$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft File: F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json) Hash identifier: W0wYoqX1420mG3UO7jU8sK5PxKgVqHdVaEmH32KkIZc= Subject key identifier: DD:8E:E7:68:18:94:A0:7A:17:06:49:80:FB:32:CE:7E:ED:EE:C2:4F Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA Certificate issuer: /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft Manifest number: CA Signing time: Sat 05 Jul 2025 05:58:45 +0000 Manifest this update: Sat 05 Jul 2025 05:58:45 +0000 Manifest next update: Sat 12 Jul 2025 05:58:45 +0000 Files and hashes: 1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: 0idd4yXbIxrFDS+Ude8HixLcvrgjgm8n52d6s2QkB/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Validity Not Before: Jul 5 05:58:45 2025 GMT Not After : Jul 12 05:58:45 2025 GMT Subject: CN=6868bf15-01c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:d0:d5:e9:58:5b:8a:b7:35:37:ba:6b:42: 9c:d4:7c:3b:11:56:61:61:39:93:0f:93:66:1b:05: 78:55:de:96:08:89:11:51:9a:ef:7d:aa:49:2c:ff: 02:ee:8c:71:70:8a:5b:e7:41:49:d7:78:05:18:d1: a3:14:92:5a:59:12:ec:b0:87:46:00:49:84:31:0c: 10:81:2c:57:01:38:3b:7b:79:a0:54:59:9b:d3:d8: 12:0b:f8:07:4e:62:2b:2e:f6:81:35:62:a9:de:3c: 1d:f8:61:f5:a7:c2:1d:d8:e8:a0:e8:cd:34:11:a8: ed:77:a8:07:3b:32:44:02:7a:66:59:d6:58:1c:6a: ec:16:6a:d8:70:30:4a:31:86:a9:a1:23:f9:ac:e2: 3d:ce:7d:b0:2a:c7:ad:fe:41:f3:86:c8:49:6d:61: c4:ab:50:0c:81:e4:a5:08:a3:26:c6:1c:a6:3a:fb: fa:61:c5:7f:69:f2:3b:8c:cd:f7:40:99:36:55:4c: 3b:90:5c:4d:0e:29:16:e9:4d:c2:b5:45:4e:0f:8c: 8e:7e:7a:d7:fb:f4:5b:a5:2b:eb:9b:a8:2a:dd:d0: 72:ab:03:8f:8f:8c:4b:d6:04:12:0e:09:44:39:14: 7a:f6:36:b8:da:1d:a7:25:d7:38:70:7b:0d:66:a8: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8E:E7:68:18:94:A0:7A:17:06:49:80:FB:32:CE:7E:ED:EE:C2:4F X509v3 Authority Key Identifier: keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a3:c8:0b:bd:2f:37:81:f7:12:12:0a:7c:47:75:33:18:d6: e2:cc:da:6c:68:63:6c:69:13:a9:f6:32:cd:12:d7:a7:b3:d6: cb:eb:7b:a5:46:c1:30:61:93:a7:42:88:3d:bd:3e:e6:7a:c0: 04:98:cc:9f:36:8d:1a:d4:bf:13:ef:b4:41:83:1c:1b:cc:ee: 2e:15:95:eb:78:e0:25:7d:17:7c:df:00:95:32:d3:ec:23:ef: 5c:17:f5:d0:a9:bb:b4:c8:f1:12:0b:fc:17:d0:4c:1a:97:a1: 34:5d:ce:5e:c3:0d:f1:95:47:7c:99:da:3a:ad:f5:c0:eb:0f: 2a:2c:cb:f8:25:57:05:56:c1:a3:ff:2d:4e:26:05:4a:9d:ea: 95:3c:68:9f:69:ea:5e:dc:61:4b:be:c3:6a:9e:19:68:ca:36: a9:b9:41:7a:fe:b6:9b:e6:29:27:9b:7a:a3:a7:f2:0a:06:72: 0a:71:fd:c6:38:72:cc:5a:f0:cf:71:bf:dd:7f:8a:5e:13:d7: 86:96:cf:7c:61:77:66:1b:e5:fd:8b:b1:dd:5e:ee:b5:07:5d: b2:ec:37:d9:30:8b:e2:2a:44:6c:99:51:fa:46:ae:08:1f:dd: 96:16:c4:ba:aa:ab:ea:aa:99:9f:5b:6b:6e:32:90:5a:22:ad: ab:6c:8f:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDE3RTk0MUFGOUVGQkI1MTVEN0MyNEI0MThFNjlGOTg2 N0M3QTE0Q0EwHhcNMjUwNzA1MDU1ODQ1WhcNMjUwNzEyMDU1ODQ1WjAYMRYwFAYD VQQDEw02ODY4YmYxNS0wMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYvQ1elYW4q3NTe6a0Kc1Hw7EVZhYTmTD5NmGwV4Vd6WCIkRUZrvfapJLP8C 7oxxcIpb50FJ13gFGNGjFJJaWRLssIdGAEmEMQwQgSxXATg7e3mgVFmb09gSC/gH TmIrLvaBNWKp3jwd+GH1p8Id2Oig6M00Eajtd6gHOzJEAnpmWdZYHGrsFmrYcDBK MYapoSP5rOI9zn2wKset/kHzhshJbWHEq1AMgeSlCKMmxhymOvv6YcV/afI7jM33 QJk2VUw7kFxNDikW6U3CtUVOD4yOfnrX+/RbpSvrm6gq3dByqwOPj4xL1gQSDglE ORR69ja42h2nJdc4cHsNZqgDwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2O52gY lKB6FwZJgPsyzn7t7sJPMB8GA1UdIwQYMBaAFBfpQa+e+7UV18JLQY5p+YZ8ehTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GQ0Y2NDc0MDIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9GLWxCcjU3N3RSWFh3a3RCam1uNWhueDZG TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YtbEJyNTc3dFJYWHdrdEJqbW41aG54NkZNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTAyMy9GQ0Y2NDc0MDIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9GLWxCcjU3N3RS WFh3a3RCam1uNWhueDZGTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHo8gLvS83gfcSEgp8R3UzGNbizNpsaGNsaROp9jLNEtens9bL63ul RsEwYZOnQog9vT7mesAEmMyfNo0a1L8T77RBgxwbzO4uFZXreOAlfRd83wCVMtPs I+9cF/XQqbu0yPESC/wX0Ewal6E0Xc5eww3xlUd8mdo6rfXA6w8qLMv4JVcFVsGj /y1OJgVKneqVPGifaepe3GFLvsNqnhloyjapuUF6/rab5iknm3qjp/IKBnIKcf3G OHLMWvDPcb/df4peE9eGls98YXdmG+X9i7HdXu61B12y7DfZMIviKkRsmVH6Rq4I H92WFsS6qqvqqpmfW2tuMpBaIq2rbI9C -----END CERTIFICATE-----Generated at Sat Jul 5 22:24:19 2025 by rpki-client