$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json) Hash identifier: 0JE9CLs6dWoc3PRE5Qtc/F5wj0J2soH4uroWT2+OLCA= Subject key identifier: 21:CE:25:D5:C1:F5:89:0D:29:E8:31:BF:4A:F0:C0:01:0D:51:22:C2 Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft Manifest number: 0A04 Signing time: Wed 14 May 2025 19:58:08 +0000 Manifest this update: Wed 14 May 2025 19:58:08 +0000 Manifest next update: Wed 21 May 2025 19:58:08 +0000 Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: qtpEExVKxAOuvn6qr+HFbQ22iG7bNSkmuJLkReydBT0=) 2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Validity Not Before: May 14 19:58:08 2025 GMT Not After : May 21 19:58:08 2025 GMT Subject: CN=6824f5d0-bbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:da:cf:4f:d3:13:45:0a:9f:b3:de:7a:e9: a1:72:e3:2c:6b:65:ea:f2:e6:24:13:4d:ae:f9:0f: 41:a1:58:5a:cb:d9:f1:78:32:e0:2f:6c:84:6a:f2: 34:be:5d:48:eb:ee:22:3a:3f:37:12:5c:3b:c4:dc: 2e:99:73:13:53:43:ad:03:3f:99:3d:f3:78:31:21: cb:4b:54:24:a7:25:5d:d1:9f:4e:97:99:b1:93:bc: f2:15:76:fe:c7:1c:94:69:30:79:59:10:fb:2a:dc: d6:ac:70:1a:71:e3:9d:3e:8e:00:0a:e2:77:bb:08: 65:d5:7f:f7:7f:ad:ca:7c:6e:d8:a0:11:7a:e2:db: b0:2c:8f:32:ca:be:20:64:14:d1:c0:51:41:0f:6e: 96:04:84:95:ee:1a:9f:bd:ed:d9:46:8c:dc:c2:62: e9:9b:1e:98:f2:2e:ee:17:6d:77:f5:44:98:94:88: 88:42:d6:10:07:4c:fe:18:e6:f7:a5:04:8c:c6:c0: dd:05:a1:68:f1:0f:16:35:72:68:aa:e5:31:73:30: e4:17:cb:d1:5d:0e:40:1c:9a:29:16:ec:f3:6a:db: d3:42:4e:8a:7d:88:f2:18:a2:0d:bf:8b:a0:81:89: ae:22:50:eb:41:ce:f8:77:5b:bc:39:18:50:34:1a: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:25:D5:C1:F5:89:0D:29:E8:31:BF:4A:F0:C0:01:0D:51:22:C2 X509v3 Authority Key Identifier: keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ca:ea:39:90:c9:b0:f3:b0:a3:db:96:01:55:0b:02:5d:3c: bb:fe:90:55:e0:59:3c:07:66:48:c1:20:c8:d6:79:2b:21:44: 8f:e4:d0:19:b4:05:3d:99:ae:13:48:ba:ae:7a:04:03:7e:d9: dc:0d:d2:48:78:46:7e:b7:9a:b7:e1:20:97:e6:8e:cd:91:27: 00:c8:dd:ec:74:a8:06:bb:77:6d:b2:41:09:7f:99:9f:2a:af: 1e:dd:b6:21:bc:12:25:1d:13:2a:49:c2:67:9e:f8:e0:25:58: ba:7d:88:0f:ec:91:d3:28:b5:a7:8d:96:e7:28:01:70:e8:47: 48:a8:5d:12:91:5f:8b:54:38:9f:a5:33:10:99:06:ac:f4:8e: b5:32:d5:39:1c:f7:92:8c:43:b8:18:e9:cf:71:87:4d:4a:15: 2a:96:aa:8d:fa:13:61:53:01:2c:f6:a5:7b:a2:bb:3d:9d:cd: 5c:f6:c6:ac:e3:96:22:af:45:c8:fd:a3:c9:eb:1b:8b:79:cb: 53:75:52:7d:19:ec:14:13:70:10:bb:0b:63:62:a3:bd:83:0d: 53:4b:ef:1c:2a:27:ac:00:ee:de:77:28:93:55:8d:2f:8a:c0: 1e:41:a2:56:dd:d5:16:e6:dc:56:c6:89:f4:49:ab:70:83:a6: 44:1a:f8:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE QjIzMTFCNEYwHhcNMjUwNTE0MTk1ODA4WhcNMjUwNTIxMTk1ODA4WjAYMRYwFAYD VQQDEw02ODI0ZjVkMC1iYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZXaz0/TE0UKn7PeeumhcuMsa2Xq8uYkE02u+Q9BoVhay9nxeDLgL2yEavI0 vl1I6+4iOj83Elw7xNwumXMTU0OtAz+ZPfN4MSHLS1QkpyVd0Z9Ol5mxk7zyFXb+ xxyUaTB5WRD7KtzWrHAaceOdPo4ACuJ3uwhl1X/3f63KfG7YoBF64tuwLI8yyr4g ZBTRwFFBD26WBISV7hqfve3ZRozcwmLpmx6Y8i7uF2139USYlIiIQtYQB0z+GOb3 pQSMxsDdBaFo8Q8WNXJoquUxczDkF8vRXQ5AHJopFuzzatvTQk6KfYjyGKINv4ug gYmuIlDrQc74d1u8ORhQNBpYEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHOJdXB 9YkNKegxv0rwwAENUSLCMB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0 MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMyuo5kMmw87Cj25YBVQsCXTy7/pBV4Fk8B2ZIwSDI1nkrIUSP5NAZ tAU9ma4TSLquegQDftncDdJIeEZ+t5q34SCX5o7NkScAyN3sdKgGu3dtskEJf5mf Kq8e3bYhvBIlHRMqScJnnvjgJVi6fYgP7JHTKLWnjZbnKAFw6EdIqF0SkV+LVDif pTMQmQas9I61MtU5HPeSjEO4GOnPcYdNShUqlqqN+hNhUwEs9qV7ors9nc1c9sas 45Yir0XI/aPJ6xuLectTdVJ9GewUE3AQuwtjYqO9gw1TS+8cKiesAO7edyiTVY0v isAeQaJW3dUW5txWxon0Satwg6ZEGvhZ -----END CERTIFICATE-----Generated at Fri May 16 11:09:13 2025 by rpki-client