$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: o9e6ljdz+s+U7rkC1tVywmm0ZXro12LBcqKoA/CXDPQ= Subject key identifier: 7E:E3:6E:D4:5B:85:FD:87:33:92:DE:13:F8:B9:6C:D7:CD:85:A5:47 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 043F Signing time: Thu 03 Jul 2025 00:37:58 +0000 Manifest this update: Thu 03 Jul 2025 00:37:57 +0000 Manifest next update: Thu 10 Jul 2025 00:37:57 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: /++tk25Cwmkkh/r5j+pteVMIEl3N5SSjdO75NC8k7EE=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Jul 3 00:37:57 2025 GMT Not After : Jul 10 00:37:57 2025 GMT Subject: CN=6865d0e5-bce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:54:1c:06:04:3b:4a:87:ec:6f:38:fe:ee: e5:0d:07:f2:35:6c:74:71:13:a6:c0:fb:f8:97:29: 52:15:9c:a9:b4:8a:bd:93:b5:fe:8b:e7:2d:94:62: cf:5c:6d:be:6f:8c:cb:e6:1f:4d:82:3f:00:7a:c7: 2e:00:bb:9c:ca:53:26:f0:ae:19:e3:a6:26:a6:1a: 56:42:03:de:85:18:fb:ba:47:61:15:b5:04:31:da: 45:36:b3:1c:1e:89:c9:f9:f9:fd:a8:f0:ab:a7:ab: 72:9d:64:44:26:0e:0c:ef:d1:2e:f2:35:fb:16:ad: 16:79:90:d2:90:1b:8c:5c:3d:34:f0:20:90:a9:eb: c3:36:0d:2d:d1:d4:d3:68:7a:6a:0d:a3:d5:b1:22: 5a:46:ec:ae:99:af:c2:b4:8e:97:3a:5a:1a:b1:55: 26:2b:b5:dc:c4:0d:97:f6:69:6f:f4:27:6e:f6:46: 89:61:73:51:62:ca:38:68:33:20:22:61:52:0d:89: 9c:f1:28:cc:b6:6b:d6:83:1b:da:07:1b:bd:0e:11: f0:aa:a8:50:79:af:c5:0e:73:74:e7:38:29:f4:0a: f1:d1:10:ec:45:b0:3e:cd:62:bf:77:fa:8b:62:91: 43:c6:3a:c4:23:2f:a0:be:63:1c:13:12:4e:43:da: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:6E:D4:5B:85:FD:87:33:92:DE:13:F8:B9:6C:D7:CD:85:A5:47 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9d:c7:1e:21:dc:d6:5e:f0:55:45:24:43:47:f6:20:dc:d0: 4c:ce:11:0f:27:2b:68:57:be:5e:a9:0e:d1:7b:bf:f3:eb:9a: f1:15:36:db:c2:89:d3:e1:b5:7d:00:72:09:95:a6:01:e9:1b: 9a:0c:fb:17:7c:2a:4f:51:5b:a9:64:0e:e1:f3:e1:d1:0e:72: cd:06:a4:d2:8b:a6:1c:34:ca:ad:61:9f:df:60:31:41:fd:6d: e3:57:00:06:43:20:17:1d:de:c3:14:56:dd:b7:58:20:9d:71: 68:6a:63:80:dd:2b:ec:50:64:a1:df:c6:25:09:80:46:c5:8a: b2:6e:a2:07:8c:af:ee:96:8d:ee:4a:9b:08:ea:d2:cb:3c:28: 3d:15:0f:2d:4d:35:1e:67:bb:3f:08:b2:90:cc:ef:cd:75:c1: c9:fd:09:53:e4:37:11:5d:31:18:66:af:db:76:00:2c:d7:88: b3:bc:d9:29:0e:da:64:3b:1c:85:f4:df:80:9b:11:d7:62:bf: b0:2e:ef:73:3c:9f:2f:ee:25:6b:c9:f9:7e:96:45:43:31:0c: 6b:b3:b4:4b:ef:92:6c:d9:b3:0b:02:bd:40:fe:93:27:60:c3: f3:a4:5d:55:2a:4a:7c:c6:11:2f:c7:2f:49:3d:77:98:6b:6c: bf:0d:e3:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjUwNzAzMDAzNzU3WhcNMjUwNzEwMDAzNzU3WjAYMRYwFAYD VQQDEw02ODY1ZDBlNS1iY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOdUHAYEO0qH7G84/u7lDQfyNWx0cROmwPv4lylSFZyptIq9k7X+i+ctlGLP XG2+b4zL5h9Ngj8AescuALucylMm8K4Z46YmphpWQgPehRj7ukdhFbUEMdpFNrMc HonJ+fn9qPCrp6tynWREJg4M79Eu8jX7Fq0WeZDSkBuMXD008CCQqevDNg0t0dTT aHpqDaPVsSJaRuyuma/CtI6XOloasVUmK7XcxA2X9mlv9Cdu9kaJYXNRYso4aDMg ImFSDYmc8SjMtmvWgxvaBxu9DhHwqqhQea/FDnN05zgp9Arx0RDsRbA+zWK/d/qL YpFDxjrEIy+gvmMcExJOQ9pcFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7jbtRb hf2HM5LeE/i5bNfNhaVHMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ncceIdzWXvBVRSRDR/Yg3NBMzhEPJytoV75eqQ7Re7/z65rxFTbb wonT4bV9AHIJlaYB6RuaDPsXfCpPUVupZA7h8+HRDnLNBqTSi6YcNMqtYZ/fYDFB /W3jVwAGQyAXHd7DFFbdt1ggnXFoamOA3SvsUGSh38YlCYBGxYqybqIHjK/ulo3u SpsI6tLLPCg9FQ8tTTUeZ7s/CLKQzO/NdcHJ/QlT5DcRXTEYZq/bdgAs14izvNkp DtpkOxyF9N+AmxHXYr+wLu9zPJ8v7iVryfl+lkVDMQxrs7RL75Js2bMLAr1A/pMn YMPzpF1VKkp8xhEvxy9JPXeYa2y/DeMy -----END CERTIFICATE-----Generated at Thu Jul 3 14:51:48 2025 by rpki-client