$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: OCUz1Fj4JJjl188h0kG6O7H6AkWZayutKch2a/aNewI= Subject key identifier: A7:6C:65:D4:C7:1A:AD:BB:AC:BF:94:CD:64:83:EE:10:28:0F:FE:D2 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 76 Signing time: Sat 19 Jul 2025 07:02:31 +0000 Manifest this update: Sat 19 Jul 2025 07:02:31 +0000 Manifest next update: Sat 26 Jul 2025 07:02:31 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: fUMhfE0JbQAylXrET7+SsHcxydAhBsVFKAsWeoosocg=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Jul 19 07:02:31 2025 GMT Not After : Jul 26 07:02:31 2025 GMT Subject: CN=687b4307-ec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:1c:8a:73:f9:7a:61:be:11:bf:1e:75:7f: c4:27:83:a0:91:68:c4:18:ba:d3:f3:40:31:ad:22: c5:f0:cc:1b:44:dd:2f:22:d5:1c:91:ee:10:f3:da: 9b:4d:92:7e:18:d3:17:73:d4:a0:3c:ba:b6:ed:85: 91:31:93:38:ed:15:f9:1a:46:87:4b:23:49:c6:d2: 63:e9:13:a3:76:67:7c:e0:ec:57:a7:ce:c1:81:ac: 76:75:6f:ee:b1:f9:63:18:dd:f9:df:8c:ba:33:0e: 7a:8c:69:d1:7f:63:30:6f:c0:b6:93:f5:11:07:50: d8:14:3a:ab:a9:aa:a1:7b:69:b6:88:a6:13:be:fd: d9:89:fd:10:03:f0:4b:e6:3a:54:ce:f2:e2:2d:ea: 17:9d:2f:fa:6e:f0:21:4b:9a:db:88:e0:f9:a5:59: 45:b1:90:3e:ce:bc:6f:6d:dc:c2:7b:81:26:ab:f8: 98:7a:52:18:fa:94:35:c8:94:34:37:c3:51:19:de: c2:7f:82:b8:38:32:30:92:66:2c:cc:e3:27:6b:76: ea:0e:62:8b:21:df:75:5f:ce:ca:a4:12:a3:f8:70: 11:5b:84:b6:dc:3b:e6:f2:ef:35:af:12:0d:78:93: 12:44:91:10:4e:ed:38:4b:fa:a9:ce:1c:74:11:28: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6C:65:D4:C7:1A:AD:BB:AC:BF:94:CD:64:83:EE:10:28:0F:FE:D2 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:66:00:59:cb:05:1c:54:46:7f:67:67:e2:fd:38:37:0b:25: f6:f2:aa:ed:e2:59:bf:02:84:be:ce:5d:ca:7d:fe:4d:5a:37: bd:0e:d9:13:2b:66:5c:2c:b8:70:95:f6:29:c9:62:cf:71:4a: 95:cf:f5:92:7b:81:e8:8c:af:67:29:cb:68:78:e8:58:0c:0a: 20:db:63:3f:95:97:c1:5a:85:00:2b:5c:7b:40:2f:f5:3d:c2: b1:98:c7:86:c3:10:aa:a2:b4:19:3f:18:74:29:1b:95:6e:92: 28:fe:38:d4:bd:cf:38:2b:d7:c1:e0:81:72:af:67:ef:8a:d0: ce:70:b7:67:22:13:2a:5b:3b:ea:3c:0c:f1:03:3b:4c:0c:9b: 37:f4:20:b2:5c:ed:e8:fb:37:d1:5c:ec:ec:e3:50:c8:41:60: 3b:40:bb:ce:5e:16:4d:5b:68:bb:63:c8:32:8c:34:91:7d:9d: 48:89:a5:f6:0a:41:4f:5a:53:08:e6:03:dd:10:ed:b6:43:34: 14:84:dc:e2:19:3f:7c:2c:e7:64:5a:0f:db:16:97:f0:fb:32: 18:cc:1c:1b:66:da:15:57:d6:25:21:93:55:77:a8:4a:58:77: 24:3d:2a:ff:38:f3:2c:78:8a:64:42:7a:57:a9:c8:c2:9d:8d: 09:33:b0:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA3MTkwNzAyMzFaFw0yNTA3MjYwNzAyMzFaMBgxFjAUBgNV BAMTDTY4N2I0MzA3LWVjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ghyKc/l6Yb4Rvx51f8Qng6CRaMQYutPzQDGtIsXwzBtE3S8i1RyR7hDz2ptN kn4Y0xdz1KA8urbthZExkzjtFfkaRodLI0nG0mPpE6N2Z3zg7FenzsGBrHZ1b+6x +WMY3fnfjLozDnqMadF/YzBvwLaT9REHUNgUOqupqqF7abaIphO+/dmJ/RAD8Evm OlTO8uIt6hedL/pu8CFLmtuI4PmlWUWxkD7OvG9t3MJ7gSar+Jh6Uhj6lDXIlDQ3 w1EZ3sJ/grg4MjCSZizM4ydrduoOYosh33VfzsqkEqP4cBFbhLbcO+by7zWvEg14 kxJEkRBO7ThL+qnOHHQRKHkTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp2xl1Mca rbusv5TNZIPuECgP/tIwHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9mAFnLBRxURn9nZ+L9ODcLJfbyqu3iWb8ChL7OXcp9/k1aN70O2RMr ZlwsuHCV9inJYs9xSpXP9ZJ7geiMr2cpy2h46FgMCiDbYz+Vl8FahQArXHtAL/U9 wrGYx4bDEKqitBk/GHQpG5Vukij+ONS9zzgr18HggXKvZ++K0M5wt2ciEypbO+o8 DPEDO0wMmzf0ILJc7ej7N9Fc7OzjUMhBYDtAu85eFk1baLtjyDKMNJF9nUiJpfYK QU9aUwjmA90Q7bZDNBSE3OIZP3ws52RaD9sWl/D7MhjMHBtm2hVX1iUhk1V3qEpY dyQ9Kv848yx4imRCelepyMKdjQkzsF8= -----END CERTIFICATE-----Generated at Sun Jul 20 20:42:18 2025 by rpki-client