$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: mnBe4wp7ioG+HbUCtEjYTiHFTTU+BpfNJ0Tp0DGxuPE= Subject key identifier: 03:82:87:F4:32:BD:71:7F:AA:18:AB:64:ED:03:9A:50:92:B7:E3:04 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 0157 Signing time: Tue 01 Jul 2025 04:32:08 +0000 Manifest this update: Tue 01 Jul 2025 04:32:08 +0000 Manifest next update: Tue 08 Jul 2025 04:32:08 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: 6CKfUGI26zcqTW9pQ0lkS9w7gp28pkJli7mPtUxN8QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Jul 1 04:32:08 2025 GMT Not After : Jul 8 04:32:08 2025 GMT Subject: CN=686364c8-c3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:76:2c:b8:1d:e3:8c:87:6e:c6:19:71:14: 16:4d:71:e6:be:42:f6:04:88:c1:d3:78:2e:c3:be: db:ad:f1:27:7a:8f:12:93:80:d3:a5:a1:81:30:62: e3:6b:b4:58:5f:4d:63:cc:49:5e:bb:77:5e:47:de: 4d:a0:07:6f:8f:02:71:47:00:03:49:79:0c:fc:be: 87:7d:e6:c8:b6:41:65:26:f3:28:9b:c8:31:88:19: fa:43:23:e1:8f:d0:97:85:4c:68:04:17:a1:48:16: bd:4e:e9:e0:0a:c9:19:3c:d0:ba:b5:6d:d5:a4:e1: e6:ca:f6:d2:df:6a:2a:4c:ae:bd:7d:15:d2:2b:02: 54:0b:7a:0c:85:f9:b2:a7:9c:38:68:bc:4b:c3:39: 6a:20:7c:f2:f5:b8:82:b0:a0:51:4a:e6:ef:6e:fd: a5:c3:b8:bb:ca:56:74:4a:5d:8c:96:36:f5:bc:ea: 74:27:bf:7d:e7:ee:f5:b2:0c:bf:88:13:5a:0e:35: 0f:c2:16:7a:97:5a:6f:b6:ba:63:3f:18:5f:83:95: 45:62:87:c7:61:fa:12:24:8e:a7:8f:2a:bc:5a:0e: 1f:5e:10:72:d5:af:57:79:15:0c:c6:77:3f:21:d1: 8d:77:69:02:e6:7b:5a:d6:2a:63:62:9f:da:a0:72: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:82:87:F4:32:BD:71:7F:AA:18:AB:64:ED:03:9A:50:92:B7:E3:04 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:12:18:19:74:2a:2d:a7:7f:20:11:fc:96:ff:5f:57:63:e9: f0:8e:9a:71:4e:3d:2e:66:b7:d8:54:33:57:ce:ed:b3:ee:7a: 4d:74:f1:ff:ed:6b:7a:21:2c:d9:3c:bf:fe:1d:89:cc:63:36: fb:e6:32:de:2c:b1:1c:cb:3a:72:c8:01:0c:cb:48:e1:83:69: 9f:d1:46:09:19:a6:c0:50:33:9b:0b:52:b9:eb:dd:82:fe:37: 8b:d9:5c:9c:fc:96:cd:05:4c:57:7d:d0:99:ff:dd:ff:07:91: e2:fb:51:4e:08:6b:84:73:2a:61:36:57:64:c3:89:88:e6:33: 8f:c6:4f:04:cf:68:82:bc:31:70:43:59:92:b6:a9:08:20:08: cf:c5:c0:c7:74:02:4f:09:1e:b0:6b:3d:5b:e6:39:3b:e4:25: d9:28:31:3f:53:b0:c0:ae:92:3e:a6:4b:09:6b:1f:fc:4c:9b: 1b:39:10:ea:3d:56:53:77:7b:9e:05:ed:f7:1e:5c:f1:f6:ae: 3b:b2:11:46:c8:0c:a1:a0:16:0a:03:b1:90:a1:8c:cd:3b:49: e1:a0:f8:f9:25:d2:5c:f7:ba:cd:d3:95:fb:2b:6d:34:8a:b3: ac:85:ed:0a:64:82:02:90:60:79:7d:6b:ec:2f:8f:04:92:c7: 05:1f:70:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUwNzAxMDQzMjA4WhcNMjUwNzA4MDQzMjA4WjAYMRYwFAYD VQQDEw02ODYzNjRjOC1jM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Z2LLgd44yHbsYZcRQWTXHmvkL2BIjB03guw77brfEneo8Sk4DTpaGBMGLj a7RYX01jzEleu3deR95NoAdvjwJxRwADSXkM/L6HfebItkFlJvMom8gxiBn6QyPh j9CXhUxoBBehSBa9TungCskZPNC6tW3VpOHmyvbS32oqTK69fRXSKwJUC3oMhfmy p5w4aLxLwzlqIHzy9biCsKBRSubvbv2lw7i7ylZ0Sl2Mljb1vOp0J7995+71sgy/ iBNaDjUPwhZ6l1pvtrpjPxhfg5VFYofHYfoSJI6njyq8Wg4fXhBy1a9XeRUMxnc/ IdGNd2kC5nta1ipjYp/aoHJA/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOCh/Qy vXF/qhirZO0DmlCSt+MEMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADEhgZdCotp38gEfyW/19XY+nwjppxTj0uZrfYVDNXzu2z7npNdPH/ 7Wt6ISzZPL/+HYnMYzb75jLeLLEcyzpyyAEMy0jhg2mf0UYJGabAUDObC1K5692C /jeL2Vyc/JbNBUxXfdCZ/93/B5Hi+1FOCGuEcyphNldkw4mI5jOPxk8Ez2iCvDFw Q1mStqkIIAjPxcDHdAJPCR6waz1b5jk75CXZKDE/U7DArpI+pksJax/8TJsbORDq PVZTd3ueBe33Hlzx9q47shFGyAyhoBYKA7GQoYzNO0nhoPj5JdJc97rN05X7K200 irOshe0KZIICkGB5fWvsL48EkscFH3Du -----END CERTIFICATE-----Generated at Tue Jul 1 19:53:30 2025 by rpki-client