$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: dXEc3bVF6WL/vTbYpMIYGGhf/famKZFcDyP8Nl3+BZY= Subject key identifier: 0F:11:A5:AE:EF:FC:EC:51:40:7E:F3:EF:27:E8:A1:C5:13:31:2A:62 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 012F Signing time: Tue 01 Jul 2025 05:00:39 +0000 Manifest this update: Tue 01 Jul 2025 05:00:38 +0000 Manifest next update: Tue 08 Jul 2025 05:00:38 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: +/tAsnOBSMBc5PgTnhudiEJcHkudB0bi0XpaulF3Mwc=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Jul 1 05:00:38 2025 GMT Not After : Jul 8 05:00:38 2025 GMT Subject: CN=68636b76-57a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:29:39:76:50:bb:be:9a:88:4a:f2:16:04: 4c:4b:cb:20:7b:66:8a:ca:e5:c6:01:fe:ce:76:8b: c7:1e:7f:80:6c:6e:ab:fc:87:82:d0:71:4b:6b:b8: d8:fa:55:d4:be:b1:eb:08:f8:75:20:e0:e8:db:ee: a2:ab:86:80:cb:8a:bd:ea:15:94:99:46:e1:37:3b: 1d:7f:cc:13:ad:aa:50:d1:08:56:55:a5:63:bf:78: 34:7f:6d:07:32:d0:c1:0f:70:00:f3:df:22:ad:80: 86:d1:f8:42:33:9c:6d:f5:ea:ee:ab:d9:ab:81:f6: a3:2e:32:95:23:70:cc:01:08:af:0a:6f:7e:17:9a: d7:b2:7d:51:db:2c:c3:2d:a8:05:2f:8b:bd:31:54: 1e:8c:21:e6:6a:62:12:22:f1:02:dd:bc:90:b3:94: e2:2e:04:48:27:1f:10:b2:ef:09:0b:80:eb:24:e0: d7:e4:a9:5f:c1:84:69:5e:b4:f3:6e:31:54:da:fe: 26:71:08:77:e7:e0:bc:68:21:3c:06:ef:81:22:5d: e5:9a:00:9f:d4:5e:59:0c:c2:c9:54:66:42:73:85: 3c:9d:f2:5a:b6:42:e5:63:0b:75:cc:74:5e:81:31: 1c:36:87:5b:0c:c0:a2:e4:d0:80:8b:84:4d:14:13: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:11:A5:AE:EF:FC:EC:51:40:7E:F3:EF:27:E8:A1:C5:13:31:2A:62 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:84:ca:73:fb:e7:53:30:23:43:5d:23:1f:f7:df:5b:d7:f9: 78:0a:f9:e8:ae:08:11:b2:8b:30:dd:62:1d:3b:ec:3a:d8:d2: 01:15:e8:3f:70:de:59:29:41:86:a2:7b:7f:00:8c:5c:c8:67: 65:83:5e:85:ed:b2:0f:79:e9:fa:58:6e:e8:6e:87:00:03:48: 65:05:20:4d:e9:f2:e1:30:0a:a0:bd:e7:31:82:fe:2e:97:d2: 74:d5:10:01:2d:9d:b5:d6:47:6d:db:41:12:04:18:4a:d2:84: a8:7f:42:9b:fd:ff:25:df:76:a7:1c:25:3d:2d:12:62:fc:c8: 41:f4:a2:89:20:d6:36:d3:a8:a3:9d:c9:96:de:07:2c:78:16: 91:76:3f:bc:03:62:49:36:31:85:79:42:ea:55:0b:a2:26:a1: f8:25:a4:17:b5:30:87:6b:f1:a2:0a:10:53:cb:cd:7e:b7:81: 6c:af:7e:1a:ba:0e:bb:79:b3:84:cd:a5:0e:9c:e1:a8:ce:74: 72:7e:5a:11:54:35:73:be:39:78:48:61:ee:d6:67:5e:ad:4d: 0c:ae:2f:a3:fc:4a:7a:d5:7a:82:dc:e2:4e:2e:7b:41:45:e8: 9d:5a:27:e5:16:08:80:ff:e8:c2:22:7d:67:a6:db:ed:d7:bf: e2:a1:3b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwNzAxMDUwMDM4WhcNMjUwNzA4MDUwMDM4WjAYMRYwFAYD VQQDEw02ODYzNmI3Ni01N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/YpOXZQu76aiEryFgRMS8sge2aKyuXGAf7OdovHHn+AbG6r/IeC0HFLa7jY +lXUvrHrCPh1IODo2+6iq4aAy4q96hWUmUbhNzsdf8wTrapQ0QhWVaVjv3g0f20H MtDBD3AA898irYCG0fhCM5xt9eruq9mrgfajLjKVI3DMAQivCm9+F5rXsn1R2yzD LagFL4u9MVQejCHmamISIvEC3byQs5TiLgRIJx8Qsu8JC4DrJODX5KlfwYRpXrTz bjFU2v4mcQh35+C8aCE8Bu+BIl3lmgCf1F5ZDMLJVGZCc4U8nfJatkLlYwt1zHRe gTEcNodbDMCi5NCAi4RNFBOcZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8Rpa7v /OxRQH7z7yfoocUTMSpiMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBohMpz++dTMCNDXSMf999b1/l4CvnorggRsosw3WIdO+w62NIBFeg/ cN5ZKUGGont/AIxcyGdlg16F7bIPeen6WG7obocAA0hlBSBN6fLhMAqgvecxgv4u l9J01RABLZ211kdt20ESBBhK0oSof0Kb/f8l33anHCU9LRJi/MhB9KKJINY206ij ncmW3gcseBaRdj+8A2JJNjGFeULqVQuiJqH4JaQXtTCHa/GiChBTy81+t4Fsr34a ug67ebOEzaUOnOGoznRyfloRVDVzvjl4SGHu1mderU0Mri+j/Ep61XqC3OJOLntB ReidWiflFgiA/+jCIn1nptvt17/ioTsr -----END CERTIFICATE-----Generated at Wed Jul 2 16:29:03 2025 by rpki-client