$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: F/ZwXNlPvBsCAXbO7J1kP4xVbUOVIciJ39e7dSB50Ms= Subject key identifier: A1:9A:E9:5C:73:CE:CD:91:AA:C6:31:7B:5E:9B:47:71:8C:4F:6D:3A Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 04F2 Signing time: Thu 03 Jul 2025 00:02:22 +0000 Manifest this update: Thu 03 Jul 2025 00:02:21 +0000 Manifest next update: Thu 10 Jul 2025 00:02:21 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: fB6mDnqbYGEsZ3r2cFnBHQfIIHkkFx+SW5btRACnRV8=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: xx0/0c099Z+DcfDq5KxpcRvexWoXtqPp/xhoiOnuqgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Jul 3 00:02:21 2025 GMT Not After : Jul 10 00:02:21 2025 GMT Subject: CN=6865c88e-7327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:f4:f1:f8:6a:19:2e:fe:89:c2:34:59:98: 21:86:1a:0d:63:c3:cc:a1:42:2d:d3:30:a4:ed:9d: 6e:08:a6:1e:32:59:40:8d:e8:8d:5e:30:b3:fa:50: a7:39:88:1f:3a:e4:cb:c0:b2:e0:a4:58:50:8e:a3: 31:b1:13:c0:79:af:1f:9d:2d:22:cd:f3:8f:21:6a: f6:18:62:71:ea:a1:14:cb:70:40:c3:f0:da:1f:d4: a1:40:a8:6c:c3:37:03:63:de:a5:36:a6:dc:30:8c: 34:fa:85:e0:a9:19:0a:59:45:50:27:61:ee:a6:0e: eb:9f:6f:c4:4b:b2:07:b1:4b:ef:1d:37:8f:91:6f: 17:82:b4:72:34:59:e2:1e:1d:59:ce:46:3e:17:32: 54:16:65:c3:37:90:32:38:60:e7:3d:c5:9c:63:1c: 0a:b5:95:e8:7b:56:1f:bb:fd:74:0f:b2:ed:d6:df: 0d:2c:ce:b0:c8:39:59:3e:42:20:7a:02:ef:de:fa: 4b:4d:39:7a:61:53:8f:cc:10:73:11:10:68:b6:2b: 26:f3:fa:51:57:69:31:82:6b:c5:f2:da:8a:3e:ea: b6:54:8a:ed:42:5b:99:d3:eb:cf:8b:5a:fc:38:fa: bb:a9:3e:c5:e1:4d:e2:03:df:39:a6:2d:d3:b8:a9: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:E9:5C:73:CE:CD:91:AA:C6:31:7B:5E:9B:47:71:8C:4F:6D:3A X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7d:62:8d:b2:16:10:22:ef:97:a5:7b:28:d8:bd:21:36:f4: df:32:49:f0:0d:b9:42:29:4c:2c:20:5a:4b:f2:62:0a:6a:70: d4:50:1e:9e:d2:c4:38:dc:01:5e:db:63:84:74:56:af:20:bb: c8:b9:c9:39:fa:aa:46:ca:b4:40:fc:03:ee:92:5c:38:e4:ea: 64:55:53:17:81:c3:56:55:c2:80:cb:c5:63:fa:4a:0a:54:61: 86:15:d2:d8:13:95:59:1a:29:fe:3d:3a:69:c4:69:ba:6c:93: 52:0d:2c:50:a9:2a:8f:dd:de:62:1b:4c:7f:bf:5a:dd:d0:81: 8b:63:33:d6:de:35:05:72:e5:3e:52:85:80:38:56:3a:23:51: eb:97:fd:11:39:3b:9e:77:49:a9:fa:c2:95:c6:ca:c4:eb:94: cf:93:c1:e9:59:c5:a3:d1:0d:73:3a:06:35:fd:c2:12:65:cf: 39:6f:7a:75:82:94:bb:22:6f:f6:42:0f:d1:01:40:f4:dc:48: 41:e4:a2:ac:53:36:7f:eb:4a:18:d2:a1:38:35:93:04:e9:f5: b0:71:5a:e3:b8:ef:ab:7f:17:8d:fb:7d:a9:5a:c4:70:44:06: 4c:5b:39:45:aa:be:73:87:eb:bb:26:8d:ff:ca:3c:d5:a7:ce: 53:76:a1:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUwNzAzMDAwMjIxWhcNMjUwNzEwMDAwMjIxWjAYMRYwFAYD VQQDEw02ODY1Yzg4ZS03MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP308fhqGS7+icI0WZghhhoNY8PMoUIt0zCk7Z1uCKYeMllAjeiNXjCz+lCn OYgfOuTLwLLgpFhQjqMxsRPAea8fnS0izfOPIWr2GGJx6qEUy3BAw/DaH9ShQKhs wzcDY96lNqbcMIw0+oXgqRkKWUVQJ2Hupg7rn2/ES7IHsUvvHTePkW8XgrRyNFni Hh1ZzkY+FzJUFmXDN5AyOGDnPcWcYxwKtZXoe1Yfu/10D7Lt1t8NLM6wyDlZPkIg egLv3vpLTTl6YVOPzBBzERBotism8/pRV2kxgmvF8tqKPuq2VIrtQluZ0+vPi1r8 OPq7qT7F4U3iA985pi3TuKlB7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGa6Vxz zs2RqsYxe16bR3GMT206MB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgfWKNshYQIu+XpXso2L0hNvTfMknwDblCKUwsIFpL8mIKanDUUB6e 0sQ43AFe22OEdFavILvIuck5+qpGyrRA/APuklw45OpkVVMXgcNWVcKAy8Vj+koK VGGGFdLYE5VZGin+PTppxGm6bJNSDSxQqSqP3d5iG0x/v1rd0IGLYzPW3jUFcuU+ UoWAOFY6I1Hrl/0ROTued0mp+sKVxsrE65TPk8HpWcWj0Q1zOgY1/cISZc85b3p1 gpS7Im/2Qg/RAUD03EhB5KKsUzZ/60oY0qE4NZME6fWwcVrjuO+rfxeN+32pWsRw RAZMWzlFqr5zh+u7Jo3/yjzVp85TdqG0 -----END CERTIFICATE-----Generated at Fri Jul 4 21:56:41 2025 by rpki-client