$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft File: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json) Hash identifier: mEji2ZSzT1t0UIwmtIL4XYCUcUSKo0LYkO0J59jd1s8= Subject key identifier: 76:EF:3F:1B:E4:26:AD:5C:99:26:6E:A8:B8:59:51:48:94:A2:34:C1 Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E Certificate issuer: /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft Manifest number: 04A3 Signing time: Thu 03 Jul 2025 00:17:29 +0000 Manifest this update: Thu 03 Jul 2025 00:17:29 +0000 Manifest next update: Thu 10 Jul 2025 00:17:29 +0000 Files and hashes: 1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: YgQ/c8EdPNDQZhZlvEQCSA/chkDN9wyt5FfIu6LriSY=) 2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: dZ03PlivQiWcdxJuslt2Fyk44MUpvC5il4kYFX0N5Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E Validity Not Before: Jul 3 00:17:29 2025 GMT Not After : Jul 10 00:17:29 2025 GMT Subject: CN=6865cc19-51bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:bd:e8:f9:bc:88:40:f3:1b:4c:d6:30:a4: ae:e3:f6:7d:0b:81:d8:64:08:a7:f8:9d:7b:37:54: 80:d2:f2:58:3c:03:94:40:41:f2:30:e8:a8:6e:f0: 56:bb:0b:bb:94:51:01:30:92:43:aa:2d:26:fd:b5: 6e:6c:6b:09:78:2c:f0:2d:7f:be:ad:53:0c:72:88: a7:07:34:e6:a9:c2:f3:2a:ee:20:6f:e2:d2:cc:c7: df:44:4d:9f:91:4c:08:db:6e:ca:17:23:7a:e3:5c: e5:21:eb:24:14:b5:80:2b:d3:72:96:8f:49:55:a3: 04:81:67:f2:d7:f9:6f:d6:95:99:b2:1e:a1:ac:ad: ab:49:51:9a:15:ed:9f:74:3d:38:1e:ee:fe:eb:dd: f7:88:68:ef:ec:9e:84:c8:02:a2:5b:2b:18:f8:6d: 05:07:1c:40:5e:3b:77:9a:83:bb:a8:c6:f2:7f:a3: 7f:04:86:c6:37:dd:7c:cc:38:5f:a5:f5:c0:17:3b: 83:12:41:b8:46:8f:f1:a5:82:fb:df:11:5b:ac:04: b8:57:8a:7e:ba:d4:30:22:3e:82:ea:0c:05:8c:11: 85:da:5a:2f:fb:5e:a6:e2:f1:5e:7f:ad:22:33:34: e2:06:26:5e:40:6f:ac:8d:9a:15:db:a0:76:7a:f9: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EF:3F:1B:E4:26:AD:5C:99:26:6E:A8:B8:59:51:48:94:A2:34:C1 X509v3 Authority Key Identifier: keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:c3:94:0c:f8:60:08:1f:d2:90:c3:70:b9:41:14:00:c3: ca:1a:2b:d6:54:67:bb:95:ed:c8:26:06:4c:70:1e:ad:3a:fd: 69:fe:08:4a:0d:4d:9a:15:47:ec:ce:1a:88:5e:c5:d2:95:f4: dc:47:fa:79:28:8f:43:cc:fd:b5:f3:e2:a1:77:cc:99:7c:61: 84:22:a1:23:70:67:37:39:13:17:e3:7a:57:c2:e8:39:7d:9e: 51:ec:fd:ec:e5:0d:7e:54:19:cf:d3:75:9c:3f:d0:f6:1a:45: df:63:31:2e:19:1a:d4:31:7f:b7:66:ab:30:13:a6:03:ea:ed: 1e:ed:7b:be:71:e6:ed:06:f1:6b:de:18:d7:37:3d:d4:04:4a: 3c:c9:0e:da:3e:78:d4:4c:b5:2c:8f:c9:56:4b:25:62:79:38: 08:44:8e:39:e1:5e:1a:fa:ff:3d:b9:39:d6:ca:87:e2:09:17: 2b:c8:cf:74:ca:08:03:8d:a7:32:1f:8a:20:62:35:f4:00:b6: ce:cc:af:4a:ef:4a:f7:fe:bd:4c:73:0b:46:88:df:5f:0b:d0: 4c:78:82:a2:7a:c5:c1:2d:3f:b5:70:5d:d2:d0:00:45:79:87: d3:17:68:24:9f:a5:24:9b:65:a0:83:f3:4e:bc:35:da:97:df: 1a:c7:1a:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MTgxMTAvBgNVBAUTKDVGRTE1NDNDODVCMDY1MzBBMTY0Q0Y5MEUxQTI3REE4 REI3MjQ1MEUwHhcNMjUwNzAzMDAxNzI5WhcNMjUwNzEwMDAxNzI5WjAYMRYwFAYD VQQDEw02ODY1Y2MxOS01MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6W96Pm8iEDzG0zWMKSu4/Z9C4HYZAin+J17N1SA0vJYPAOUQEHyMOiobvBW uwu7lFEBMJJDqi0m/bVubGsJeCzwLX++rVMMcoinBzTmqcLzKu4gb+LSzMffRE2f kUwI227KFyN641zlIeskFLWAK9Nylo9JVaMEgWfy1/lv1pWZsh6hrK2rSVGaFe2f dD04Hu7+6933iGjv7J6EyAKiWysY+G0FBxxAXjt3moO7qMbyf6N/BIbGN918zDhf pfXAFzuDEkG4Ro/xpYL73xFbrAS4V4p+utQwIj6C6gwFjBGF2lov+16m4vFef60i MzTiBiZeQG+sjZoV26B2evncBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbvPxvk Jq1cmSZuqLhZUUiUojTBMB8GA1UdIwQYMBaAFF/hVDyFsGUwoWTPkOGifajbckUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxOC83NzE5MzE4MDNB RTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pUQ2haTS1RNGFKOXFOdHlS UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtRlVQSVd3WlRDaFpNLVE0YUo5cU50eVJRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQxOC83NzE5MzE4MDNBRTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pU Q2haTS1RNGFKOXFOdHlSUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgZMOUDPhgCB/SkMNwuUEUAMPKGivWVGe7le3IJgZMcB6tOv1p/ghK DU2aFUfszhqIXsXSlfTcR/p5KI9DzP218+Khd8yZfGGEIqEjcGc3ORMX43pXwug5 fZ5R7P3s5Q1+VBnP03WcP9D2GkXfYzEuGRrUMX+3ZqswE6YD6u0e7Xu+cebtBvFr 3hjXNz3UBEo8yQ7aPnjUTLUsj8lWSyVieTgIRI454V4a+v89uTnWyofiCRcryM90 yggDjacyH4ogYjX0ALbOzK9K70r3/r1McwtGiN9fC9BMeIKiesXBLT+1cF3S0ABF eYfTF2gkn6Ukm2Wgg/NOvDXal98axxoM -----END CERTIFICATE-----Generated at Fri Jul 4 14:43:08 2025 by rpki-client