$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: e4OYawAvoS6Vw8Z5GU16ilU1wFNQRKGtjwWNoQED4Kw= Subject key identifier: 23:B2:65:03:48:45:28:97:DD:A5:B4:0B:F3:9A:AE:CE:33:C7:1A:0A Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0530 Signing time: Wed 02 Jul 2025 23:58:18 +0000 Manifest this update: Wed 02 Jul 2025 23:58:18 +0000 Manifest next update: Wed 09 Jul 2025 23:58:18 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: h65AdbQj8V3m8akX7uqdhJOTG3jOP78iTVKSVpFXHAE=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jul 2 23:58:18 2025 GMT Not After : Jul 9 23:58:18 2025 GMT Subject: CN=6865c79a-3f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:ec:bc:b5:6e:f5:ac:16:1b:9d:bb:48:fe: 71:e5:cc:fc:7a:b5:e3:6f:02:9d:8f:e6:15:54:2b: a2:43:2f:4b:33:26:4e:75:4b:0e:5f:8c:c9:39:7a: 42:2b:c3:fb:cf:c0:1e:56:ad:39:2d:1d:6e:3a:f7: 7d:c7:89:41:4b:27:24:c4:a7:62:63:d2:bb:0a:25: c3:bc:a1:a7:87:07:6f:5a:df:eb:ec:04:4e:b9:8b: 6d:b0:eb:61:b3:62:02:bf:cb:e0:6f:c1:24:22:7c: 3d:84:6a:43:94:66:26:5c:02:16:27:3d:b7:3e:50: 71:d2:86:1a:ba:b7:08:77:a6:da:11:c3:5c:c8:ad: e3:45:c1:b5:b0:c8:91:4b:9b:e0:b6:5a:2e:ba:e3: 0b:be:f5:48:90:a4:48:18:44:1f:e9:2b:94:dc:4a: c6:67:8a:8f:f2:1f:64:71:35:cf:a2:7a:67:ac:54: 9f:90:31:cd:47:c2:f4:33:28:56:f5:91:06:21:3f: f3:bc:66:5a:03:e5:6c:20:2d:44:53:ed:6b:8c:5a: 95:21:94:de:67:76:6b:c2:41:75:3f:79:bc:1d:00: 95:99:9e:89:fb:32:9f:b4:b0:b1:a6:f1:9e:72:ce: c2:c2:b0:04:09:f7:d5:84:99:0d:62:7a:d6:42:11: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:65:03:48:45:28:97:DD:A5:B4:0B:F3:9A:AE:CE:33:C7:1A:0A X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:71:c3:1b:62:cd:be:c9:86:76:28:8b:0f:1e:0a:9b:d2:3e: 2f:01:a4:71:72:17:ed:84:da:00:23:b4:4a:cc:a7:47:fe:ea: 69:a1:d7:80:d4:c7:7b:42:ec:11:ee:a7:f4:66:53:58:ec:94: 88:6b:86:67:6c:f6:92:32:7d:10:5c:40:0f:e8:7a:dc:8f:f9: 07:6d:31:19:c9:e1:ce:e3:6a:68:58:f0:23:e9:b3:3b:2d:ce: ba:79:69:67:16:28:1b:26:dc:5d:3e:a6:32:3d:83:8a:c5:3d: f6:33:c7:a1:e3:ef:4f:1a:33:05:2d:21:d7:83:7f:53:7f:57: 49:9a:7f:3f:02:91:ed:8e:01:4c:dd:4c:d7:ee:02:1d:7c:25: dd:1a:03:a7:90:61:a8:0f:d1:bb:51:b7:3c:3a:49:19:01:c5: 9b:bf:8c:8a:e7:a6:76:a4:ea:1f:3f:05:28:fa:ca:53:53:dc: 26:53:35:32:42:cb:67:cb:67:a0:07:a7:c7:9c:64:50:a3:12: 01:f5:cd:7b:fd:0a:b8:2f:88:36:f1:ea:76:4d:12:d7:4e:5c: 46:67:5d:bb:78:d6:f2:a3:2f:01:db:da:76:81:e5:97:9c:c9: a1:62:bc:1e:7f:ea:c5:78:78:55:80:fd:a5:f5:28:96:1a:08: 08:7c:e9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNzAyMjM1ODE4WhcNMjUwNzA5MjM1ODE4WjAYMRYwFAYD VQQDEw02ODY1Yzc5YS0zZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41PsvLVu9awWG527SP5x5cz8erXjbwKdj+YVVCuiQy9LMyZOdUsOX4zJOXpC K8P7z8AeVq05LR1uOvd9x4lBSyckxKdiY9K7CiXDvKGnhwdvWt/r7AROuYttsOth s2ICv8vgb8EkInw9hGpDlGYmXAIWJz23PlBx0oYaurcId6baEcNcyK3jRcG1sMiR S5vgtlouuuMLvvVIkKRIGEQf6SuU3ErGZ4qP8h9kcTXPonpnrFSfkDHNR8L0MyhW 9ZEGIT/zvGZaA+VsIC1EU+1rjFqVIZTeZ3ZrwkF1P3m8HQCVmZ6J+zKftLCxpvGe cs7CwrAECffVhJkNYnrWQhHQ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOyZQNI RSiX3aW0C/Oars4zxxoKMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJccMbYs2+yYZ2KIsPHgqb0j4vAaRxchfthNoAI7RKzKdH/uppodeA 1Md7QuwR7qf0ZlNY7JSIa4ZnbPaSMn0QXEAP6Hrcj/kHbTEZyeHO42poWPAj6bM7 Lc66eWlnFigbJtxdPqYyPYOKxT32M8eh4+9PGjMFLSHXg39Tf1dJmn8/ApHtjgFM 3UzX7gIdfCXdGgOnkGGoD9G7Ubc8OkkZAcWbv4yK56Z2pOofPwUo+spTU9wmUzUy Qstny2egB6fHnGRQoxIB9c17/Qq4L4g28ep2TRLXTlxGZ127eNbyoy8B29p2geWX nMmhYrwef+rFeHhVgP2l9SiWGggIfOmV -----END CERTIFICATE-----Generated at Thu Jul 3 18:21:15 2025 by rpki-client