$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: el14rzZTjtnSR0KSobHfMqTQYiZNhRI1bYtZ4qGTDB4= Subject key identifier: 1C:D3:25:01:89:E1:40:A3:79:6C:3C:3D:65:F0:4C:2F:1F:61:EE:95 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B4F Signing time: Fri 04 Jul 2025 19:28:41 +0000 Manifest this update: Fri 04 Jul 2025 19:28:40 +0000 Manifest next update: Fri 11 Jul 2025 19:28:40 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: Xqqrg2lbT0nDWnYk8uMChE2KmbXADt8YLjIUawFzrgY=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Jul 4 19:28:40 2025 GMT Not After : Jul 11 19:28:40 2025 GMT Subject: CN=68682b69-1e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:b5:3e:8e:6e:02:cf:cd:70:92:1c:18:71: 2c:ee:5d:a1:85:76:2c:3e:1d:c8:28:32:0f:c7:27: f9:12:76:9b:46:99:ee:87:25:17:d3:24:5a:00:9a: 42:55:60:06:43:95:58:21:e8:c9:65:e4:bb:a6:b0: 98:34:83:d2:8f:9a:8f:34:05:dc:d8:76:66:13:87: 24:d2:55:64:fd:c7:13:c6:b1:0e:05:39:af:d3:d6: 7a:db:8f:37:e9:56:86:00:d6:64:bc:6d:45:e6:64: ca:b0:c3:24:50:f9:4c:8a:9e:70:a0:69:73:85:2e: 2c:57:b0:92:2a:8e:dd:d5:91:66:88:93:d8:17:8d: d7:11:79:29:33:05:0c:ee:3d:79:24:4e:66:e5:11: b1:9d:92:d3:e9:0d:ca:d2:58:f4:76:cc:22:5b:9b: a4:33:60:7e:10:45:48:6e:16:3a:82:46:9d:a9:65: 42:4e:e4:30:04:ca:fe:fa:d8:c3:95:75:9d:a6:bf: 63:dd:7a:58:70:c9:7f:4f:38:1b:1f:fc:f2:10:01: b2:d8:13:b0:f3:c3:6b:b1:3e:5d:34:b4:de:cc:55: cc:7c:64:95:e5:44:9a:58:9b:c2:da:22:7c:fb:0c: 44:75:ef:0b:a6:39:2b:b3:82:43:8d:24:a0:60:67: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D3:25:01:89:E1:40:A3:79:6C:3C:3D:65:F0:4C:2F:1F:61:EE:95 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e7:5b:1c:87:0b:42:1b:48:79:03:45:0f:c5:65:7b:62:e2: 57:b9:bf:51:d2:98:a9:aa:8c:fa:b4:84:8d:ec:35:9e:af:86: 80:a1:19:60:d4:6c:92:de:9f:05:1a:83:d7:2c:02:92:fb:9f: 94:46:dc:fd:f6:1e:c2:db:ad:8d:0b:e6:7a:a7:a9:49:0b:f2: 15:61:d4:8c:56:32:d7:b4:22:e8:95:14:86:61:35:cc:95:02: 41:8a:7b:f1:94:66:bc:da:73:45:c8:53:22:10:37:9b:b2:1b: a0:d2:fc:79:d0:d7:fe:47:bf:61:c1:08:6f:91:ea:08:60:c7: 65:98:21:66:b6:9e:80:48:94:32:17:af:48:f0:6a:01:9c:70: cd:9c:f7:0e:34:12:32:f5:5e:da:ac:80:92:cc:15:57:3b:6c: 74:93:b3:cc:12:57:1b:bb:8a:7b:3f:39:aa:8e:47:b2:57:ac: 53:0e:cb:5f:12:65:6a:bd:8b:5d:59:06:6f:9a:83:49:68:a3: 50:d7:05:e4:06:17:7d:56:02:c4:b1:07:fe:17:c2:cc:66:54: e7:13:84:13:13:17:8f:c8:76:24:97:51:b5:11:88:2e:93:12: 95:4f:5d:4a:55:0c:3a:49:a3:6f:98:f8:18:2a:32:b6:15:1e: 65:ca:60:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUwNzA0MTkyODQwWhcNMjUwNzExMTkyODQwWjAYMRYwFAYD VQQDEw02ODY4MmI2OS0xZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxye1Po5uAs/NcJIcGHEs7l2hhXYsPh3IKDIPxyf5EnabRpnuhyUX0yRaAJpC VWAGQ5VYIejJZeS7prCYNIPSj5qPNAXc2HZmE4ck0lVk/ccTxrEOBTmv09Z62483 6VaGANZkvG1F5mTKsMMkUPlMip5woGlzhS4sV7CSKo7d1ZFmiJPYF43XEXkpMwUM 7j15JE5m5RGxnZLT6Q3K0lj0dswiW5ukM2B+EEVIbhY6gkadqWVCTuQwBMr++tjD lXWdpr9j3XpYcMl/TzgbH/zyEAGy2BOw88NrsT5dNLTezFXMfGSV5USaWJvC2iJ8 +wxEde8Lpjkrs4JDjSSgYGexcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzTJQGJ 4UCjeWw8PWXwTC8fYe6VMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB651schwtCG0h5A0UPxWV7YuJXub9R0pipqoz6tISN7DWer4aAoRlg 1GyS3p8FGoPXLAKS+5+URtz99h7C262NC+Z6p6lJC/IVYdSMVjLXtCLolRSGYTXM lQJBinvxlGa82nNFyFMiEDebshug0vx50Nf+R79hwQhvkeoIYMdlmCFmtp6ASJQy F69I8GoBnHDNnPcONBIy9V7arICSzBVXO2x0k7PMElcbu4p7PzmqjkeyV6xTDstf EmVqvYtdWQZvmoNJaKNQ1wXkBhd9VgLEsQf+F8LMZlTnE4QTExePyHYkl1G1EYgu kxKVT11KVQw6SaNvmPgYKjK2FR5lymBg -----END CERTIFICATE-----Generated at Sun Jul 6 01:29:59 2025 by rpki-client