$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: tzIKN0hJ1VJ6c8LNDbQ0nqLxxApgAhrE7cHGqwNiJMM= Subject key identifier: 09:3B:D7:75:7D:B4:11:43:34:36:5D:9A:7A:8A:62:E3:3E:45:01:68 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 70 Signing time: Thu 03 Jul 2025 07:07:08 +0000 Manifest this update: Thu 03 Jul 2025 07:07:07 +0000 Manifest next update: Thu 10 Jul 2025 07:07:07 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: VXsDxoqOfDZo/T/uo2C/vgIZjC1gtPGpfq+eluWs0ps=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Jul 3 07:07:07 2025 GMT Not After : Jul 10 07:07:07 2025 GMT Subject: CN=68662c1c-6cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:4a:1b:21:52:97:05:41:75:4f:a5:5c:23: 2d:61:aa:b3:8b:8b:cf:e8:97:9c:84:9b:3b:9d:d3: 75:de:dd:2e:e2:8a:d9:30:5b:cc:db:2f:f4:94:b1: ae:a4:d5:a6:36:b9:b2:56:62:ad:74:b2:c9:ad:16: 23:1b:8e:91:d4:31:d3:4d:ff:8d:b2:0e:4c:1f:55: 54:38:bc:b9:95:17:1e:85:3b:5d:c1:8c:f6:ec:99: 54:25:eb:c6:3b:6b:13:82:e4:c6:9b:b1:8d:72:45: 14:19:d6:3c:10:78:6e:db:17:ed:b1:69:bd:01:46: fc:7b:13:9c:ed:12:be:5f:59:37:44:50:dc:ad:a0: 66:b0:ff:26:9e:09:9c:34:a1:0e:3a:70:e9:ac:3b: 14:2d:bb:ed:9e:56:8f:dc:ec:8c:e1:b8:b4:6c:f7: 40:17:17:34:51:eb:73:e3:86:81:36:6e:7c:42:dc: ad:20:08:87:ff:9d:de:3c:96:30:c7:9a:27:fc:3a: 9a:74:07:5b:b0:11:66:a7:3d:0b:96:3a:30:cd:a0: 15:aa:5e:27:af:57:74:96:ce:d4:3a:15:0b:e4:ef: 45:df:89:9d:61:df:8a:bc:54:1f:3c:a5:ad:9b:7e: f2:5c:29:8e:f9:ae:7e:dd:17:22:6a:7b:be:70:08: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:D7:75:7D:B4:11:43:34:36:5D:9A:7A:8A:62:E3:3E:45:01:68 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:02:8e:b0:c0:e8:a5:b2:52:3b:11:bb:1c:78:aa:62:f3:dd: 61:6f:c8:80:d0:33:d7:ce:ea:e9:c6:24:25:ae:f0:b6:2c:27: 0a:c3:72:15:e1:9a:3a:8d:74:0a:82:1c:46:4c:d2:4f:a2:c1: 47:79:ac:21:a3:43:85:a8:f6:e9:f5:ee:4a:96:81:0e:60:2b: f4:71:e8:77:c9:7b:19:c9:61:42:ae:0f:a7:76:44:26:66:37: 0f:2b:11:72:36:50:50:fc:48:1a:40:b5:6e:20:6f:4a:92:18: 85:ef:38:62:75:c4:68:90:bc:15:2e:ee:99:a4:8f:4c:17:d8: 2b:5e:ce:20:75:a0:62:c8:56:30:fa:b3:09:99:b7:b7:00:a9: 43:3e:63:05:82:bb:71:d5:5b:94:6d:fc:70:2d:a0:44:68:21: 09:53:12:66:18:f1:4e:12:f5:2c:85:e6:42:44:7a:fb:d0:18: 50:7e:50:be:80:58:ff:bd:38:08:f8:d7:7a:19:b2:7a:6c:1f: 29:dc:5d:7d:3a:a4:f6:47:41:d6:8d:ba:9a:09:e3:51:6f:c5: 65:41:07:9e:7f:14:6f:ef:03:d7:e9:12:d8:89:aa:e8:38:ba: 4a:4b:54:bc:7b:3b:a6:48:4c:a2:fa:13:ff:68:2a:74:63:70: 79:59:0d:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA3MDMwNzA3MDdaFw0yNTA3MTAwNzA3MDdaMBgxFjAUBgNV BAMTDTY4NjYyYzFjLTZjYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEwkobIVKXBUF1T6VcIy1hqrOLi8/ol5yEmzud03Xe3S7iitkwW8zbL/SUsa6k 1aY2ubJWYq10ssmtFiMbjpHUMdNN/42yDkwfVVQ4vLmVFx6FO13BjPbsmVQl68Y7 axOC5MabsY1yRRQZ1jwQeG7bF+2xab0BRvx7E5ztEr5fWTdEUNytoGaw/yaeCZw0 oQ46cOmsOxQtu+2eVo/c7IzhuLRs90AXFzRR63PjhoE2bnxC3K0gCIf/nd48ljDH mif8Opp0B1uwEWanPQuWOjDNoBWqXievV3SWztQ6FQvk70XfiZ1h34q8VB88pa2b fvJcKY75rn7dFyJqe75wCFLlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCTvXdX20 EUM0Nl2aeopi4z5FAWgwHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMCjrDA6KWyUjsRuxx4qmLz3WFvyIDQM9fO6unGJCWu8LYsJwrDchXh mjqNdAqCHEZM0k+iwUd5rCGjQ4Wo9un17kqWgQ5gK/Rx6HfJexnJYUKuD6d2RCZm Nw8rEXI2UFD8SBpAtW4gb0qSGIXvOGJ1xGiQvBUu7pmkj0wX2CteziB1oGLIVjD6 swmZt7cAqUM+YwWCu3HVW5Rt/HAtoERoIQlTEmYY8U4S9SyF5kJEevvQGFB+UL6A WP+9OAj413oZsnpsHyncXX06pPZHQdaNupoJ41FvxWVBB55/FG/vA9fpEtiJqug4 ukpLVLx7O6ZITKL6E/9oKnRjcHlZDcA= -----END CERTIFICATE-----Generated at Thu Jul 3 10:04:23 2025 by rpki-client