$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: S1YRvCWwcOGK4JpAxGnT9vQpCgXrYRwy45vb7PcJeds= Subject key identifier: F1:F4:9D:89:5E:5E:D6:9D:A4:3B:96:7E:39:E1:6C:93:C7:1E:2D:DD Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B62 Signing time: Fri 30 May 2025 19:42:54 +0000 Manifest this update: Fri 30 May 2025 19:42:53 +0000 Manifest next update: Fri 06 Jun 2025 19:42:53 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: r6FpHMN2IrLFc9VjfLrWHkNf35X0i8GgcrIFQ/jkZYU=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: May 30 19:42:53 2025 GMT Not After : Jun 6 19:42:53 2025 GMT Subject: CN=683a0a3d-a3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:78:e9:67:70:6d:37:3f:7e:9b:f4:9c:db: be:b6:cf:3f:e2:e5:85:3d:49:fa:21:7f:f4:3e:1f: 52:6a:73:35:cc:4c:c1:d0:33:4b:c3:03:97:2b:95: 04:17:e9:47:0b:2d:5d:1b:f8:f4:40:b6:9d:45:34: 0a:d8:fe:ba:81:db:5a:1c:02:f1:7d:c0:cf:6b:1e: 74:bd:d8:61:d0:e3:87:da:6f:1c:ce:65:a4:fe:49: 76:0e:27:00:a6:57:6e:7f:dd:a4:72:e7:10:b6:b9: d2:9e:a1:21:91:68:1d:64:3e:99:ef:0d:1b:c7:7f: 79:52:be:54:3b:f0:66:fe:e4:ed:4b:f1:68:b7:7c: de:b5:82:ef:27:83:d6:ae:be:26:6f:16:dd:26:36: 93:32:43:b4:4f:77:ee:3c:39:e8:e0:0f:3d:c5:84: 6d:f1:cc:93:c3:39:3e:5d:f6:9e:8f:d4:42:13:bd: ac:83:d6:dc:bb:98:49:e4:3c:ef:2a:62:12:a1:50: cf:28:4d:69:7e:43:8a:5b:d7:77:26:9a:71:98:1e: a8:4a:d1:f8:56:80:3e:92:89:0d:bd:40:87:f9:c1: 62:57:b2:94:d3:36:12:c5:93:7b:7a:b7:46:0f:53: 07:78:62:2d:7e:b5:90:3d:0d:16:fc:d4:ff:b0:12: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:9D:89:5E:5E:D6:9D:A4:3B:96:7E:39:E1:6C:93:C7:1E:2D:DD X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2b:11:93:1e:e1:ba:78:05:65:ad:73:39:bf:a8:28:01:42: 1a:36:c0:75:f7:bf:10:39:80:42:62:79:01:ee:22:b9:14:7a: e5:91:2d:88:c3:25:84:ee:36:82:dc:f1:db:00:84:20:19:7a: bc:86:1b:a8:b6:e4:00:5d:62:57:67:0d:b4:c1:60:f3:26:79: 2a:81:af:0b:4b:fa:a4:d6:7f:1e:72:49:7b:bb:65:0e:9b:59: 9e:17:d1:ea:a3:23:a7:7d:fd:21:e2:d8:ff:6e:6f:af:63:a1: ea:18:75:c9:c9:93:50:24:59:fd:a6:e7:3c:c6:84:64:a7:aa: 00:23:e9:ad:fa:93:d1:6f:be:45:32:69:7f:08:bd:df:07:ae: ec:ce:ea:92:ff:f9:57:44:10:67:40:24:0f:1f:6a:92:ac:f1: c2:6c:45:04:ef:2d:55:19:6f:29:bd:a4:74:02:99:04:a7:9c: 1d:5d:50:1e:50:91:b6:d1:68:34:86:bc:48:3c:16:b1:0d:6b: de:68:07:31:1f:f5:bc:fd:a0:b5:ea:bf:d8:aa:0a:46:0b:af: b4:ab:8c:19:4a:e9:27:f8:56:1a:af:51:01:5a:64:0f:3c:fa: fe:fa:7f:55:e5:e8:ab:66:4a:51:aa:b7:17:e8:a9:b7:81:13: bc:5e:56:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNTMwMTk0MjUzWhcNMjUwNjA2MTk0MjUzWjAYMRYwFAYD VQQDEw02ODNhMGEzZC1hM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPB46WdwbTc/fpv0nNu+ts8/4uWFPUn6IX/0Ph9SanM1zEzB0DNLwwOXK5UE F+lHCy1dG/j0QLadRTQK2P66gdtaHALxfcDPax50vdhh0OOH2m8czmWk/kl2DicA plduf92kcucQtrnSnqEhkWgdZD6Z7w0bx395Ur5UO/Bm/uTtS/Fot3zetYLvJ4PW rr4mbxbdJjaTMkO0T3fuPDno4A89xYRt8cyTwzk+Xfaej9RCE72sg9bcu5hJ5Dzv KmISoVDPKE1pfkOKW9d3JppxmB6oStH4VoA+kokNvUCH+cFiV7KU0zYSxZN7erdG D1MHeGItfrWQPQ0W/NT/sBLltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPH0nYle XtadpDuWfjnhbJPHHi3dMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/KxGTHuG6eAVlrXM5v6goAUIaNsB1978QOYBCYnkB7iK5FHrlkS2I wyWE7jaC3PHbAIQgGXq8hhuotuQAXWJXZw20wWDzJnkqga8LS/qk1n8eckl7u2UO m1meF9HqoyOnff0h4tj/bm+vY6HqGHXJyZNQJFn9puc8xoRkp6oAI+mt+pPRb75F Mml/CL3fB67szuqS//lXRBBnQCQPH2qSrPHCbEUE7y1VGW8pvaR0ApkEp5wdXVAe UJG20Wg0hrxIPBaxDWveaAcxH/W8/aC16r/YqgpGC6+0q4wZSukn+FYar1EBWmQP PPr++n9V5eirZkpRqrcX6Km3gRO8XlZA -----END CERTIFICATE-----Generated at Sat May 31 16:43:05 2025 by rpki-client