$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: IrqH+y1ompE3AYVARLT3+B3DEPoPdpFQ3kLN7RUMt+Y= Subject key identifier: 62:00:5F:58:C7:64:5A:93:A3:F9:72:63:1A:E8:A3:A4:83:CC:6E:BA Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0AC4 Signing time: Mon 30 Jun 2025 19:37:29 +0000 Manifest this update: Mon 30 Jun 2025 19:37:29 +0000 Manifest next update: Mon 07 Jul 2025 19:37:29 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: /h44seNg7g3SD/imajov0I83dggFZsA4ngzHpl0ja5s=) 2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: ip0tFLU4ZQT3pfoDMLAgucX2vvcCHaknK3+b2q4VRsQ=) 3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=) 4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=) 5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Jun 30 19:37:29 2025 GMT Not After : Jul 7 19:37:29 2025 GMT Subject: CN=6862e779-7db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:fd:ef:15:dd:64:ac:1d:f6:af:50:ee:3b: 05:61:1c:38:9d:bf:79:59:4d:ae:6e:37:50:2c:5a: 80:95:8b:17:18:95:16:86:b2:e5:a8:35:91:1e:c5: 8e:7c:d4:d7:27:e0:8c:87:84:00:b9:d9:40:f5:c7: 46:d9:77:1d:b8:c3:85:b0:00:e7:7c:9a:af:ff:63: 22:23:49:04:65:2a:c0:cc:96:04:d7:9d:33:8d:a7: ea:e0:d2:92:69:3d:7f:9e:24:cc:df:62:38:aa:2c: 56:a4:9a:b8:3a:d4:d6:80:12:1e:91:eb:5c:4e:d5: bf:55:03:00:58:7e:c2:35:24:93:69:37:5f:a7:2d: 50:ab:e1:f6:f0:f5:66:93:ac:7f:43:8e:30:7f:59: 52:8c:be:4f:6b:b2:bc:60:c8:0b:dc:c5:57:70:4f: 0d:dd:f1:94:45:ec:24:88:33:d2:99:2b:0d:ae:f9: b8:1a:f6:87:21:78:23:45:49:3f:95:84:1a:ea:6e: 38:85:32:31:ae:c4:b4:8c:1a:99:3b:9b:9f:93:91: d1:c9:13:a1:bc:74:bd:8a:ad:99:d1:f0:fa:c8:e8: 4f:73:59:b7:69:52:44:af:e2:e7:8c:4b:04:b2:eb: d6:90:0d:be:76:ef:64:75:7f:3b:f9:a0:05:13:bb: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:00:5F:58:C7:64:5A:93:A3:F9:72:63:1A:E8:A3:A4:83:CC:6E:BA X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:33:8d:77:a2:7c:a8:17:18:f8:9d:24:a1:f1:0d:27:e6: a9:fa:ee:29:db:fd:6a:73:e1:31:8a:80:17:d9:d2:83:a4:05: ed:b4:c9:17:e6:92:ac:57:e4:57:53:8d:0e:5e:e1:6f:47:60: 9e:fa:08:ad:c3:47:5d:11:ad:e0:74:e1:70:ea:71:fe:5e:1e: 91:e7:70:5c:6d:ca:bc:1c:30:f9:83:e8:01:f1:15:e0:4c:61: d3:5a:64:83:c6:22:83:2c:55:6e:e4:c7:e9:0e:3e:74:6f:f3: 5f:d7:02:0d:e3:fd:20:64:4a:75:cd:83:a0:26:74:27:0a:06: 0b:32:49:1f:e3:03:a4:7f:b1:b4:e9:32:79:74:51:4f:15:49: a5:f8:06:08:ec:f4:5a:d8:83:c4:85:21:a1:e1:0b:63:d0:15: a7:dc:34:c6:be:a7:0a:93:82:1c:62:ac:0d:79:b5:4e:e5:90: 46:e2:6e:b0:d9:1f:84:93:ed:15:10:b6:0f:06:a8:49:ab:3a: e9:71:60:41:78:cd:e5:b3:7a:e6:c2:a1:1e:0b:a3:f1:aa:d9: 5e:fb:b2:64:dc:17:b8:18:41:55:f5:49:ee:13:38:84:f0:52: 12:de:9c:9f:5a:b1:17:ab:6c:6c:a3:09:ca:91:76:f7:55:0c: e5:8a:fb:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwNjMwMTkzNzI5WhcNMjUwNzA3MTkzNzI5WjAYMRYwFAYD VQQDEw02ODYyZTc3OS03ZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTf97xXdZKwd9q9Q7jsFYRw4nb95WU2ubjdQLFqAlYsXGJUWhrLlqDWRHsWO fNTXJ+CMh4QAudlA9cdG2XcduMOFsADnfJqv/2MiI0kEZSrAzJYE150zjafq4NKS aT1/niTM32I4qixWpJq4OtTWgBIeketcTtW/VQMAWH7CNSSTaTdfpy1Qq+H28PVm k6x/Q44wf1lSjL5Pa7K8YMgL3MVXcE8N3fGURewkiDPSmSsNrvm4GvaHIXgjRUk/ lYQa6m44hTIxrsS0jBqZO5ufk5HRyROhvHS9iq2Z0fD6yOhPc1m3aVJEr+LnjEsE suvWkA2+du9kdX87+aAFE7u3+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIAX1jH ZFqTo/lyYxroo6SDzG66MB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANSzONd6J8qBcY+J0kofENJ+ap+u4p2/1qc+ExioAX2dKDpAXttMkX 5pKsV+RXU40OXuFvR2Ce+gitw0ddEa3gdOFw6nH+Xh6R53Bcbcq8HDD5g+gB8RXg TGHTWmSDxiKDLFVu5MfpDj50b/Nf1wIN4/0gZEp1zYOgJnQnCgYLMkkf4wOkf7G0 6TJ5dFFPFUml+AYI7PRa2IPEhSGh4Qtj0BWn3DTGvqcKk4IcYqwNebVO5ZBG4m6w 2R+Ek+0VELYPBqhJqzrpcWBBeM3ls3rmwqEeC6Pxqtle+7Jk3Be4GEFV9UnuEziE 8FIS3pyfWrEXq2xsownKkXb3VQzlivsx -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:16 2025 by rpki-client