$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: wtVmhXLxrbemlAvwY/S+cByqyeltTv/7RXiNYwWTjgU= Subject key identifier: 2F:D6:18:E4:14:7F:06:A0:5C:DE:B4:1F:BC:85:78:D7:94:E0:F8:3E Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 1465 Signing time: Wed 02 Jul 2025 18:49:04 +0000 Manifest this update: Wed 02 Jul 2025 18:49:03 +0000 Manifest next update: Wed 09 Jul 2025 18:49:03 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: frTxtlKlB/fmzIKHIrdHIcPGDSaYpGuswNWMa7tFWXQ=) 2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: Jul 2 18:49:03 2025 GMT Not After : Jul 9 18:49:03 2025 GMT Subject: CN=68657f20-12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:b5:3b:0e:35:23:2f:61:6a:13:00:51:e9: cf:ed:f4:65:6b:bd:8d:43:b3:9a:36:a5:0e:81:dc: 7b:86:ca:0a:64:f6:ce:c6:62:16:7e:6b:db:a5:58: 34:a9:db:50:51:e6:bb:fe:42:b1:69:ff:2c:60:d3: f4:70:d2:f1:43:4b:0f:7f:0d:97:f7:48:99:09:04: 52:03:b9:01:76:ba:5d:6f:96:cc:9f:a1:b0:1e:8b: 61:a0:21:2e:ba:ad:98:b4:3f:b8:1d:5a:b3:b9:df: 32:9f:5f:61:30:c4:15:95:11:2e:53:30:bf:6d:26: 20:4a:53:93:01:d1:bb:df:0a:c8:7a:3e:ad:f2:d6: 72:ef:22:cc:22:b3:8c:bd:dc:ac:a3:16:a2:33:40: de:6c:bc:a5:81:db:b0:a4:95:2c:8c:3c:65:70:8d: 50:be:f7:d9:90:22:ed:8c:7e:ed:94:87:db:d7:e4: d7:27:34:1d:c3:06:c2:28:51:e8:00:21:1d:2f:0b: 9c:a4:bf:11:58:cc:27:06:58:c7:e2:cc:ee:80:cc: 44:47:3c:b0:2d:b3:fc:a7:f9:fc:05:ff:e8:0d:aa: c0:9a:08:46:14:7b:e7:a2:b9:bf:71:e4:69:51:94: 70:ac:5e:56:5a:b6:05:95:60:56:3b:dd:d5:d8:53: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:18:E4:14:7F:06:A0:5C:DE:B4:1F:BC:85:78:D7:94:E0:F8:3E X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fe:ec:1e:15:57:72:93:7c:19:c2:ea:39:50:d6:53:97:41: 6c:08:c0:d6:0c:3c:04:b7:b1:29:1a:5e:79:4c:e5:a6:10:1e: b8:b4:30:ea:55:40:9f:8b:b9:21:46:79:94:c9:a9:24:43:12: 73:19:74:22:f3:70:a0:ed:31:22:2d:a0:e6:82:f1:dc:e7:45: f4:b1:e5:82:c1:da:a3:82:2d:cc:e7:b3:8e:b3:b3:dc:2c:13: a1:1e:76:ac:f4:6f:0c:4f:bd:36:72:d7:fc:76:5c:1f:50:42: 59:cc:1d:51:16:d4:d9:5a:18:19:0d:ae:19:3f:de:f6:af:8f: 55:92:84:7a:09:02:dd:38:17:84:f3:34:ce:fb:e8:6b:3e:82: e2:a2:10:84:12:84:a2:8d:94:7c:43:e2:b4:ce:c3:d1:a0:92: b4:0f:95:48:ca:89:43:4f:ec:40:97:02:8f:be:af:6b:0b:a3: 5c:4e:d6:ff:a6:ab:1b:de:23:41:93:38:a7:eb:06:65:af:0f: 48:31:df:31:f3:a0:15:5c:de:8a:a1:50:33:88:c8:39:6c:64: aa:9b:a6:c9:5c:a3:a4:7e:19:38:f7:de:c7:79:fa:01:01:c5: 8e:a5:71:b9:41:7c:f9:d3:29:8c:4b:fe:9c:e2:c6:89:b3:48: ca:57:b3:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwNzAyMTg0OTAzWhcNMjUwNzA5MTg0OTAzWjAYMRYwFAYD VQQDEw02ODY1N2YyMC0xMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuam1Ow41Iy9hahMAUenP7fRla72NQ7OaNqUOgdx7hsoKZPbOxmIWfmvbpVg0 qdtQUea7/kKxaf8sYNP0cNLxQ0sPfw2X90iZCQRSA7kBdrpdb5bMn6GwHothoCEu uq2YtD+4HVqzud8yn19hMMQVlREuUzC/bSYgSlOTAdG73wrIej6t8tZy7yLMIrOM vdysoxaiM0DebLylgduwpJUsjDxlcI1QvvfZkCLtjH7tlIfb1+TXJzQdwwbCKFHo ACEdLwucpL8RWMwnBljH4szugMxERzywLbP8p/n8Bf/oDarAmghGFHvnorm/ceRp UZRwrF5WWrYFlWBWO93V2FPWFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/WGOQU fwagXN60H7yFeNeU4Pg+MB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM/uweFVdyk3wZwuo5UNZTl0FsCMDWDDwEt7EpGl55TOWmEB64tDDq VUCfi7khRnmUyakkQxJzGXQi83Cg7TEiLaDmgvHc50X0seWCwdqjgi3M57OOs7Pc LBOhHnas9G8MT702ctf8dlwfUEJZzB1RFtTZWhgZDa4ZP972r49VkoR6CQLdOBeE 8zTO++hrPoLiohCEEoSijZR8Q+K0zsPRoJK0D5VIyolDT+xAlwKPvq9rC6NcTtb/ pqsb3iNBkzin6wZlrw9IMd8x86AVXN6KoVAziMg5bGSqm6bJXKOkfhk4997HefoB AcWOpXG5QXz50ymMS/6c4saJs0jKV7PH -----END CERTIFICATE-----Generated at Thu Jul 3 17:39:26 2025 by rpki-client