$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: emOHcecSGIx9n+3bZIAzwlo09PqcJV7IYHNd+mhWC9Q= Subject key identifier: 0F:A8:94:FB:2C:8B:44:F4:6A:FE:6C:8F:13:C7:AF:F5:B6:99:C5:F0 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 0894 Signing time: Sat 28 Jun 2025 21:11:47 +0000 Manifest this update: Sat 28 Jun 2025 21:11:46 +0000 Manifest next update: Sat 05 Jul 2025 21:11:46 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: 6/F/edxxZYNCeblxg5OSh52IJIzGFNYk/pbxRwlCVRI=) 2: 2A9266CE072011EF91900755C4F9AE02.roa (hash: yyylPx4liRdygaGzXhmeYgjo6sG/XK0XYIEyO4DIA1A=) 3: AA4C4484A9EC11EE800F7626C4F9AE02.roa (hash: 3XvxyjmJ18+MDyHbsINeBS/PyLVoir6bW8ksJcj0fKs=) 4: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (hash: rnXoLY/vGH6qwmV7thRnYiN9Hc46x1QdMXU9ME3UtD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Jun 28 21:11:46 2025 GMT Not After : Jul 5 21:11:46 2025 GMT Subject: CN=68605a92-7494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:1c:09:68:e5:d0:ba:de:f9:ee:ce:3e:94: 72:21:27:e4:80:f0:5a:f7:76:c1:22:bc:73:8c:d7: 49:d0:e1:a0:f1:8e:99:45:e3:77:22:54:9f:94:5b: f5:04:42:08:4a:9d:31:75:4e:67:2b:fe:00:b4:3d: 33:23:a4:47:60:2b:96:49:96:c9:54:26:19:64:a3: b3:4a:c9:06:b7:a7:10:98:5d:86:14:cf:2e:3d:d8: 36:7d:e1:b6:ad:bd:1f:27:78:83:46:de:4f:12:a3: 64:31:20:5b:4f:b8:78:5e:54:0e:1f:9d:c5:7a:4e: 9c:2a:f1:fe:40:62:ed:28:d0:4d:b0:d9:4f:5b:e0: 01:16:e1:39:8f:10:ed:a1:08:70:29:21:90:47:a7: 65:5f:14:ea:92:d0:73:20:5c:d1:65:97:17:4e:a6: 3c:84:68:e4:fe:5e:56:a4:e7:63:f1:39:f6:01:38: fc:2b:6a:1c:9f:2d:00:d4:96:5d:4e:e5:50:19:02: e8:e4:eb:82:f6:04:f9:ef:c9:1a:42:3a:97:3d:36: be:23:83:e3:f8:ca:7b:b4:7d:9e:6d:13:af:39:dd: d8:2a:4e:43:01:ba:8b:22:88:ef:51:ce:ab:d0:d0: 74:f1:6b:8e:70:0e:58:96:0b:d6:93:18:6c:96:ab: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:94:FB:2C:8B:44:F4:6A:FE:6C:8F:13:C7:AF:F5:B6:99:C5:F0 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4e:70:ad:fc:72:b2:f9:f7:e2:01:b6:c8:74:74:83:21:42: 6c:94:69:c8:50:aa:72:e6:32:31:5a:18:f6:50:e5:91:0e:1a: 7e:77:d0:72:c8:b7:fc:f8:95:87:ce:86:b0:d2:33:2e:47:ad: 3b:b6:a2:38:91:82:a4:73:83:48:87:32:e1:fb:d1:eb:4b:5e: bb:38:5f:b0:83:d9:c3:b4:f8:11:7e:d5:22:ed:ea:91:01:5e: 50:86:19:1f:26:87:bc:08:ce:4b:07:86:cb:1d:f6:ef:68:ba: 33:fc:ae:7f:af:18:41:72:83:88:a2:f4:ad:42:45:bb:94:cf: d3:e8:9f:02:96:63:5d:c6:ae:bd:90:97:cf:d4:e6:95:81:2c: c9:1b:00:bb:2b:45:2c:f5:4e:98:65:54:f7:3c:55:d7:44:fd: 18:d3:12:e2:07:5a:00:77:ac:e6:35:a0:17:a0:8c:a9:ad:ed: 44:1d:2a:3f:13:9a:10:a4:f5:9a:a9:de:82:93:53:a6:5a:41: 80:37:f7:d6:ed:1b:fc:51:1b:a8:ef:e7:cd:0f:47:0f:c8:c2: 2f:03:5e:6c:df:70:ed:68:ca:07:51:fb:7b:ff:cf:be:74:93: 46:10:f6:f9:bd:4f:96:ce:3d:dd:2a:24:82:7b:8a:b3:53:3c: f9:50:a4:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNjI4MjExMTQ2WhcNMjUwNzA1MjExMTQ2WjAYMRYwFAYD VQQDEw02ODYwNWE5Mi03NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxe0cCWjl0Lre+e7OPpRyISfkgPBa93bBIrxzjNdJ0OGg8Y6ZReN3IlSflFv1 BEIISp0xdU5nK/4AtD0zI6RHYCuWSZbJVCYZZKOzSskGt6cQmF2GFM8uPdg2feG2 rb0fJ3iDRt5PEqNkMSBbT7h4XlQOH53Fek6cKvH+QGLtKNBNsNlPW+ABFuE5jxDt oQhwKSGQR6dlXxTqktBzIFzRZZcXTqY8hGjk/l5WpOdj8Tn2ATj8K2ocny0A1JZd TuVQGQLo5OuC9gT578kaQjqXPTa+I4Pj+Mp7tH2ebROvOd3YKk5DAbqLIojvUc6r 0NB08WuOcA5YlgvWkxhslqtOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+olPss i0T0av5sjxPHr/W2mcXwMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFTnCt/HKy+ffiAbbIdHSDIUJslGnIUKpy5jIxWhj2UOWRDhp+d9By yLf8+JWHzoaw0jMuR607tqI4kYKkc4NIhzLh+9HrS167OF+wg9nDtPgRftUi7eqR AV5QhhkfJoe8CM5LB4bLHfbvaLoz/K5/rxhBcoOIovStQkW7lM/T6J8ClmNdxq69 kJfP1OaVgSzJGwC7K0Us9U6YZVT3PFXXRP0Y0xLiB1oAd6zmNaAXoIypre1EHSo/ E5oQpPWaqd6Ck1OmWkGAN/fW7Rv8URuo7+fND0cPyMIvA15s33DtaMoHUft7/8++ dJNGEPb5vU+Wzj3dKiSCe4qzUzz5UKSh -----END CERTIFICATE-----Generated at Mon Jun 30 19:30:15 2025 by rpki-client