$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: GzZTBZd/kqgrCfH9o7JAsvhZIekRVe/FacmMK2tnSqQ= Subject key identifier: 59:B1:70:5B:34:5B:59:2F:2D:FE:42:D8:F8:08:81:F3:22:6F:63:4A Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 0791 Signing time: Sat 28 Jun 2025 21:07:19 +0000 Manifest this update: Sat 28 Jun 2025 21:07:18 +0000 Manifest next update: Sat 05 Jul 2025 21:07:18 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: SV8LHf+n2wc06t+QRywhE/9q2DGf8sZTkfuGLiCn7Nk=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Jun 28 21:07:18 2025 GMT Not After : Jul 5 21:07:18 2025 GMT Subject: CN=68605987-0a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:1a:2a:e0:e7:31:06:bc:81:ae:1a:27:3a: b1:fc:f3:24:a3:6b:77:2a:50:69:20:fe:7c:aa:b5: c2:b9:a1:ab:5a:8b:22:8a:85:de:97:b8:e1:5c:78: bb:2c:20:89:77:2c:eb:8d:cc:be:3d:3f:f4:c4:4f: 72:0f:32:00:dd:a3:53:c7:4e:17:f1:66:12:22:8b: b5:21:79:69:a0:de:47:2f:03:85:c5:e9:ee:51:7e: 3f:fa:1d:0c:0b:6e:46:07:42:2b:81:13:50:9f:67: 65:fa:c0:23:7a:85:ef:1b:53:aa:4b:be:70:c1:d0: a7:5e:45:7f:e6:24:d7:90:66:c0:8d:27:2b:5d:d5: 69:69:0b:26:28:6e:77:a0:85:5b:e3:67:b1:13:ee: 73:71:d4:f2:4a:06:15:09:c6:ea:95:0a:ce:a3:1a: d7:17:fd:35:7b:58:6a:4f:81:b5:61:f4:55:04:cb: 96:9c:7b:89:18:45:08:51:bf:83:e8:bf:43:b9:8f: 28:d8:9b:78:64:87:5f:4f:51:94:b0:42:b6:55:c1: d3:77:44:b0:89:db:e4:74:22:fa:8c:67:14:41:2d: 1d:4d:85:c6:87:95:30:c9:11:f8:13:04:cf:8c:91: 8a:09:28:4d:92:e8:24:84:bb:d6:3f:14:39:85:03: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:70:5B:34:5B:59:2F:2D:FE:42:D8:F8:08:81:F3:22:6F:63:4A X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a7:3e:6d:b3:7c:8c:6b:d1:f4:fe:e6:39:3f:cb:7f:ff:b3: ea:7e:01:84:d2:2d:d8:6b:c9:c9:5c:f8:0c:73:af:10:13:6b: 82:37:a7:0d:3c:8b:48:f4:36:11:60:61:2f:ad:b5:c0:7d:ab: ec:7f:9e:5a:7c:e6:68:cd:ee:e9:87:d2:64:52:15:6c:4b:0f: de:50:ea:70:04:b6:31:9f:e3:56:b3:50:60:fb:79:8e:4e:e1: 41:33:ba:be:48:03:0c:d9:b5:76:6b:4f:a8:84:d2:5e:b4:97: 72:6a:05:ba:be:c7:82:a4:f3:9d:c9:4a:5e:a4:88:33:f4:14: 2b:bc:8f:f3:c7:88:f2:06:87:89:5a:18:d7:cf:e7:35:07:31: 5e:00:97:71:3e:e8:f7:8c:4b:60:17:d5:3a:c1:30:12:16:69: cf:0a:c9:2a:e7:ac:a1:74:2b:4f:ed:5c:d8:e5:04:4b:0d:f2: 80:29:7a:cb:e7:05:71:f0:3c:e3:43:58:91:85:e7:a6:e3:ab: fa:c3:cf:5f:b7:a9:2f:0e:bd:67:6a:5e:63:00:a3:c1:39:d3: 2c:5f:3b:3b:6e:ad:74:07:b5:66:89:ff:54:21:0f:ae:89:5b: ea:94:ec:03:85:31:fd:fb:69:de:08:41:00:8c:22:73:ce:e5: b1:43:c8:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwNjI4MjEwNzE4WhcNMjUwNzA1MjEwNzE4WjAYMRYwFAYD VQQDEw02ODYwNTk4Ny0wYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXQaKuDnMQa8ga4aJzqx/PMko2t3KlBpIP58qrXCuaGrWosiioXel7jhXHi7 LCCJdyzrjcy+PT/0xE9yDzIA3aNTx04X8WYSIou1IXlpoN5HLwOFxenuUX4/+h0M C25GB0IrgRNQn2dl+sAjeoXvG1OqS75wwdCnXkV/5iTXkGbAjScrXdVpaQsmKG53 oIVb42exE+5zcdTySgYVCcbqlQrOoxrXF/01e1hqT4G1YfRVBMuWnHuJGEUIUb+D 6L9DuY8o2Jt4ZIdfT1GUsEK2VcHTd0SwidvkdCL6jGcUQS0dTYXGh5UwyRH4EwTP jJGKCShNkugkhLvWPxQ5hQMgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmxcFs0 W1kvLf5C2PgIgfMib2NKMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArpz5ts3yMa9H0/uY5P8t//7PqfgGE0i3Ya8nJXPgMc68QE2uCN6cN PItI9DYRYGEvrbXAfavsf55afOZoze7ph9JkUhVsSw/eUOpwBLYxn+NWs1Bg+3mO TuFBM7q+SAMM2bV2a0+ohNJetJdyagW6vseCpPOdyUpepIgz9BQrvI/zx4jyBoeJ WhjXz+c1BzFeAJdxPuj3jEtgF9U6wTASFmnPCskq56yhdCtP7VzY5QRLDfKAKXrL 5wVx8DzjQ1iRheem46v6w89ft6kvDr1nal5jAKPBOdMsXzs7bq10B7Vmif9UIQ+u iVvqlOwDhTH9+2neCEEAjCJzzuWxQ8g2 -----END CERTIFICATE-----Generated at Mon Jun 30 00:26:39 2025 by rpki-client