$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: 6raSBFpDIR/8NvLsAUhuCvWxSUn3vxfaPgEMjxIvndk= Subject key identifier: 31:98:B8:97:05:A0:1D:C4:06:5C:50:CD:65:11:73:39:7B:5A:EF:C6 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 065D Signing time: Wed 02 Jul 2025 17:02:56 +0000 Manifest this update: Wed 02 Jul 2025 17:02:55 +0000 Manifest next update: Wed 09 Jul 2025 17:02:55 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: sIKcIcNSdmjCqTEpSXw51P20FLL97LlWyDWOUFbjJDk=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Jul 2 17:02:55 2025 GMT Not After : Jul 9 17:02:55 2025 GMT Subject: CN=68656640-345b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:a2:6d:89:6c:7c:f7:c9:e8:60:92:5d:c6: f0:78:96:95:6a:2e:c7:0f:c0:1d:49:f0:74:fe:22: d5:a4:4b:87:29:4e:46:69:1d:09:33:a3:2c:05:99: 97:7c:cc:36:e8:25:c9:52:a8:0a:e6:09:c1:d3:d2: 3c:6b:1a:9f:cd:97:a1:ee:89:ef:42:a4:97:0e:5a: c0:40:64:b2:50:2f:94:a5:68:4d:0f:01:7f:61:2a: 58:ab:3a:38:2a:ed:d6:bf:af:42:ac:1e:bb:79:78: 21:a3:63:d1:05:b3:f8:b3:ed:56:49:2c:23:56:82: 16:87:41:7d:66:73:d5:fe:a2:9f:fd:c9:e8:6f:d4: 3f:63:52:fb:3d:bc:1a:e0:f3:34:2f:92:c5:18:f8: 1b:4d:21:32:4a:bb:3d:45:17:0d:95:4e:06:5a:80: f9:5b:91:ae:da:6a:2d:10:e7:7e:a0:9c:5c:6a:3c: 21:99:a4:de:a4:f5:5a:b6:a0:5e:0f:0c:fa:db:80: 66:f5:c0:c2:cf:16:f1:0b:e8:f6:62:16:4b:cf:c7: 4a:88:71:00:99:50:9b:9d:cf:12:24:ca:ed:76:fd: b4:43:2e:7b:f9:23:94:45:ff:9a:41:d4:b1:09:25: 84:f3:29:4f:79:11:d1:22:56:a0:6f:ae:13:b8:e3: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:B8:97:05:A0:1D:C4:06:5C:50:CD:65:11:73:39:7B:5A:EF:C6 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a0:73:c5:fb:bd:4d:13:1c:d2:b9:ef:8b:a0:e3:25:db:65: 40:14:23:e6:e6:22:32:60:a2:e0:cc:68:4d:6f:6d:a3:af:d3: 27:1c:4b:f1:d4:f9:de:a8:e0:80:6b:8b:e9:3d:eb:92:29:01: 87:8c:19:23:54:62:b7:7c:27:57:2b:92:c6:01:28:dd:64:35: 78:ed:2d:3c:5b:16:7d:6f:b1:a8:a5:10:7f:29:64:7b:a4:7c: d5:2a:79:a4:9a:c0:a8:f8:16:23:2f:1f:66:ab:02:b5:9d:11: 0f:b1:b8:d3:4b:b2:da:4c:86:8e:8d:af:a8:97:d6:a7:13:06: 8b:98:c3:67:ea:da:7c:4a:ea:7f:ff:8c:8d:51:5c:93:b5:56: 1c:36:0b:63:70:9f:62:68:f2:4a:fa:bb:f4:30:7c:74:1e:1c: 8f:58:5b:42:08:04:67:27:15:c7:4f:a2:a5:d5:0f:1c:33:2c: 7f:3e:c8:7e:32:fd:42:fa:d4:1d:d8:23:08:59:d7:85:e4:d7: 6f:f6:fa:cb:1e:c4:c3:9d:c5:17:9b:44:2a:0e:a9:0a:a3:ab: 23:34:58:e7:23:4f:7c:72:01:94:64:a3:b6:d3:6b:c5:ed:9e: db:03:d8:09:4b:7a:72:f1:1c:2c:cb:70:44:dd:1b:94:61:98: d3:0d:8e:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwNzAyMTcwMjU1WhcNMjUwNzA5MTcwMjU1WjAYMRYwFAYD VQQDEw02ODY1NjY0MC0zNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzueibYlsfPfJ6GCSXcbweJaVai7HD8AdSfB0/iLVpEuHKU5GaR0JM6MsBZmX fMw26CXJUqgK5gnB09I8axqfzZeh7onvQqSXDlrAQGSyUC+UpWhNDwF/YSpYqzo4 Ku3Wv69CrB67eXgho2PRBbP4s+1WSSwjVoIWh0F9ZnPV/qKf/cnob9Q/Y1L7Pbwa 4PM0L5LFGPgbTSEySrs9RRcNlU4GWoD5W5Gu2motEOd+oJxcajwhmaTepPVatqBe Dwz624Bm9cDCzxbxC+j2YhZLz8dKiHEAmVCbnc8SJMrtdv20Qy57+SOURf+aQdSx CSWE8ylPeRHRIlagb64TuONvgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGYuJcF oB3EBlxQzWURczl7Wu/GMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvoHPF+71NExzSue+LoOMl22VAFCPm5iIyYKLgzGhNb22jr9MnHEvx 1PneqOCAa4vpPeuSKQGHjBkjVGK3fCdXK5LGASjdZDV47S08WxZ9b7GopRB/KWR7 pHzVKnmkmsCo+BYjLx9mqwK1nREPsbjTS7LaTIaOja+ol9anEwaLmMNn6tp8Sup/ /4yNUVyTtVYcNgtjcJ9iaPJK+rv0MHx0HhyPWFtCCARnJxXHT6Kl1Q8cMyx/Psh+ Mv1C+tQd2CMIWdeF5Ndv9vrLHsTDncUXm0QqDqkKo6sjNFjnI098cgGUZKO202vF 7Z7bA9gJS3py8Rwsy3BE3RuUYZjTDY7B -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:39 2025 by rpki-client