$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: egKAksfnxBcpBpa2/z9HikB2KNB9VMLgJctEqU/vKiM= Subject key identifier: 2C:AF:3F:04:24:EE:80:E2:96:54:EE:2D:A3:18:83:D7:D9:AD:74:73 Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 1576 Signing time: Mon 30 Jun 2025 18:41:09 +0000 Manifest this update: Mon 30 Jun 2025 18:41:09 +0000 Manifest next update: Mon 07 Jul 2025 18:41:09 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: dooDiEtINzDoqy22HueWvAm/Q6IlIoLIJT5ae7mSkNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: Jun 30 18:41:09 2025 GMT Not After : Jul 7 18:41:09 2025 GMT Subject: CN=6862da45-e0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:3c:65:15:57:8c:2f:5b:79:81:48:6a:3b: 0d:27:06:4d:da:47:5f:51:74:0f:d9:3a:e8:36:50: 99:2f:dd:55:dd:22:c8:37:dc:92:75:82:65:97:f8: 29:31:d4:dd:19:98:8f:62:38:40:41:90:79:b6:56: ba:eb:01:8b:78:62:51:3f:3f:ab:62:60:16:65:24: bf:0b:39:02:a0:d6:a4:2f:e7:d0:3d:81:bb:a6:91: 7e:65:22:73:ad:e2:b6:32:39:fa:15:a8:b3:83:0b: 92:4d:4a:be:d6:b8:44:0d:a7:85:e9:ce:2e:4d:f7: 73:30:51:4e:38:7c:f8:5a:d5:df:69:91:35:1e:4c: 5e:f7:9f:9d:4e:be:35:23:1b:3c:86:d8:48:07:82: 4c:54:04:a5:65:70:49:fd:f5:11:4b:1d:26:b8:91: 0e:bc:a6:48:1f:78:00:ff:8a:af:b7:d5:3c:15:29: 46:06:e9:da:e1:15:5a:0c:05:0d:9b:60:43:99:97: aa:fd:f9:f8:e4:e3:4c:eb:0d:24:f2:49:00:b1:20: 19:a8:54:61:fd:58:fc:be:76:61:68:0c:02:b7:06: ad:ee:5a:d4:eb:4f:ce:84:69:07:32:ce:90:64:e3: 21:59:6b:76:98:1e:ed:de:39:46:68:90:11:7f:9d: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AF:3F:04:24:EE:80:E2:96:54:EE:2D:A3:18:83:D7:D9:AD:74:73 X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:23:69:a0:35:e7:1b:d8:8a:73:db:d7:94:65:0f:66:68:15: eb:14:4c:d5:6f:35:76:62:8f:b2:f1:ba:1a:b8:2d:74:ce:e6: 96:0f:82:f0:7b:b2:3b:c0:d0:65:30:08:d3:c7:13:5c:fe:3e: 69:00:c5:5b:b0:eb:30:65:b5:fe:36:1b:89:ba:13:de:3b:8b: f1:04:51:4a:c8:40:c4:af:50:6d:bb:79:21:14:cb:b3:a5:9e: c5:0a:21:ae:0b:07:49:05:fd:ae:f8:07:6a:64:5b:c1:ca:68: 7c:34:21:c8:59:db:4c:71:af:64:5d:4c:bd:5f:5b:95:ba:90: 4e:b4:92:62:63:0c:c6:54:36:1a:29:ee:9d:65:dc:e8:0b:af: 33:b8:24:0a:78:91:2a:18:20:49:a6:3c:dc:12:7a:28:3d:59: 47:7b:31:54:4d:82:ce:cc:f0:b4:be:ac:4d:34:2b:08:1d:b9: a7:4f:05:89:a7:25:19:41:97:bf:00:43:1d:64:1c:2f:21:52: 8b:81:81:d5:a9:33:79:19:dc:02:e8:6a:aa:39:72:c1:b7:b7: 60:bb:d4:e2:b5:d0:c9:ca:af:e8:cf:64:ed:a8:40:17:00:ee: 74:be:b2:32:bc:46:6a:93:90:02:17:a8:58:fa:eb:5a:e9:a6: 5f:de:55:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjUwNjMwMTg0MTA5WhcNMjUwNzA3MTg0MTA5WjAYMRYwFAYD VQQDEw02ODYyZGE0NS1lMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF08ZRVXjC9beYFIajsNJwZN2kdfUXQP2TroNlCZL91V3SLIN9ySdYJll/gp MdTdGZiPYjhAQZB5tla66wGLeGJRPz+rYmAWZSS/CzkCoNakL+fQPYG7ppF+ZSJz reK2Mjn6FaizgwuSTUq+1rhEDaeF6c4uTfdzMFFOOHz4WtXfaZE1Hkxe95+dTr41 Ixs8hthIB4JMVASlZXBJ/fURSx0muJEOvKZIH3gA/4qvt9U8FSlGBuna4RVaDAUN m2BDmZeq/fn45ONM6w0k8kkAsSAZqFRh/Vj8vnZhaAwCtwat7lrU60/OhGkHMs6Q ZOMhWWt2mB7t3jlGaJARf53EcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyvPwQk 7oDillTuLaMYg9fZrXRzMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwI2mgNecb2Ipz29eUZQ9maBXrFEzVbzV2Yo+y8boauC10zuaWD4Lw e7I7wNBlMAjTxxNc/j5pAMVbsOswZbX+NhuJuhPeO4vxBFFKyEDEr1Btu3khFMuz pZ7FCiGuCwdJBf2u+AdqZFvBymh8NCHIWdtMca9kXUy9X1uVupBOtJJiYwzGVDYa Ke6dZdzoC68zuCQKeJEqGCBJpjzcEnooPVlHezFUTYLOzPC0vqxNNCsIHbmnTwWJ pyUZQZe/AEMdZBwvIVKLgYHVqTN5GdwC6GqqOXLBt7dgu9TitdDJyq/oz2TtqEAX AO50vrIyvEZqk5ACF6hY+uta6aZf3lUD -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:17 2025 by rpki-client