$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: iY/jDOH8hJkKMwPD2vV3JAN5Gjx3lmVF3vCGtMhnBQ8= Subject key identifier: 42:DF:78:54:45:9F:3D:F4:B5:41:3E:02:68:98:B5:CD:18:06:02:6A Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 5E Signing time: Sun 01 Jun 2025 06:49:56 +0000 Manifest this update: Sun 01 Jun 2025 06:49:56 +0000 Manifest next update: Sun 08 Jun 2025 06:49:56 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: 74fGmG/T6prneytTQHVE1TSSSUL3VAjsrm3m8FpAIZE=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Jun 1 06:49:56 2025 GMT Not After : Jun 8 06:49:56 2025 GMT Subject: CN=683bf814-f598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:59:4d:fd:c8:11:36:11:86:75:fe:c6:6f: 4b:70:45:c2:01:01:fb:d4:8c:7e:51:14:47:ea:a9: 32:74:b2:d5:6a:c6:b3:bb:84:9d:4b:93:b8:95:70: 26:e5:cf:e0:2a:2d:6e:2d:70:2d:bd:0c:58:3e:58: 05:7c:a4:39:6a:fe:27:34:7f:4d:55:de:a1:69:0f: 18:42:9e:3d:98:d7:be:49:22:3f:d6:b0:de:95:6a: 8b:2a:74:3e:43:8c:d6:ee:d3:18:30:ff:67:5f:4d: 2a:a4:ae:8e:f5:b4:5b:2e:71:29:5b:7c:9f:d1:69: de:99:3c:0b:10:29:1c:8d:d2:6e:01:c5:d0:e3:07: 2b:df:82:52:c0:07:93:ba:d0:56:f7:d0:90:e2:8c: b4:84:8d:6d:5e:de:ce:36:60:50:dc:f8:1b:89:e8: 46:a9:3b:21:b8:89:4b:1b:fc:90:ba:26:95:98:af: 9c:4e:83:5a:1d:b7:e8:23:c0:8b:e0:f0:fd:bb:ba: 8c:01:6e:6f:2f:f6:03:35:72:1a:d8:c7:8e:6d:f3: 2d:4d:e1:1e:37:23:ba:37:53:50:95:54:02:80:48: 45:4d:e1:6f:08:94:df:50:a8:a9:83:ad:8b:13:0b: 3a:c3:6f:65:63:9b:19:d1:72:86:80:26:fd:16:58: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:78:54:45:9F:3D:F4:B5:41:3E:02:68:98:B5:CD:18:06:02:6A X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:03:89:9f:f9:3a:72:cd:b9:2e:5a:e3:ad:ca:33:95:a8:ce: b6:fd:8e:5e:bd:a9:07:06:7a:41:ac:51:07:8e:b2:be:ee:83: 67:de:07:59:fe:09:59:1c:ef:ec:20:9f:ff:e9:45:11:ab:87: a5:a7:e6:ed:85:d6:bd:a9:33:74:a1:7c:6a:f8:5e:4a:49:44: c2:22:66:24:6c:b0:8f:5a:43:af:4c:21:a7:92:e6:9c:e4:64: 33:f6:62:d5:41:c3:55:2c:b1:0d:8d:40:64:de:43:90:f5:49: 6b:8f:be:04:90:ee:3f:78:31:a8:9a:99:49:80:5f:9a:f0:69: ac:e3:29:72:64:ff:f0:2c:44:7e:b5:16:fa:20:f3:c7:c7:b1: 1d:e4:96:85:dd:61:f1:61:a5:89:bf:3f:cd:1c:a7:d6:d2:57: f0:6e:cd:99:06:2b:6d:39:5a:14:d8:25:f5:67:93:1c:26:f3: ec:9e:c9:39:e1:97:80:3c:98:0c:f1:f1:cd:56:be:d8:65:e4: 9b:7b:49:f2:e1:44:bb:b9:c0:69:20:10:31:3d:9f:b7:db:d8: 10:07:4d:8f:95:09:fe:0e:42:91:7e:45:38:e7:f3:7c:6b:25: 16:a2:d4:b8:2b:99:d8:af:28:9c:d2:27:1f:06:fc:77:be:9b: eb:c5:0c:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA2MDEwNjQ5NTZaFw0yNTA2MDgwNjQ5NTZaMBgxFjAUBgNV BAMTDTY4M2JmODE0LWY1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGullN/cgRNhGGdf7Gb0twRcIBAfvUjH5RFEfqqTJ0stVqxrO7hJ1Lk7iVcCbl z+AqLW4tcC29DFg+WAV8pDlq/ic0f01V3qFpDxhCnj2Y175JIj/WsN6VaosqdD5D jNbu0xgw/2dfTSqkro71tFsucSlbfJ/Rad6ZPAsQKRyN0m4BxdDjByvfglLAB5O6 0Fb30JDijLSEjW1e3s42YFDc+BuJ6EapOyG4iUsb/JC6JpWYr5xOg1odt+gjwIvg 8P27uowBbm8v9gM1chrYx45t8y1N4R43I7o3U1CVVAKASEVN4W8IlN9QqKmDrYsT CzrDb2VjmxnRcoaAJv0WWEvrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQt94VEWf PfS1QT4CaJi1zRgGAmowHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJADiZ/5OnLNuS5a463KM5Wozrb9jl69qQcGekGsUQeOsr7ug2feB1n+ CVkc7+wgn//pRRGrh6Wn5u2F1r2pM3ShfGr4XkpJRMIiZiRssI9aQ69MIaeS5pzk ZDP2YtVBw1UssQ2NQGTeQ5D1SWuPvgSQ7j94MaiamUmAX5rwaazjKXJk//AsRH61 Fvog88fHsR3kloXdYfFhpYm/P80cp9bSV/BuzZkGK205WhTYJfVnkxwm8+yeyTnh l4A8mAzx8c1Wvthl5Jt7SfLhRLu5wGkgEDE9n7fb2BAHTY+VCf4OQpF+RTjn83xr JRai1LgrmdivKJzSJx8G/He+m+vFDJ0= -----END CERTIFICATE-----Generated at Mon Jun 2 20:40:56 2025 by rpki-client