$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: cBQ4X/cMVJnPX2G7yxIZWRCAzE8VtWE8D7HSehrEXy8= Subject key identifier: 9A:4E:6A:48:F1:DE:B3:03:CC:82:4E:6B:2C:4D:18:82:5A:E2:90:63 Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 0844 Signing time: Thu 12 Jun 2025 20:29:07 +0000 Manifest this update: Thu 12 Jun 2025 20:29:07 +0000 Manifest next update: Thu 19 Jun 2025 20:29:07 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: TGJaztMAn97GCCe/s4haIRnyFBfOvyQKzxvJFBaRRcY=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: Jun 12 20:29:07 2025 GMT Not After : Jun 19 20:29:07 2025 GMT Subject: CN=684b3893-f209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:6e:ea:3a:f0:f3:13:d2:e9:f2:cb:f5:44: fa:59:78:f9:7c:3e:5c:4e:2d:e6:b2:ad:bd:72:98: d6:40:1c:44:ca:0b:84:48:9c:21:ca:79:97:48:a9: 6f:04:14:6f:2b:a5:29:1c:2d:0e:5f:48:12:e7:6f: ed:76:f9:f2:89:eb:07:ab:e8:ee:50:62:86:bb:e4: 11:01:b0:35:df:aa:6c:25:da:82:7e:ca:d7:a2:9e: c0:a3:6c:31:99:47:f3:f0:f7:47:ce:3d:69:00:a3: 27:71:79:cc:2e:44:d5:b9:50:f7:96:79:1a:44:4c: 9b:b9:aa:ae:58:98:b4:16:84:66:81:5e:ee:90:69: 66:81:0f:28:66:88:8d:4d:1c:8e:d4:f6:c8:31:32: 15:90:d4:02:a4:1c:a0:38:aa:e9:0f:c8:d4:2e:eb: 2b:4a:cd:8c:78:a5:12:66:bd:2a:95:94:44:07:62: c7:c1:90:3e:eb:d7:d7:cf:58:cd:0c:10:d2:7c:66: 70:a4:3b:42:12:6a:cc:d5:db:61:81:53:e9:38:7a: 58:c3:8a:a3:1a:12:0d:b5:e6:aa:18:8a:16:e9:16: 86:1d:fc:d2:e7:2b:09:03:8b:58:23:64:f8:c5:1b: 1e:e8:d5:2b:57:f6:6c:bf:c7:c0:99:de:d5:16:18: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:6A:48:F1:DE:B3:03:CC:82:4E:6B:2C:4D:18:82:5A:E2:90:63 X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:53:ce:aa:d1:12:08:09:43:e0:eb:5e:7f:75:e7:21:26:7c: 64:fb:06:5f:7d:ee:50:39:e0:b9:f4:73:d4:8e:4f:69:ea:1c: c7:ea:b8:05:86:c4:73:1e:51:9f:3e:49:18:8b:28:1f:d2:27: a5:f7:95:af:62:74:ad:95:39:72:bc:04:d3:95:3b:ea:52:f1: 4f:dd:68:0e:08:e0:ef:c8:6d:8e:f0:c2:12:cf:9a:12:8b:c5: c1:85:4c:28:11:2e:dd:43:5a:fc:7f:9c:0c:8f:a4:84:52:b2: e8:3c:39:d2:48:c4:24:7c:c5:4a:0a:c8:5c:7e:dd:77:b8:b1: 24:fa:58:9a:8b:3b:90:74:30:15:a0:c1:b6:06:cf:5c:ee:69: b8:3e:15:a4:65:d8:c0:ec:f8:60:d6:62:de:80:16:b2:29:6c: e5:f1:fa:d1:f6:b7:4f:72:7e:64:7f:a7:39:27:40:53:6c:dc: 2d:34:a9:d1:b1:38:00:05:75:53:6e:82:e1:35:8d:1c:47:af: e5:df:2e:1a:8c:dd:d1:9c:58:db:f8:a5:a0:32:c8:e1:32:0c: d7:65:aa:12:7a:cf:46:e8:57:fe:a8:4a:c2:8b:f5:e5:67:cf: 23:96:e1:5c:24:c4:77:bb:e7:23:8f:ca:07:4e:1c:6f:c2:99: e3:c8:62:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjUwNjEyMjAyOTA3WhcNMjUwNjE5MjAyOTA3WjAYMRYwFAYD VQQDEw02ODRiMzg5My1mMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEhu6jrw8xPS6fLL9UT6WXj5fD5cTi3msq29cpjWQBxEyguESJwhynmXSKlv BBRvK6UpHC0OX0gS52/tdvnyiesHq+juUGKGu+QRAbA136psJdqCfsrXop7Ao2wx mUfz8PdHzj1pAKMncXnMLkTVuVD3lnkaREybuaquWJi0FoRmgV7ukGlmgQ8oZoiN TRyO1PbIMTIVkNQCpBygOKrpD8jULusrSs2MeKUSZr0qlZREB2LHwZA+69fXz1jN DBDSfGZwpDtCEmrM1dthgVPpOHpYw4qjGhINteaqGIoW6RaGHfzS5ysJA4tYI2T4 xRse6NUrV/Zsv8fAmd7VFhj/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpOakjx 3rMDzIJOayxNGIJa4pBjMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdU86q0RIICUPg615/dechJnxk+wZffe5QOeC59HPUjk9p6hzH6rgF hsRzHlGfPkkYiygf0iel95WvYnStlTlyvATTlTvqUvFP3WgOCODvyG2O8MISz5oS i8XBhUwoES7dQ1r8f5wMj6SEUrLoPDnSSMQkfMVKCshcft13uLEk+liaizuQdDAV oMG2Bs9c7mm4PhWkZdjA7Phg1mLegBayKWzl8frR9rdPcn5kf6c5J0BTbNwtNKnR sTgABXVTboLhNY0cR6/l3y4ajN3RnFjb+KWgMsjhMgzXZaoSes9G6Ff+qErCi/Xl Z88jluFcJMR3u+cjj8oHThxvwpnjyGL6 -----END CERTIFICATE-----Generated at Fri Jun 13 01:24:27 2025 by rpki-client