4:a3: eb:dc:56:62:1e:18:aa:3d:26:5c:ef:8f:cb:86:93:c1:bf:49: 3a:fc:28:b6:af:63:17:5b:c7:81:c2:32:ee:4d:9a:53:6b:cd: e2:12:3d:20:16:47:d2:96:18:5d:75:8c:16:36:61:01:fa:fb: 24:be:20:31:b9:01:bd:b1:9d:0e:1e:aa:c5:95:a4:e1:d8:97: 17:4e:7a:89:10:cb:e8:9b:5d:4f:de:88:24:5d:d1:84:e8:13: 1e:49:cc:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUwNTMwMTg0MjA0WhcNMjUwNjA2MTg0MjA0WjAYMRYwFAYD VQQDEw02ODM5ZmJmYy1lZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTi2l3iVf5p+Hxy6nM9zqqgth9TEyuMoLp29wOnECzi/O1eaGtWsQHswNdtr cOuS8dnjUNCLNhCoy/tQ5AHvw+zbg6iVkEOKtuGC0T+j/eJoDlnW5BjbmUa05gsH JC9b37AWCR7sB72m9uQ6bzyUdDVcbaGnLf1qw9DlBkcXVObr+BJnQTLBCJwEZRvr dpPjwZ6uTVZZGThVFYEuD3rJFkG8w2q1PWmjD/Jan5L4AsZ9IT1lIRfhTgA6Jauw BQvodEAYZuq12h7EiLNiABLoAt+7GlXq/lAdbxWb//tbuAqyUNJetghQQXYeAMAN 7Q0NbHk2JQpYGwcCfFidXa9ATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP8nfh0 0W+XTd9ElA/PxwJ+BLFTMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+tt/X4qvx/up9tJm0LHBTyrkJfXyk8VlwmyTALj2GnBYymP7zr2eM Z8u/iZvPPr+rf4/0F681ZD6Kgr7eadbRvmb4z7uM2Oe3k8NJR/EPlzKHWOGGx9hN xPyoyOJsqC2h9RWVr3AcUuLC2woybrBhYVEpMUjZYUcXhGSXt93M62L1cpNgTLDa fvtr5FM2so4AAYs+v2eAPbNm6WrLqtOytKPr3FZiHhiqPSZc74/LhpPBv0k6/Ci2 r2MXW8eBwjLuTZpTa83iEj0gFkfSlhhddYwWNmEB+vskviAxuQG9sZ0OHqrFlaTh 2JcXTnqJEMvom11P3ogkXdGE6BMeScz2 -----END CERTIFICATE-----Generated at Sat May 31 16:38:51 2025 by rpki-client