$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: D28SiiFY5jqGVdl0pOWggvjLa7g60toiw4oHHVxxwc4= Subject key identifier: 2D:6B:42:F1:D3:49:88:B2:77:E1:F1:DD:39:5E:3C:10:A1:37:63:9A Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 07D9 Signing time: Wed 02 Jul 2025 21:22:22 +0000 Manifest this update: Wed 02 Jul 2025 21:22:22 +0000 Manifest next update: Wed 09 Jul 2025 21:22:22 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: +rhgaXUd+Ix8H+GfjOkBoUZB+t92EvurAedmTFqHrfg=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: 7145KDk6Ud3gJk6wkOrSSRd7V4t35M2bwdrO78shBPE=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: wSUtbGUG6qJCjwBZF3AGH+0iZn8vKCgbBj1wQ7GjPys=) 4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: qx6Ck2bt18JzwMSwE91OIh9TX6eoj+EFVUwzhl+omAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Jul 2 21:22:22 2025 GMT Not After : Jul 9 21:22:22 2025 GMT Subject: CN=6865a30e-8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:ed:4a:d1:96:65:a1:ab:8c:a9:ea:df:56: fd:7d:d3:b2:b4:7d:85:8a:7c:f1:2f:48:e5:7e:b0: 5d:ba:4a:b1:91:c1:ff:9d:56:ed:ba:a5:5e:15:04: a5:d4:c3:23:a0:26:9f:59:83:bf:eb:d0:70:5b:67: 0b:e9:82:35:67:f1:90:b5:67:5e:b7:88:3d:bf:36: 06:cd:ae:8c:44:83:61:a6:79:a7:35:9d:f2:eb:c5: ed:02:6b:b8:1b:6d:f3:2b:42:35:9d:52:ad:21:53: d5:aa:15:8b:8d:c4:57:e7:cf:2f:cc:a7:2e:8b:1e: 32:4d:d1:68:32:9d:79:1e:6b:25:06:1a:23:1c:bb: bf:ad:dd:85:27:1a:3d:06:4f:af:06:9d:e4:57:b4: 96:72:a7:22:1f:5d:d0:0c:ae:e8:87:91:22:d1:7b: c5:8e:46:f7:2c:9d:3f:63:91:4c:47:b0:46:a7:af: 47:30:1c:7f:a1:ea:6a:25:11:32:e0:e5:af:c5:73: 54:36:ce:48:fb:12:51:57:dd:3c:e7:0b:cd:08:49: 9c:d3:68:eb:9b:9f:5d:5c:22:45:e1:72:2a:23:0d: 17:c1:06:23:6f:1a:64:94:9c:ae:3d:0b:3d:24:79: ec:c7:1a:4c:ef:dc:8c:c0:36:82:65:6c:95:6f:ea: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:42:F1:D3:49:88:B2:77:E1:F1:DD:39:5E:3C:10:A1:37:63:9A X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:da:36:10:09:2f:8d:be:a4:38:9d:d6:98:e2:c5:9c:4d:61: b1:c0:d8:8a:ff:38:60:82:9b:16:e9:95:fb:51:61:53:69:32: 19:fb:33:f0:c5:85:b1:7c:36:52:05:ae:2c:e4:53:4b:23:98: 7d:56:2f:c7:6f:20:b1:cd:cd:06:7e:5c:16:e7:dc:5f:a5:f8: 9d:ac:36:5b:2c:0d:ea:e2:69:b9:db:a4:d2:27:b6:2b:23:cd: c5:c8:55:ba:b6:22:36:a2:3c:a5:96:b5:42:8f:4d:34:37:a1: 14:86:f2:63:9a:fb:eb:30:b0:2c:2a:5d:f2:f2:60:a2:e5:5f: 33:f4:f5:a0:e2:d5:75:7d:d3:88:e8:05:21:a9:5a:12:04:16: 4b:83:dc:25:aa:98:1b:80:20:a0:4a:be:e8:0c:e6:fc:48:31: dc:cf:bb:5d:22:87:34:a8:00:9c:71:1a:cd:ab:88:64:09:af: 2a:d0:7f:8c:77:a7:a3:c8:20:f7:ea:4e:1e:81:84:86:83:52: e0:92:e9:13:d9:72:d2:ab:b1:92:85:89:7a:60:c5:f1:ce:88: cb:0d:a1:68:dc:a4:fa:b2:39:db:85:7d:32:60:cf:ed:3b:54: 1a:1f:3d:c9:a2:19:d0:8f:68:ce:68:30:c3:d3:07:f3:c6:fb: cb:12:1f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjUwNzAyMjEyMjIyWhcNMjUwNzA5MjEyMjIyWjAYMRYwFAYD VQQDEw02ODY1YTMwZS04MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ebtStGWZaGrjKnq31b9fdOytH2FinzxL0jlfrBdukqxkcH/nVbtuqVeFQSl 1MMjoCafWYO/69BwW2cL6YI1Z/GQtWdet4g9vzYGza6MRINhpnmnNZ3y68XtAmu4 G23zK0I1nVKtIVPVqhWLjcRX588vzKcuix4yTdFoMp15HmslBhojHLu/rd2FJxo9 Bk+vBp3kV7SWcqciH13QDK7oh5Ei0XvFjkb3LJ0/Y5FMR7BGp69HMBx/oepqJREy 4OWvxXNUNs5I+xJRV9085wvNCEmc02jrm59dXCJF4XIqIw0XwQYjbxpklJyuPQs9 JHnsxxpM79yMwDaCZWyVb+pIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1rQvHT SYiyd+Hx3TlePBChN2OaMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2jYQCS+NvqQ4ndaY4sWcTWGxwNiK/zhggpsW6ZX7UWFTaTIZ+zPw xYWxfDZSBa4s5FNLI5h9Vi/HbyCxzc0GflwW59xfpfidrDZbLA3q4mm526TSJ7Yr I83FyFW6tiI2ojyllrVCj000N6EUhvJjmvvrMLAsKl3y8mCi5V8z9PWg4tV1fdOI 6AUhqVoSBBZLg9wlqpgbgCCgSr7oDOb8SDHcz7tdIoc0qACccRrNq4hkCa8q0H+M d6ejyCD36k4egYSGg1LgkukT2XLSq7GShYl6YMXxzojLDaFo3KT6sjnbhX0yYM/t O1QaHz3JohnQj2jOaDDD0wfzxvvLEh9w -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:41 2025 by rpki-client