$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft File: _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json) Hash identifier: WrQad2+SGjV8rcaxlClHIv996JfNtS4jQUbUs07S7lg= Subject key identifier: 94:75:8B:98:A4:2B:FB:59:CA:9D:B7:1C:46:B7:C4:9C:30:B5:1E:D0 Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft Manifest number: 6F Signing time: Thu 03 Jul 2025 07:11:50 +0000 Manifest this update: Thu 03 Jul 2025 07:11:49 +0000 Manifest next update: Thu 10 Jul 2025 07:11:49 +0000 Files and hashes: 1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: sRpAIgE3xPK4NgYMKHXCCptc8hj9RurzJdX+HWwC0Cg=) 2: 8AD1FCF8BBBF11EF87907310C4F9AE02.roa (hash: Rt4bwv9SSiv+XiRqx1M1+YBUJXfxko335m5/WVQTRcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Validity Not Before: Jul 3 07:11:49 2025 GMT Not After : Jul 10 07:11:49 2025 GMT Subject: CN=68662d36-3e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:c9:9f:8e:5f:ab:59:d2:cc:1e:0d:d8:24: 58:ba:1e:68:df:1b:08:95:04:74:f4:7c:e4:c6:5f: 67:cc:2c:7d:c2:a3:81:80:52:cc:88:8c:e7:40:48: 31:05:86:4e:21:54:c0:60:79:d8:81:3c:b1:45:c9: 7c:89:df:ca:d3:28:ba:4d:07:e8:a0:c7:a3:7f:36: 26:dd:ea:c9:90:e9:8a:62:f2:df:c5:c6:8a:2d:b8: 0f:e6:b2:9d:c6:d8:34:ac:14:7c:b2:da:76:dc:87: 7f:2e:ca:ed:6c:01:f2:85:16:79:75:78:c2:75:23: ed:66:ee:5e:f3:d7:99:4e:34:e0:47:6c:e2:3c:1c: 25:08:de:c1:55:cd:6f:d8:96:9a:83:2e:96:21:11: b1:4d:cd:e5:89:69:bb:87:8b:56:ba:cb:56:5b:b3: 94:29:43:1c:7f:89:4e:82:ed:40:2d:d9:74:7b:2b: 4a:6a:fb:4a:07:ab:cd:15:8d:8a:71:6f:d1:c7:7c: 5d:ad:ce:f5:47:23:21:b2:71:ee:78:73:70:47:8b: 1f:c3:e3:b9:7b:65:cc:5e:7f:78:c9:37:07:24:03: 46:f0:3b:07:4b:65:55:65:54:2e:72:e8:d3:77:15: 86:98:d2:72:6f:de:95:95:29:81:c4:69:dd:9a:6b: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:75:8B:98:A4:2B:FB:59:CA:9D:B7:1C:46:B7:C4:9C:30:B5:1E:D0 X509v3 Authority Key Identifier: keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d9:4d:ab:87:a5:7e:b5:92:4a:0f:78:e4:99:3b:a2:35:a4: 56:85:41:5b:e4:e2:b1:c1:fe:03:f8:8a:f7:70:e3:ef:38:62: ef:a7:cc:31:55:78:db:1b:42:c9:af:ed:8b:f2:28:3f:79:f4: 4f:63:35:66:77:91:13:75:12:72:e1:9d:db:9b:cd:3b:98:14: 7d:a0:67:a5:39:83:6c:13:f9:cc:91:09:00:a1:28:e0:f8:1d: 46:1a:71:ef:ba:f7:e9:82:36:a2:a1:dd:f5:a0:b5:6c:58:83: 9c:4b:a1:54:c5:e1:2a:9c:15:56:22:3d:8c:1a:26:b7:bb:13: 0a:48:2e:ee:ed:60:9a:04:67:40:a4:8f:1f:23:9a:3c:56:68: 4d:f1:91:ca:11:64:99:24:34:7f:6d:65:bf:18:36:ac:d0:38: 05:d6:5c:66:d1:05:2f:1d:4b:4b:e1:dd:03:9f:1e:dd:6f:2c: b4:d2:05:61:45:70:cb:08:d9:0d:02:09:a3:f7:8f:7b:10:9d: 73:3d:f8:d7:12:1a:73:f0:ba:3d:0f:35:27:a2:b4:99:f7:ba: 8b:67:bc:dd:18:24:6d:39:cc:b5:da:bb:8f:c0:b8:0f:73:1e: 99:59:1e:cf:97:6b:0c:25:c8:62:d7:65:b8:71:40:bd:d7:bf: 47:70:80:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNGMTU5MzJGRkUw MUYyOTFENjAeFw0yNTA3MDMwNzExNDlaFw0yNTA3MTAwNzExNDlaMBgxFjAUBgNV BAMTDTY4NjYyZDM2LTNlMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSFMmfjl+rWdLMHg3YJFi6HmjfGwiVBHT0fOTGX2fMLH3Co4GAUsyIjOdASDEF hk4hVMBgediBPLFFyXyJ38rTKLpNB+igx6N/Nibd6smQ6Ypi8t/FxootuA/msp3G 2DSsFHyy2nbch38uyu1sAfKFFnl1eMJ1I+1m7l7z15lONOBHbOI8HCUI3sFVzW/Y lpqDLpYhEbFNzeWJabuHi1a6y1Zbs5QpQxx/iU6C7UAt2XR7K0pq+0oHq80VjYpx b9HHfF2tzvVHIyGyce54c3BHix/D47l7Zcxef3jJNwckA0bwOwdLZVVlVC5y6NN3 FYaY0nJv3pWVKYHEad2aa0RDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlHWLmKQr +1nKnbccRrfEnDC1HtAwHwYDVR0jBBgwFoAU/MSmV91TDZU6LW8/FZMv/gHykdYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCRjJCLzQ1OUU2NjZFQjc4 QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFURFpVNkxXOF9GWk12X2dIeWtk WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX01TbVY5MVREWlU2TFc4X0ZaTXZfZ0h5a2RZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC RjJCLzQ1OUU2NjZFQjc4QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFURFpV NkxXOF9GWk12X2dIeWtkWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLZTauHpX61kkoPeOSZO6I1pFaFQVvk4rHB/gP4ivdw4+84Yu+nzDFV eNsbQsmv7YvyKD959E9jNWZ3kRN1EnLhndubzTuYFH2gZ6U5g2wT+cyRCQChKOD4 HUYace+69+mCNqKh3fWgtWxYg5xLoVTF4SqcFVYiPYwaJre7EwpILu7tYJoEZ0Ck jx8jmjxWaE3xkcoRZJkkNH9tZb8YNqzQOAXWXGbRBS8dS0vh3QOfHt1vLLTSBWFF cMsI2Q0CCaP3j3sQnXM9+NcSGnPwuj0PNSeitJn3uotnvN0YJG05zLXau4/AuA9z HplZHs+XawwlyGLXZbhxQL3Xv0dwgGY= -----END CERTIFICATE-----Generated at Thu Jul 3 19:47:12 2025 by rpki-client