$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: z2aNXj4ocSKhc1m5bUxL2MvrRfkP+I4hPsAMIjKPsOI= Subject key identifier: B1:E6:39:BD:4D:B5:61:DA:E2:8D:1C:CF:2F:8D:08:A0:C0:33:22:57 Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F2E Signing time: Wed 02 Jul 2025 16:08:07 +0000 Manifest this update: Wed 02 Jul 2025 16:08:06 +0000 Manifest next update: Wed 09 Jul 2025 16:08:06 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: Xtl/35/c9g6FqZq/dkak/exowFKHhr+Sb3WQgWPDN28=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7995 (0x1f3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Jul 2 16:08:06 2025 GMT Not After : Jul 9 16:08:06 2025 GMT Subject: CN=68655967-ade3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:83:f1:48:83:b6:fe:80:ac:d3:5d:c3:64: 25:e5:e9:4f:ee:2e:7e:be:8f:7e:ce:d0:81:9f:d2: ac:4f:1a:7b:bf:4f:a8:5f:2b:d3:fe:06:68:59:45: 8b:35:c5:ff:71:fc:85:1d:07:91:ab:00:11:55:26: 82:24:6c:4a:16:9a:85:fe:9f:c4:ff:d3:ae:49:3b: 57:43:dc:04:19:97:0a:04:66:c8:cf:81:1c:0e:b8: fd:5f:32:d5:97:9e:51:a8:f9:cd:dd:f2:5f:44:f8: d8:7d:18:ef:84:91:3f:01:c5:17:5d:f3:c6:d7:16: a1:13:19:1c:6a:a9:3b:ab:43:3f:88:43:a9:4a:5e: 9d:61:59:cd:d6:0d:91:11:42:d6:e6:a0:1a:fd:b7: 83:88:d5:67:30:76:6d:0a:75:28:ef:03:5b:f8:89: 9c:4f:d1:cc:a3:3a:d6:db:7d:be:46:c4:62:59:4a: 62:43:f9:71:27:90:af:1b:7e:20:28:90:0f:65:26: d0:24:9f:17:9a:a1:d1:bc:69:ef:09:c0:a0:a2:a9: 49:f8:2c:69:db:e5:24:dd:35:ec:75:ab:93:46:6a: 9e:4b:bf:3f:79:24:a4:0d:7c:e8:03:06:b8:e6:9f: 9a:df:dd:ec:c0:0e:d2:e0:25:dc:79:bc:da:2a:e8: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:39:BD:4D:B5:61:DA:E2:8D:1C:CF:2F:8D:08:A0:C0:33:22:57 X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:f7:31:2d:92:bd:80:cb:4d:2b:0c:70:f6:0e:f7:5c:b7: f9:4b:35:b3:9a:6d:0a:f8:7b:8c:89:6c:5f:2c:21:91:c2:d2: 76:26:f1:af:f6:c5:f8:b4:90:d2:19:ec:1f:17:c5:91:ec:a2: f6:4f:f9:9f:f1:7e:ed:ce:3e:d5:f9:b1:8f:ff:78:e3:9f:7b: 31:4b:12:e9:1f:c6:54:88:ec:d6:a6:69:3d:28:bd:26:e4:57: 81:56:ec:b6:76:cf:05:df:2f:cb:3a:16:2b:d0:21:98:b1:c1: de:59:ed:cc:28:2d:c6:e9:30:34:51:cd:f7:4d:da:84:71:72: e1:cc:63:59:b2:23:36:c3:cb:be:4f:3c:03:5b:da:a6:1c:1a: 23:db:c1:47:22:c9:ba:ed:47:a1:bf:dc:d8:c3:ba:4c:c6:8e: c0:28:90:52:69:9a:91:55:8e:5b:f7:36:ea:89:cd:9d:a3:94: 9e:f9:dc:33:97:b2:bc:70:de:fd:f4:86:a4:19:ef:55:9e:e1: 51:ca:80:99:7d:3f:7b:5e:3b:78:f9:30:7e:90:93:b5:3b:ad: 16:f0:26:10:4e:74:b4:15:75:a2:a4:9f:87:cb:57:fe:a2:df: ee:25:04:af:83:e7:ca:bd:ce:81:ba:6f:b2:74:7b:e0:12:46: 7e:ae:d9:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUwNzAyMTYwODA2WhcNMjUwNzA5MTYwODA2WjAYMRYwFAYD VQQDEw02ODY1NTk2Ny1hZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy56D8UiDtv6ArNNdw2Ql5elP7i5+vo9+ztCBn9KsTxp7v0+oXyvT/gZoWUWL NcX/cfyFHQeRqwARVSaCJGxKFpqF/p/E/9OuSTtXQ9wEGZcKBGbIz4EcDrj9XzLV l55RqPnN3fJfRPjYfRjvhJE/AcUXXfPG1xahExkcaqk7q0M/iEOpSl6dYVnN1g2R EULW5qAa/beDiNVnMHZtCnUo7wNb+ImcT9HMozrW232+RsRiWUpiQ/lxJ5CvG34g KJAPZSbQJJ8XmqHRvGnvCcCgoqlJ+Cxp2+Uk3TXsdauTRmqeS78/eSSkDXzoAwa4 5p+a393swA7S4CXcebzaKuhz0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHmOb1N tWHa4o0czy+NCKDAMyJXMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACdfcxLZK9gMtNKwxw9g73XLf5SzWzmm0K+HuMiWxfLCGRwtJ2JvGv 9sX4tJDSGewfF8WR7KL2T/mf8X7tzj7V+bGP/3jjn3sxSxLpH8ZUiOzWpmk9KL0m 5FeBVuy2ds8F3y/LOhYr0CGYscHeWe3MKC3G6TA0Uc33TdqEcXLhzGNZsiM2w8u+ TzwDW9qmHBoj28FHIsm67Uehv9zYw7pMxo7AKJBSaZqRVY5b9zbqic2do5Se+dwz l7K8cN799IakGe9VnuFRyoCZfT97Xjt4+TB+kJO1O60W8CYQTnS0FXWipJ+Hy1f+ ot/uJQSvg+fKvc6Bum+ydHvgEkZ+rtkr -----END CERTIFICATE-----Generated at Thu Jul 3 14:31:49 2025 by rpki-client