$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft File: fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json) Hash identifier: dPbtRH0uoutJz3SUAiEshsMUH7JStfns3FrKQYZkl6s= Subject key identifier: 15:73:4E:C3:6D:AF:68:55:03:26:AF:D8:3E:E2:60:98:31:53:BD:B5 Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F Certificate issuer: /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft Manifest number: 0401 Signing time: Tue 01 Jul 2025 00:59:33 +0000 Manifest this update: Tue 01 Jul 2025 00:59:33 +0000 Manifest next update: Tue 08 Jul 2025 00:59:33 +0000 Files and hashes: 1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: IjnC+CNJZD7r4zIDnjqVCkUsNbnIbiA6hnfDiJ3tULw=) 2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: t8XuoQmVWFDhGIw5z4xI5py7yU/yXUz4bzdYNO89YHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F700, serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F Validity Not Before: Jul 1 00:59:33 2025 GMT Not After : Jul 8 00:59:33 2025 GMT Subject: CN=686332f5-9416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:2c:4f:f1:25:0e:db:3d:bb:35:ed:43:bc: 22:32:79:ed:a1:e4:25:85:29:9b:67:fb:23:8a:91: fe:6a:2a:90:4d:5e:7b:b3:2f:3c:31:61:8c:1b:c3: c9:7a:b7:8f:8a:90:fc:57:18:13:d6:51:72:cb:38: 23:6c:48:a8:26:d7:67:b0:44:7b:b0:d4:2b:03:d3: 40:73:0f:59:2d:e2:f3:ea:2f:7d:42:75:d3:58:39: 89:d0:f4:b1:94:06:6b:60:8a:52:82:60:bb:01:c0: 96:b9:e1:fe:54:40:32:06:b0:89:5a:71:2a:a6:cd: d0:ac:45:83:5d:5c:69:b7:f6:f6:83:44:70:ce:f4: ef:73:00:f0:09:c2:3a:6f:55:f1:a7:5a:5c:85:f2: 48:ca:b1:e8:13:6e:41:3f:a6:b6:a5:a5:40:07:b5: 8d:59:40:9e:9f:48:f5:2c:5c:75:32:8f:9d:69:5c: fd:a5:c9:96:e9:0e:2b:65:a7:cf:0f:40:d0:46:6b: 4a:3d:a2:fc:02:47:ae:14:9a:7f:58:74:c7:c9:02: 2c:9d:72:f6:4a:78:65:39:57:61:e9:52:86:a7:c0: 43:db:9e:91:0c:b9:c5:83:d8:5b:42:59:35:43:bd: 80:80:19:dd:5a:56:13:83:7b:91:54:10:42:e8:2f: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:4E:C3:6D:AF:68:55:03:26:AF:D8:3E:E2:60:98:31:53:BD:B5 X509v3 Authority Key Identifier: keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2d:1d:2d:af:3c:ed:13:48:ed:0e:3d:0c:32:91:63:4b:30: f2:7f:18:d0:00:30:70:70:42:89:69:21:d7:94:05:dd:8a:a0: a0:49:57:bc:26:b0:20:40:2f:8a:4c:35:91:19:5e:03:bc:49: 4a:11:53:bc:3a:11:d0:9e:08:ee:1a:e8:c8:50:27:c9:4b:fa: b7:1c:6a:7e:12:11:f6:67:e9:0a:c8:34:d6:85:dc:dd:73:e6: 4d:62:fe:50:78:ae:4b:18:6d:d2:e8:f4:1d:d4:be:04:59:a3: a0:9d:9c:b3:94:7a:89:cb:d2:b1:63:f6:92:7c:f9:a6:ef:75: 42:08:bc:ed:73:05:aa:52:9e:bf:10:a1:15:1a:2a:db:0e:f3: 05:02:2b:a0:b2:04:6f:6b:02:62:21:85:86:42:64:17:88:0d: 86:53:27:c3:c0:bf:58:ca:ff:63:0a:ff:cd:4a:df:21:f0:2b: a3:8e:be:a8:f1:d2:a8:67:72:97:82:40:f8:0d:a0:31:ad:78: cf:da:df:c3:25:df:e1:ba:ea:e7:00:4e:8a:8c:c8:a2:69:a9: 0a:38:cc:c9:ee:ce:8a:90:50:ed:4b:61:55:f4:0e:76:d2:bd: f4:0b:32:7c:14:0b:b6:61:e5:37:c3:bd:f8:e9:df:8f:bb:57: 66:bf:27:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY3MDAxMTAvBgNVBAUTKDdEN0YyRjgwMDQ3MENFQjE5M0M3RUI3ODk4Mzk1OTVC NzYyNzQ3NEYwHhcNMjUwNzAxMDA1OTMzWhcNMjUwNzA4MDA1OTMzWjAYMRYwFAYD VQQDEw02ODYzMzJmNS05NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjYsT/ElDts9uzXtQ7wiMnntoeQlhSmbZ/sjipH+aiqQTV57sy88MWGMG8PJ erePipD8VxgT1lFyyzgjbEioJtdnsER7sNQrA9NAcw9ZLeLz6i99QnXTWDmJ0PSx lAZrYIpSgmC7AcCWueH+VEAyBrCJWnEqps3QrEWDXVxpt/b2g0RwzvTvcwDwCcI6 b1Xxp1pchfJIyrHoE25BP6a2paVAB7WNWUCen0j1LFx1Mo+daVz9pcmW6Q4rZafP D0DQRmtKPaL8AkeuFJp/WHTHyQIsnXL2SnhlOVdh6VKGp8BD256RDLnFg9hbQlk1 Q72AgBndWlYTg3uRVBBC6C/I4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVzTsNt r2hVAyav2D7iYJgxU721MB8GA1UdIwQYMBaAFH1/L4AEcM6xk8freJg5WVt2J0dP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjcwMC9ENEM1REIxMjc5 N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3pyR1R4LXQ0bURsWlczWW5S MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYOHZnQVJ3enJHVHgtdDRtRGxaVzNZblIwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjcwMC9ENEM1REIxMjc5N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3py R1R4LXQ0bURsWlczWW5SMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsLR0trzztE0jtDj0MMpFjSzDyfxjQADBwcEKJaSHXlAXdiqCgSVe8 JrAgQC+KTDWRGV4DvElKEVO8OhHQngjuGujIUCfJS/q3HGp+EhH2Z+kKyDTWhdzd c+ZNYv5QeK5LGG3S6PQd1L4EWaOgnZyzlHqJy9KxY/aSfPmm73VCCLztcwWqUp6/ EKEVGirbDvMFAiugsgRvawJiIYWGQmQXiA2GUyfDwL9Yyv9jCv/NSt8h8Cujjr6o 8dKoZ3KXgkD4DaAxrXjP2t/DJd/huurnAE6KjMiiaakKOMzJ7s6KkFDtS2FV9A52 0r30CzJ8FAu2YeU3w7346d+Pu1dmvycm -----END CERTIFICATE-----Generated at Wed Jul 2 16:06:12 2025 by rpki-client