$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: PkGxnI9hLkOK1e0hjUZ5VPHqqo1xY7hRuOLhkdwLQpU= Subject key identifier: E5:DB:F4:50:89:FB:A1:5A:C5:49:EF:DC:97:A6:7D:D1:49:53:2E:3E Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: C1 Signing time: Thu 05 Jun 2025 05:17:27 +0000 Manifest this update: Thu 05 Jun 2025 05:17:26 +0000 Manifest next update: Thu 12 Jun 2025 05:17:26 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: j0b/We2/41gQiGfXRm+zeMlT9IO+in88V7aMxObqIU8=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: rqaw6gYQFHtDXhAs9qwdnQlxs87gmG1kJR92kC6fKaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Jun 5 05:17:26 2025 GMT Not After : Jun 12 05:17:26 2025 GMT Subject: CN=68412866-f8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:eb:61:36:02:10:a8:fb:c2:f2:8c:e9:cd: 2c:34:4a:c4:ab:81:2f:6f:2a:c2:ac:30:8f:be:2f: 7d:ab:ef:b9:8a:8b:e4:0d:a4:ce:d2:4a:5b:69:a7: e7:1a:1d:50:d3:8b:46:58:6d:19:18:e4:05:95:fd: 37:00:d7:9d:a9:e9:45:a3:81:7e:4d:5a:23:5d:1a: 3d:76:b8:d0:9b:31:78:30:8a:e6:e8:8f:7f:d1:ab: ae:84:ab:8a:36:8a:77:b2:e0:36:96:4b:83:c3:5a: a4:80:6a:8f:b2:86:ef:a8:1a:8c:7e:2a:35:da:b0: c3:79:21:77:20:ed:79:ca:9b:8c:12:5c:12:09:16: d3:f5:0d:35:c6:24:d3:02:e6:8d:88:b6:1b:e0:6f: aa:df:7f:df:e9:27:72:b8:05:55:63:8d:df:21:cb: 24:16:2b:cb:34:f7:1a:9c:37:d3:22:72:56:af:00: a2:22:a2:96:d1:28:2c:73:c6:10:5c:2e:da:cc:b4: 52:a0:d9:f9:08:6f:00:bc:a4:4a:d8:92:d4:c2:76: ee:25:03:6b:04:cb:54:6e:79:ba:fc:e2:b8:c6:00: 1a:91:e1:84:75:3b:08:88:e9:5c:b9:ae:c7:5a:e6: 23:76:d6:e8:55:35:0a:85:1b:a5:c4:65:5f:b5:bf: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:F4:50:89:FB:A1:5A:C5:49:EF:DC:97:A6:7D:D1:49:53:2E:3E X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c1:58:ed:cf:16:31:e1:ac:0e:6a:aa:bf:1c:00:f7:46:f1: a7:45:53:1d:76:91:dd:57:ef:87:95:5a:9b:48:57:02:3f:02: bb:3d:46:25:2d:cd:bc:b8:82:ed:61:14:15:55:05:46:12:24: 9f:8e:7c:fe:fb:60:ab:9d:33:36:11:80:ba:56:29:d6:c0:be: 6b:08:9a:9e:55:71:b6:77:32:e5:0c:77:00:2c:4a:0a:01:e3: 72:d1:30:21:73:fd:92:31:41:fb:e2:19:29:de:e2:2d:92:ec: 9f:15:02:23:37:3e:ea:c0:35:c0:48:8b:86:d2:89:df:35:54: 59:61:5e:6c:95:f4:57:35:72:7c:87:cf:e9:6f:5d:fe:32:73: b7:dd:e5:5f:e7:ab:bc:e6:f8:e9:d0:50:99:07:24:07:d2:60: 95:36:d2:02:eb:b0:63:52:a5:a0:9c:8c:0c:41:fe:e2:24:21: f0:75:f4:62:e6:5c:42:3f:a5:e2:4c:b8:d4:cb:f5:f3:fc:f4: da:9e:c8:7b:12:7a:4e:94:d2:cb:33:77:dd:22:fc:26:67:c1: b3:e6:2f:cd:dc:80:a3:1e:6e:86:74:1b:da:11:38:63:34:32: da:7a:b3:d6:a6:8e:c7:02:73:06:56:ee:42:b2:9b:b3:4a:22: 8c:de:63:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUwNjA1MDUxNzI2WhcNMjUwNjEyMDUxNzI2WjAYMRYwFAYD VQQDEw02ODQxMjg2Ni1mOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e7rYTYCEKj7wvKM6c0sNErEq4EvbyrCrDCPvi99q++5iovkDaTO0kpbaafn Gh1Q04tGWG0ZGOQFlf03ANedqelFo4F+TVojXRo9drjQmzF4MIrm6I9/0auuhKuK Nop3suA2lkuDw1qkgGqPsobvqBqMfio12rDDeSF3IO15ypuMElwSCRbT9Q01xiTT AuaNiLYb4G+q33/f6SdyuAVVY43fIcskFivLNPcanDfTInJWrwCiIqKW0Sgsc8YQ XC7azLRSoNn5CG8AvKRK2JLUwnbuJQNrBMtUbnm6/OK4xgAakeGEdTsIiOlcua7H WuYjdtboVTUKhRulxGVftb+SzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXb9FCJ +6FaxUnv3JemfdFJUy4+MB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5wVjtzxYx4awOaqq/HAD3RvGnRVMddpHdV++HlVqbSFcCPwK7PUYl Lc28uILtYRQVVQVGEiSfjnz++2CrnTM2EYC6VinWwL5rCJqeVXG2dzLlDHcALEoK AeNy0TAhc/2SMUH74hkp3uItkuyfFQIjNz7qwDXASIuG0onfNVRZYV5slfRXNXJ8 h8/pb13+MnO33eVf56u85vjp0FCZByQH0mCVNtIC67BjUqWgnIwMQf7iJCHwdfRi 5lxCP6XiTLjUy/Xz/PTansh7EnpOlNLLM3fdIvwmZ8Gz5i/N3ICjHm6GdBvaEThj NDLaerPWpo7HAnMGVu5CspuzSiKM3mMs -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:51 2025 by rpki-client