$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: MDiAcOzjHMSrn10hC+AiK1b0FRZVEPzWqeEXgUmddcY= Subject key identifier: 55:51:E4:9E:2C:EF:57:C7:68:1C:2C:2F:75:88:F8:33:82:91:81:E9 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 0660 Signing time: Fri 30 May 2025 22:39:39 +0000 Manifest this update: Fri 30 May 2025 22:39:38 +0000 Manifest next update: Fri 06 Jun 2025 22:39:38 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: +YmXPVIVz8leUQDo2NmNqbpNGo0GT9g5T/b6ifCK1vk=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: ZbglDjurwe6qJhjv9yc/alHsSUDwI/+N2E8sYgdY/Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: May 30 22:39:38 2025 GMT Not After : Jun 6 22:39:38 2025 GMT Subject: CN=683a33ab-2b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:e2:b5:a3:4d:84:29:4b:05:94:d7:1d:de: b5:53:61:46:91:24:7d:90:e9:5b:3b:93:d8:84:2c: aa:73:54:3e:c1:2c:2b:ad:d3:f9:7d:28:bf:b5:77: ab:19:28:77:bf:6f:91:be:a8:ba:92:9e:88:0a:5d: a2:84:42:31:9a:dd:95:82:07:ba:6c:8a:86:bd:6f: 9e:0b:e1:fb:38:f0:8e:85:c1:aa:29:5f:42:9a:7f: 71:3b:75:8a:bd:bc:ec:d2:54:f0:76:06:b9:37:48: 74:7b:0b:7f:20:7e:6f:a0:7a:b2:4e:bb:a8:de:28: b0:f1:2b:eb:4d:05:b1:14:ca:a1:a2:b3:4a:0c:ef: 94:da:ad:f8:68:37:23:d1:bb:d7:22:4e:df:b2:e0: e1:e0:d1:a5:cf:3f:49:f7:55:47:67:84:c2:62:27: 9f:0c:8e:5e:0f:d5:6d:b1:9c:1a:23:44:2c:c6:5f: 2c:44:02:22:67:fd:c2:c9:27:20:67:33:a7:7e:d4: 4e:d0:0f:16:d6:9b:9b:ab:6b:e2:40:7a:13:bb:3b: 5b:19:c8:7b:c6:78:58:4f:90:e6:da:85:d7:f8:4b: c7:a5:33:8e:94:b7:db:48:ac:5f:91:6f:59:09:b6: ba:7a:1e:9f:ad:af:63:e0:c4:8f:42:9f:5a:d9:58: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:E4:9E:2C:EF:57:C7:68:1C:2C:2F:75:88:F8:33:82:91:81:E9 X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e0:a5:f8:6b:4d:80:3c:68:fe:1d:e4:89:a7:e8:7f:7f:80: 47:6d:f5:90:d5:8d:3d:2d:f9:81:f8:87:72:10:ee:16:83:e9: 64:29:ad:18:b6:cc:11:7f:65:d4:69:74:d0:0f:f7:6d:be:3f: 5e:bb:57:d5:99:04:0d:11:e3:9f:86:55:50:82:0c:ab:0c:aa: cb:80:93:72:be:11:54:36:fd:66:ce:21:8c:fc:a7:07:80:5e: 1d:e1:ea:0e:94:10:be:70:13:2f:a7:09:d7:21:b8:76:f4:bb: c2:23:20:cd:f0:87:20:12:84:4b:4f:e5:f0:73:ff:29:1a:c1: be:be:16:1d:dd:f5:98:60:1d:6e:fc:ce:b1:86:6d:9c:62:54: 70:3a:2d:ec:d2:3e:b7:e7:8c:c2:0d:83:df:76:79:4a:f4:8d: 77:5d:4a:c3:36:aa:96:ac:6e:8d:05:4f:a2:37:ae:74:aa:52: 9d:6b:c3:a9:05:f8:62:78:a4:23:94:b9:0a:77:b9:ec:fb:d7: ba:fe:f1:00:a7:64:a9:15:fb:c1:5b:b2:e6:6d:22:6d:76:15: de:9b:0e:69:b3:36:87:95:8d:4e:6e:5a:1b:66:8c:cb:aa:26: a5:12:45:0d:00:ff:3b:18:39:39:e2:50:7b:32:c6:ae:fd:11: 84:67:1b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjUwNTMwMjIzOTM4WhcNMjUwNjA2MjIzOTM4WjAYMRYwFAYD VQQDEw02ODNhMzNhYi0yYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq//itaNNhClLBZTXHd61U2FGkSR9kOlbO5PYhCyqc1Q+wSwrrdP5fSi/tXer GSh3v2+Rvqi6kp6ICl2ihEIxmt2Vgge6bIqGvW+eC+H7OPCOhcGqKV9Cmn9xO3WK vbzs0lTwdga5N0h0ewt/IH5voHqyTruo3iiw8SvrTQWxFMqhorNKDO+U2q34aDcj 0bvXIk7fsuDh4NGlzz9J91VHZ4TCYiefDI5eD9VtsZwaI0Qsxl8sRAIiZ/3CyScg ZzOnftRO0A8W1pubq2viQHoTuztbGch7xnhYT5Dm2oXX+EvHpTOOlLfbSKxfkW9Z Cba6eh6fra9j4MSPQp9a2Vi8HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVR5J4s 71fHaBwsL3WI+DOCkYHpMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz4KX4a02APGj+HeSJp+h/f4BHbfWQ1Y09LfmB+IdyEO4Wg+lkKa0Y tswRf2XUaXTQD/dtvj9eu1fVmQQNEeOfhlVQggyrDKrLgJNyvhFUNv1mziGM/KcH gF4d4eoOlBC+cBMvpwnXIbh29LvCIyDN8IcgEoRLT+Xwc/8pGsG+vhYd3fWYYB1u /M6xhm2cYlRwOi3s0j6354zCDYPfdnlK9I13XUrDNqqWrG6NBU+iN650qlKda8Op BfhieKQjlLkKd7ns+9e6/vEAp2SpFfvBW7LmbSJtdhXemw5pszaHlY1OblobZozL qialEkUNAP87GDk54lB7Msau/RGEZxtZ -----END CERTIFICATE-----Generated at Sat May 31 16:45:46 2025 by rpki-client