$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: B0f4La6SuKBGiwTi6cuSUpTAvFUB8liythgaU7iavSY= Subject key identifier: CD:79:8E:5A:54:05:96:E5:B6:29:84:A4:3D:0A:A5:7B:F2:DF:3A:4B Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B72 Signing time: Mon 30 Jun 2025 19:38:17 +0000 Manifest this update: Mon 30 Jun 2025 19:38:17 +0000 Manifest next update: Mon 07 Jul 2025 19:38:17 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: Fb7LUp+VJ5Lqk4B+zjD870Pb508IHt+Ryf3YjBKWJG4=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Jun 30 19:38:17 2025 GMT Not After : Jul 7 19:38:17 2025 GMT Subject: CN=6862e7a9-d0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9c:55:02:81:86:f9:86:63:57:3c:62:dc:65: a4:54:e2:5c:3c:ab:63:55:0d:5a:12:c0:58:b9:9e: 95:18:f1:7c:4f:92:b1:9d:09:bf:06:bf:7c:b9:6c: 32:9c:52:cc:6a:23:6e:b3:ce:b6:5c:5c:2c:33:99: fe:77:b2:0c:39:d7:75:06:65:81:ad:c0:a1:bf:09: 33:ab:b5:21:97:66:f6:57:bb:7a:81:06:80:6e:1b: 49:39:d0:cb:05:55:7e:a1:e1:49:19:e1:40:7a:bc: 16:10:84:62:4a:b8:49:67:b7:6e:e5:91:e8:1d:cc: 6b:9c:6f:50:af:fb:4f:b0:5e:d3:64:09:4f:62:50: 16:38:07:3c:fa:78:96:53:cd:9c:04:c0:32:64:b4: d2:fc:55:e9:53:8b:5c:2d:15:6a:bc:f6:ef:f6:5c: 35:77:84:d0:87:9a:d7:7f:7e:f0:f7:23:73:7c:33: 01:b6:19:90:56:af:47:02:42:df:8d:62:6e:bc:76: 28:58:51:19:3b:ae:d3:36:c5:07:0f:d5:4e:0b:eb: 8d:02:82:a3:f4:c6:d4:56:b9:b5:f0:f4:8f:7d:1e: 54:c0:2a:83:07:55:1f:33:83:e4:19:bb:35:3c:64: 29:c3:16:cc:2f:a4:02:bd:38:5d:09:26:da:9b:fe: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:79:8E:5A:54:05:96:E5:B6:29:84:A4:3D:0A:A5:7B:F2:DF:3A:4B X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3b:25:26:aa:41:2b:1c:c7:1c:3a:6c:51:01:a8:dd:2e:1f: 69:18:78:df:b5:97:c2:5a:d1:18:6d:58:92:8d:91:2c:46:84: 71:45:f2:64:b0:54:ab:6e:88:08:7d:c5:4b:d4:28:10:8f:7b: 2d:8f:23:a7:ab:d2:7c:c3:9f:4b:e9:ae:a6:09:1e:dc:87:f0: 80:4e:f3:6a:9f:d8:68:20:48:bc:71:e4:56:59:a8:fe:89:56: d8:05:19:54:27:7e:2f:be:de:92:a3:57:85:63:61:f8:09:21: 99:17:a1:74:0c:3d:f5:fe:c0:ce:d2:22:e5:dc:15:db:dc:f6: 22:8d:d2:0d:a4:d9:a8:b8:8f:12:19:95:40:00:ed:42:14:3c: 30:4f:8d:37:e4:ed:7c:65:40:3e:2f:21:6d:aa:a3:cf:2e:31: 2b:d2:95:28:6f:e7:d2:7a:66:21:d8:56:c0:47:4b:36:a4:80: d4:87:9a:ee:e3:ed:a8:05:5e:73:e3:a0:23:ad:e2:1c:48:65: 2c:a0:05:01:a7:af:51:84:ce:18:4c:43:7d:4c:95:7e:05:0f: dc:db:1c:8f:2b:6d:3b:44:ed:44:ee:a2:a0:a3:a3:9f:b6:3b: dd:dd:73:3a:31:bd:f1:5d:ec:ff:58:d3:2c:44:2b:67:7a:0c: 5e:2d:76:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNjMwMTkzODE3WhcNMjUwNzA3MTkzODE3WjAYMRYwFAYD VQQDEw02ODYyZTdhOS1kMGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85xVAoGG+YZjVzxi3GWkVOJcPKtjVQ1aEsBYuZ6VGPF8T5KxnQm/Br98uWwy nFLMaiNus862XFwsM5n+d7IMOdd1BmWBrcChvwkzq7Uhl2b2V7t6gQaAbhtJOdDL BVV+oeFJGeFAerwWEIRiSrhJZ7du5ZHoHcxrnG9Qr/tPsF7TZAlPYlAWOAc8+niW U82cBMAyZLTS/FXpU4tcLRVqvPbv9lw1d4TQh5rXf37w9yNzfDMBthmQVq9HAkLf jWJuvHYoWFEZO67TNsUHD9VOC+uNAoKj9MbUVrm18PSPfR5UwCqDB1UfM4PkGbs1 PGQpwxbML6QCvThdCSbam/674wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM15jlpU BZbltimEpD0KpXvy3zpLMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVOyUmqkErHMccOmxRAajdLh9pGHjftZfCWtEYbViSjZEsRoRxRfJk sFSrbogIfcVL1CgQj3stjyOnq9J8w59L6a6mCR7ch/CATvNqn9hoIEi8ceRWWaj+ iVbYBRlUJ34vvt6So1eFY2H4CSGZF6F0DD31/sDO0iLl3BXb3PYijdINpNmouI8S GZVAAO1CFDwwT4035O18ZUA+LyFtqqPPLjEr0pUob+fSemYh2FbAR0s2pIDUh5ru 4+2oBV5z46AjreIcSGUsoAUBp69RhM4YTEN9TJV+BQ/c2xyPK207RO1E7qKgo6Of tjvd3XM6Mb3xXez/WNMsRCtnegxeLXaC -----END CERTIFICATE-----Generated at Tue Jul 1 21:21:56 2025 by rpki-client