$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: eU9b2jCpKPzZ//a4kjCvl0xTMqEnhw8R463LUPp7Fgc= Subject key identifier: 9B:DD:49:C5:5E:C3:5D:37:C0:28:86:0F:B7:CF:E8:D5:1B:24:4C:67 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 94 Signing time: Tue 01 Jul 2025 07:11:36 +0000 Manifest this update: Tue 01 Jul 2025 07:11:35 +0000 Manifest next update: Tue 08 Jul 2025 07:11:35 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: DQCveknvR2Wot29lcWUqu+Xk9XzJEXuqdpAJSHN8Qdg=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Jul 1 07:11:35 2025 GMT Not After : Jul 8 07:11:35 2025 GMT Subject: CN=68638a28-abee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:4c:71:bf:fd:e1:64:ca:7c:33:10:f3:9c: f2:9c:33:c0:6f:da:4e:d8:65:90:50:c6:e6:1f:68: eb:55:e1:3e:91:5d:e9:59:ce:ee:f8:16:8f:b7:b1: 2a:73:98:54:e9:bd:7b:51:0d:a5:2e:06:af:4d:78: 14:00:3a:3c:bc:80:e0:42:cd:c8:e5:cc:a5:c7:68: 1f:1c:e7:51:b8:d2:2e:ee:7e:54:03:ea:5b:5f:89: 76:ca:dc:18:af:3f:6b:8f:d7:eb:c2:ab:72:a6:51: 73:ba:84:98:e5:9d:82:f3:de:79:8e:79:ae:fc:01: 5f:7e:6c:b4:05:fd:c3:b9:c4:44:01:ac:a1:7e:84: 33:b1:1d:bd:be:d5:e7:1f:70:64:2e:bc:00:b6:9f: e2:bc:75:05:5f:95:74:41:ab:85:21:e2:48:b8:9e: 15:28:9e:84:a3:35:e5:99:53:6c:53:30:ff:8a:b1: 21:f5:dd:1d:cc:6c:55:af:88:59:0d:3e:b2:2c:8d: 9b:a3:b6:4b:d2:da:48:b6:3d:b6:bc:64:74:94:22: 6c:04:a9:b0:63:c0:28:4c:4b:19:4c:49:a8:94:d5: 8d:55:b4:f9:95:be:dd:b7:ae:91:6d:30:e4:b3:e3: 2b:f9:3f:fe:5b:ed:33:a5:41:04:28:5e:fe:1b:a3: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DD:49:C5:5E:C3:5D:37:C0:28:86:0F:B7:CF:E8:D5:1B:24:4C:67 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bc:cd:5c:9a:1f:ef:6d:07:77:9f:4e:13:bd:80:1b:0f:45: 65:da:82:0e:0f:92:35:81:7a:71:b6:10:90:a4:6f:44:66:f1: ae:13:36:8d:bc:05:4a:7f:77:76:b2:28:dc:10:d4:ff:28:47: 82:d6:1f:23:b1:f7:1b:dc:40:7b:ba:32:06:a3:58:76:99:10: 20:8c:29:bb:29:ce:fe:1b:93:57:76:30:1e:39:29:60:ca:78: 47:6a:f0:7b:72:2e:72:c3:f8:9d:92:52:7c:a3:84:a9:b0:ce: 17:03:e0:11:53:d3:b8:de:b8:79:35:38:ec:bc:af:6a:e8:39: 54:12:1a:88:31:b4:01:60:22:8f:83:b0:2f:f7:87:58:29:53: 2c:b1:97:e4:c3:ef:f3:bc:9c:8d:20:fe:f3:55:03:93:3c:df: 1f:a7:09:6e:5d:70:69:c2:d5:e5:f6:92:ae:cb:9e:ce:47:91: a5:60:30:25:d2:f3:d2:03:8d:76:ae:aa:2c:9b:4d:b0:ee:69: d3:e0:fa:f4:82:dc:ab:cf:00:52:53:df:97:79:b9:0a:ab:ca: a1:03:33:32:68:95:12:68:e3:2e:9d:49:93:d7:7f:f9:5e:8a: 48:6d:2e:26:48:8d:e0:a2:1a:88:b3:f9:2f:ce:8f:c5:17:95: 3a:38:5d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4 QTAwMzc4MDkwHhcNMjUwNzAxMDcxMTM1WhcNMjUwNzA4MDcxMTM1WjAYMRYwFAYD VQQDEw02ODYzOGEyOC1hYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx09Mcb/94WTKfDMQ85zynDPAb9pO2GWQUMbmH2jrVeE+kV3pWc7u+BaPt7Eq c5hU6b17UQ2lLgavTXgUADo8vIDgQs3I5cylx2gfHOdRuNIu7n5UA+pbX4l2ytwY rz9rj9frwqtyplFzuoSY5Z2C8955jnmu/AFffmy0Bf3DucREAayhfoQzsR29vtXn H3BkLrwAtp/ivHUFX5V0QauFIeJIuJ4VKJ6EozXlmVNsUzD/irEh9d0dzGxVr4hZ DT6yLI2bo7ZL0tpItj22vGR0lCJsBKmwY8AoTEsZTEmolNWNVbT5lb7dt66RbTDk s+Mr+T/+W+0zpUEEKF7+G6Pw4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvdScVe w103wCiGD7fP6NUbJExnMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6 T2pFNi00OE91aHlLQURlQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvM1cmh/vbQd3n04TvYAbD0Vl2oIOD5I1gXpxthCQpG9EZvGuEzaN vAVKf3d2sijcENT/KEeC1h8jsfcb3EB7ujIGo1h2mRAgjCm7Kc7+G5NXdjAeOSlg ynhHavB7ci5yw/idklJ8o4SpsM4XA+ARU9O43rh5NTjsvK9q6DlUEhqIMbQBYCKP g7Av94dYKVMssZfkw+/zvJyNIP7zVQOTPN8fpwluXXBpwtXl9pKuy57OR5GlYDAl 0vPSA412rqosm02w7mnT4Pr0gtyrzwBSU9+XebkKq8qhAzMyaJUSaOMunUmT13/5 XopIbS4mSI3gohqIs/kvzo/FF5U6OF3p -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:28 2025 by rpki-client