$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: TcD5W3xbvkkvhtzIi5Zur4JZCiHMFpNrpOSBRJhRZAA= Subject key identifier: 55:E0:51:E2:58:46:0B:D8:71:07:F9:91:D1:5F:96:E4:29:9E:0B:F9 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 04EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 04E4 Signing time: Tue 01 Jul 2025 00:14:42 +0000 Manifest this update: Tue 01 Jul 2025 00:14:41 +0000 Manifest next update: Tue 08 Jul 2025 00:14:41 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: 6pzfPq1VneEjj8BIHkwnvxSWKDp1dm4O8/L6tNSZ1M8=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: F++NgZIbVXAu/P1iRFKH5as6NLrkIgPyr3KhQBuiQaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: Jul 1 00:14:41 2025 GMT Not After : Jul 8 00:14:41 2025 GMT Subject: CN=68632872-8b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:c3:6f:f0:c7:d7:06:54:af:a0:69:98:31: 5a:12:c4:1d:02:20:dc:f1:23:c9:5b:1e:0a:f8:8e: e6:cf:01:2b:41:5e:fe:18:23:65:70:c2:73:30:ee: 8f:28:cf:ad:39:08:44:eb:1e:c0:4d:4b:10:43:42: fe:9e:f0:89:cf:98:81:9e:e3:b6:5a:ae:49:a6:00: 4e:1b:0e:9a:e3:72:5a:f6:87:52:00:47:14:e0:b2: 0f:ad:54:72:f3:f6:44:2d:ad:0d:d9:7f:90:7e:ae: ee:58:af:ae:2c:c1:01:cb:19:5f:71:a2:4d:f7:74: 3f:57:4a:4a:96:f2:45:69:64:f8:db:a9:ad:9d:2b: 5f:60:1d:54:2e:6c:d5:fa:b4:ee:03:34:54:83:95: 24:2b:26:6c:26:d1:f9:f1:69:9f:de:18:de:79:33: 62:ee:82:f1:d5:8d:e7:58:52:54:0f:46:41:37:8f: 09:b6:4c:ad:de:5b:2a:6e:df:04:ae:24:da:e4:61: cf:4b:31:af:3d:12:45:4d:cc:0c:ec:7d:b2:df:ee: ec:e4:45:2c:fc:08:09:33:6d:da:3d:86:70:c4:94: c4:37:0a:b6:72:e6:eb:da:f7:06:f0:fa:4e:41:f6: 44:1c:b4:92:7a:b6:5f:c0:98:80:59:3e:f7:63:f4: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:51:E2:58:46:0B:D8:71:07:F9:91:D1:5F:96:E4:29:9E:0B:F9 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:03:dd:9a:64:84:f4:bf:1c:a7:01:e8:58:e6:f3:48:c3:ae: 22:dc:85:d7:df:65:05:a4:ef:4e:ae:06:ba:9d:a5:08:39:a5: 36:04:2e:a3:ce:03:ef:49:9e:95:6e:29:96:b6:e4:28:52:bc: 0f:08:a9:b0:93:fb:c0:bb:4f:7f:78:d9:4a:7a:f2:4e:2b:e3: 24:1a:8c:d9:22:4b:1e:e7:2c:b2:d9:5c:fd:7b:fa:c3:ae:50: 2c:14:6f:28:19:f0:d2:70:24:62:f1:ad:72:f6:fe:77:ec:6f: bc:72:d1:a4:f1:bf:f4:d0:8b:a7:6d:16:54:75:d4:ac:1b:bc: 8f:0b:bf:75:e4:f8:da:62:18:81:85:dc:cf:94:85:c7:e4:ab: a2:4b:9b:84:58:94:68:2f:c0:1c:63:9c:ea:89:b2:2b:cb:92: e9:34:38:09:57:36:41:4b:00:4b:d0:52:09:5a:82:eb:1c:4e: 08:78:1b:ca:cb:03:fa:6c:43:7c:65:02:81:8e:d0:05:74:ee: d6:2d:03:0f:3f:45:78:8d:26:7f:1e:5b:83:43:9d:a7:79:70: aa:1e:b2:fb:30:07:29:e9:71:21:16:a7:7f:29:88:9f:a8:9f: eb:93:d6:60:d6:67:b8:7d:73:3d:9c:54:46:cd:41:c8:6a:db: 2c:d7:05:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjUwNzAxMDAxNDQxWhcNMjUwNzA4MDAxNDQxWjAYMRYwFAYD VQQDEw02ODYzMjg3Mi04YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxizDb/DH1wZUr6BpmDFaEsQdAiDc8SPJWx4K+I7mzwErQV7+GCNlcMJzMO6P KM+tOQhE6x7ATUsQQ0L+nvCJz5iBnuO2Wq5JpgBOGw6a43Ja9odSAEcU4LIPrVRy 8/ZELa0N2X+Qfq7uWK+uLMEByxlfcaJN93Q/V0pKlvJFaWT426mtnStfYB1ULmzV +rTuAzRUg5UkKyZsJtH58Wmf3hjeeTNi7oLx1Y3nWFJUD0ZBN48Jtkyt3lsqbt8E riTa5GHPSzGvPRJFTcwM7H2y3+7s5EUs/AgJM23aPYZwxJTENwq2cubr2vcG8PpO QfZEHLSSerZfwJiAWT73Y/SyxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXgUeJY RgvYcQf5kdFfluQpngv5MB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJA92aZIT0vxynAehY5vNIw64i3IXX32UFpO9Orga6naUIOaU2BC6j zgPvSZ6VbimWtuQoUrwPCKmwk/vAu09/eNlKevJOK+MkGozZIkse5yyy2Vz9e/rD rlAsFG8oGfDScCRi8a1y9v537G+8ctGk8b/00IunbRZUddSsG7yPC7915PjaYhiB hdzPlIXH5KuiS5uEWJRoL8AcY5zqibIry5LpNDgJVzZBSwBL0FIJWoLrHE4IeBvK ywP6bEN8ZQKBjtAFdO7WLQMPP0V4jSZ/HluDQ52neXCqHrL7MAcp6XEhFqd/KYif qJ/rk9Zg1me4fXM9nFRGzUHIatss1wXn -----END CERTIFICATE-----Generated at Wed Jul 2 15:56:41 2025 by rpki-client