$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: 8b9B15K720xQDzO9PToiX8YgXENX+EMYEBwrzfH0xAs= Subject key identifier: 82:9C:5C:67:E3:0A:AA:32:A0:92:D2:97:A6:95:C1:A0:B5:BD:0F:D6 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0373 Signing time: Tue 01 Jul 2025 01:33:22 +0000 Manifest this update: Tue 01 Jul 2025 01:33:22 +0000 Manifest next update: Tue 08 Jul 2025 01:33:22 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: K51vgnL2lzUuxUF9Yy0VNd3m1GpWvsVCDcK/B53KCBA=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Jul 1 01:33:22 2025 GMT Not After : Jul 8 01:33:22 2025 GMT Subject: CN=68633ae2-3ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:c4:d2:a8:06:92:0b:59:ca:ea:1b:6c:cc: e9:96:6e:50:8b:dc:df:b8:51:d2:0e:fe:a8:cd:46: e1:6d:11:67:04:85:ec:1b:a5:02:ed:eb:a4:b5:e8: f1:eb:86:b7:dc:5f:94:58:3d:ab:5a:42:90:3e:56: f3:9f:d6:08:21:e8:9f:da:82:39:3c:f0:c2:56:ba: 39:a6:f1:8a:04:5e:39:db:9f:ff:2f:aa:ad:71:c1: 79:0c:f4:ae:4b:c3:45:c2:64:ff:36:ef:1c:9d:9d: fb:55:e1:17:bd:db:8f:be:67:d0:83:78:45:35:7b: 53:56:b6:16:4a:d7:43:4a:fb:81:36:aa:a3:86:dd: 08:ff:b8:e4:97:98:4f:af:19:7d:4a:7d:2f:e4:57: f6:50:be:56:b3:a1:31:9d:3e:b7:01:d8:75:f0:a2: c3:58:11:ad:a8:31:06:95:5e:2f:d8:a0:63:43:13: 94:c5:af:f9:0e:93:51:9d:63:70:ed:79:5b:04:ad: 22:c2:a0:9a:14:b7:c4:82:2e:b6:b1:78:94:48:0a: e2:8d:a1:70:62:30:78:e2:a0:58:a5:2d:b7:71:63: 47:fc:95:a5:55:04:4d:1c:30:93:19:e2:cb:30:de: ea:2d:41:72:fd:e0:d8:c3:3e:38:b2:0a:26:90:d4: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:5C:67:E3:0A:AA:32:A0:92:D2:97:A6:95:C1:A0:B5:BD:0F:D6 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ec:15:8a:18:8d:bf:7c:72:2d:0f:da:dd:31:e4:db:6e:7b: 48:33:6e:f4:f0:a9:47:ca:62:24:2d:32:c6:9f:7e:5d:f6:f6: 2d:63:3c:c8:f8:8e:45:13:60:dd:6e:ea:ff:30:82:e9:b9:d9: 71:f9:c1:66:13:1a:b8:72:3f:5a:bf:02:85:6d:fd:ca:ce:6d: bf:5d:1c:d3:fe:46:ef:3e:ac:48:b5:d5:d4:94:e3:6a:af:66: 0e:39:f3:22:3f:2f:09:fc:de:c0:e6:59:d3:3f:7c:fa:1d:5f: f0:23:9c:cc:19:72:a5:07:d2:27:ad:22:77:df:87:4e:18:47: b1:a7:04:21:f4:63:64:e9:e1:2c:8c:d9:60:b6:f1:6c:34:9e: 27:03:e5:db:ab:6f:55:8d:20:ac:68:98:e6:e9:c2:68:5a:17: 99:e5:59:3a:2b:1f:f5:90:79:59:09:7c:7d:c6:e5:f8:25:c2: 21:6f:14:15:cf:56:d5:3e:bc:0a:66:33:40:e6:50:17:c5:8d: 38:53:bc:60:5a:7a:d5:78:6f:ca:f6:55:69:db:1f:d0:4a:07: 1c:f1:1d:56:53:48:2b:23:61:2d:08:e3:ef:2b:a2:25:b9:7a: 09:87:c7:9a:f4:9d:61:6d:cd:90:1a:6d:6c:0a:e9:fb:35:90: 10:9d:ca:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwNzAxMDEzMzIyWhcNMjUwNzA4MDEzMzIyWjAYMRYwFAYD VQQDEw02ODYzM2FlMi0zYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ybE0qgGkgtZyuobbMzplm5Qi9zfuFHSDv6ozUbhbRFnBIXsG6UC7euktejx 64a33F+UWD2rWkKQPlbzn9YIIeif2oI5PPDCVro5pvGKBF4525//L6qtccF5DPSu S8NFwmT/Nu8cnZ37VeEXvduPvmfQg3hFNXtTVrYWStdDSvuBNqqjht0I/7jkl5hP rxl9Sn0v5Ff2UL5Ws6ExnT63Adh18KLDWBGtqDEGlV4v2KBjQxOUxa/5DpNRnWNw 7XlbBK0iwqCaFLfEgi62sXiUSArijaFwYjB44qBYpS23cWNH/JWlVQRNHDCTGeLL MN7qLUFy/eDYwz44sgomkNTeGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKcXGfj CqoyoJLSl6aVwaC1vQ/WMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy7BWKGI2/fHItD9rdMeTbbntIM2708KlHymIkLTLGn35d9vYtYzzI +I5FE2Ddbur/MILpudlx+cFmExq4cj9avwKFbf3Kzm2/XRzT/kbvPqxItdXUlONq r2YOOfMiPy8J/N7A5lnTP3z6HV/wI5zMGXKlB9InrSJ334dOGEexpwQh9GNk6eEs jNlgtvFsNJ4nA+Xbq29VjSCsaJjm6cJoWheZ5Vk6Kx/1kHlZCXx9xuX4JcIhbxQV z1bVPrwKZjNA5lAXxY04U7xgWnrVeG/K9lVp2x/QSgcc8R1WU0grI2EtCOPvK6Il uXoJh8ea9J1hbc2QGm1sCun7NZAQncqT -----END CERTIFICATE-----Generated at Thu Jul 3 00:50:52 2025 by rpki-client