$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: bfszfsU8DBXmH4027Z+dwKF3vaslA/7i+FB8w/oBc6Y= Subject key identifier: 16:8C:E3:5D:10:2A:A0:DB:0A:6F:45:A3:2C:CC:51:DC:02:18:87:62 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 0716 Signing time: Wed 02 Jul 2025 22:10:08 +0000 Manifest this update: Wed 02 Jul 2025 22:10:07 +0000 Manifest next update: Wed 09 Jul 2025 22:10:07 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: ik1A6V5ZCkrNsaNTCS0UbonfiOIJbYU3euTuaK3KqDg=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Jul 2 22:10:07 2025 GMT Not After : Jul 9 22:10:07 2025 GMT Subject: CN=6865ae3f-558f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a4:8d:05:bd:e7:b5:f9:e8:22:7d:1d:83:77: ea:2c:bc:17:c4:b9:68:51:0b:85:8d:df:c2:30:35: 0d:2c:c8:a1:64:ac:13:0f:5f:60:af:89:a3:a1:e7: f2:a4:9a:0a:40:ee:8d:47:d8:69:ab:b7:f5:1b:ce: 3a:3a:43:61:d8:0c:21:72:c1:3c:47:de:d2:f4:7d: e2:d6:3e:36:a3:35:14:dd:95:68:51:c8:00:cf:3d: 40:bf:8d:ea:48:19:16:31:ca:8f:d2:8e:9e:63:e3: 9a:fd:ad:1f:c5:85:e7:55:95:a6:af:97:8c:b5:6b: d6:7c:4c:36:57:5f:28:58:dd:52:a1:8c:d9:12:d8: 1f:6c:fa:cf:3b:a5:d4:f7:a9:20:06:ec:44:fb:51: de:f4:af:6a:bc:d5:9d:63:48:32:af:e6:66:99:15: cf:06:96:98:72:ac:71:48:99:c5:71:67:ad:a3:c1: a1:78:61:0d:05:9c:cd:c1:a3:1a:3b:c0:eb:91:47: 9f:5d:79:1d:0d:cc:7c:02:b3:68:5c:ca:ca:95:56: 93:f7:60:13:77:eb:17:ae:5b:22:19:45:6d:23:28: 5a:74:73:aa:35:2e:7b:ff:f2:0b:b6:e6:03:ce:d8: 70:08:6e:0c:cf:93:69:b4:a1:59:5b:bf:59:0b:1e: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:E3:5D:10:2A:A0:DB:0A:6F:45:A3:2C:CC:51:DC:02:18:87:62 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:cd:f4:25:54:25:df:de:9c:d1:0b:b9:7b:4f:4d:ae:27:25: ed:33:be:3a:3a:d4:be:37:2d:e8:82:88:59:ef:d9:f3:bb:77: fd:5e:c5:f4:e1:3e:44:22:92:9c:d3:04:c0:43:0b:b2:78:a0: 76:9c:cd:b4:66:18:21:ff:42:d2:37:1c:b9:a4:09:a0:f4:db: 4f:4f:1c:e4:3e:02:16:e9:d7:36:45:21:90:c9:82:c6:42:0b: 9b:16:a0:c4:c6:7d:5f:1d:db:2f:f2:2a:4f:94:42:8b:fc:4b: 75:29:55:4c:54:c8:2d:11:9f:60:37:12:41:a0:8a:79:3c:66: bd:b1:05:5f:dd:08:ee:97:74:16:95:c9:f8:38:f9:d7:23:8b: cb:ef:08:cb:dd:91:55:56:83:54:d2:66:43:05:87:0e:6a:be: 68:fa:ba:99:1b:0b:a7:10:79:d7:28:7f:fb:ca:e7:a0:7a:39: c7:44:5d:8c:95:b5:58:a5:33:12:83:49:b6:f5:25:12:86:a9: 84:a8:42:c4:37:6a:f6:c9:8b:d0:bf:e1:83:f9:8e:a7:dd:96: 8f:91:42:6d:e3:d7:b8:71:44:9c:fd:8e:94:ea:a9:d5:73:9d: b8:f1:00:86:4c:52:0f:c4:3a:8d:53:fc:cf:80:05:e1:52:75: 94:f7:bd:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNzAyMjIxMDA3WhcNMjUwNzA5MjIxMDA3WjAYMRYwFAYD VQQDEw02ODY1YWUzZi01NThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8aSNBb3ntfnoIn0dg3fqLLwXxLloUQuFjd/CMDUNLMihZKwTD19gr4mjoefy pJoKQO6NR9hpq7f1G846OkNh2AwhcsE8R97S9H3i1j42ozUU3ZVoUcgAzz1Av43q SBkWMcqP0o6eY+Oa/a0fxYXnVZWmr5eMtWvWfEw2V18oWN1SoYzZEtgfbPrPO6XU 96kgBuxE+1He9K9qvNWdY0gyr+ZmmRXPBpaYcqxxSJnFcWeto8GheGENBZzNwaMa O8DrkUefXXkdDcx8ArNoXMrKlVaT92ATd+sXrlsiGUVtIyhadHOqNS57//ILtuYD zthwCG4Mz5NptKFZW79ZCx7QgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaM410Q KqDbCm9FoyzMUdwCGIdiMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUzfQlVCXf3pzRC7l7T02uJyXtM746OtS+Ny3ogohZ79nzu3f9XsX0 4T5EIpKc0wTAQwuyeKB2nM20Zhgh/0LSNxy5pAmg9NtPTxzkPgIW6dc2RSGQyYLG QgubFqDExn1fHdsv8ipPlEKL/Et1KVVMVMgtEZ9gNxJBoIp5PGa9sQVf3Qjul3QW lcn4OPnXI4vL7wjL3ZFVVoNU0mZDBYcOar5o+rqZGwunEHnXKH/7yuegejnHRF2M lbVYpTMSg0m29SUShqmEqELEN2r2yYvQv+GD+Y6n3ZaPkUJt49e4cUSc/Y6U6qnV c5248QCGTFIPxDqNU/zPgAXhUnWU970n -----END CERTIFICATE-----Generated at Thu Jul 3 00:20:00 2025 by rpki-client