$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: 7l+PAh1vTn7JaYLU2NL52OSNKTPdZo7XstrtVMe/gg8= Subject key identifier: 65:6E:46:EE:6B:FC:39:66:29:18:B9:1D:2F:84:C9:19:40:D1:23:D1 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 349B Signing time: Wed 02 Jul 2025 14:52:10 +0000 Manifest this update: Wed 02 Jul 2025 14:52:09 +0000 Manifest next update: Wed 09 Jul 2025 14:52:09 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: +G9DJ4glNWl5IalNABUdri4azyMtLqcIb9NENibDr2w=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: uVTYtUHXjzvA/dK6fjacM7pKV07g+NehzxqIMydfuDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Jul 2 14:52:09 2025 GMT Not After : Jul 9 14:52:09 2025 GMT Subject: CN=68654799-1cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:fb:e6:68:be:12:c7:86:37:78:f8:48:f5: a8:e7:b4:86:ab:64:5a:db:ac:2a:cb:28:8f:d2:90: c9:24:a2:06:6e:f2:58:78:40:37:ad:2c:e3:ca:af: a3:8c:28:c5:b1:ad:92:9b:e2:c3:6e:41:b7:f8:ed: 91:a1:02:d2:ea:19:02:0d:4b:b7:45:9f:fc:3d:1a: fa:be:6f:a2:a5:ca:de:10:10:78:15:c8:ff:7d:d7: 70:4b:f7:06:3b:57:9c:99:32:db:f8:ef:99:b0:ef: 85:6f:31:4a:0d:b2:47:11:ac:7e:3a:36:25:10:81: 98:76:e7:35:a4:c8:10:af:47:2e:21:2c:6b:61:17: 71:93:f7:96:ee:5e:4f:c9:6c:c9:55:cf:12:71:23: 37:71:2a:98:ab:24:d7:93:fa:dd:d0:21:cc:f6:14: 78:11:33:d0:40:b4:a4:dd:02:6a:83:bd:f4:dd:30: 63:b5:0e:49:4f:cd:19:43:c7:b8:ce:48:24:44:fa: 00:de:83:60:f8:e3:ea:70:15:a9:ae:db:6d:08:fc: 32:77:ab:67:fb:f6:3f:6c:f7:89:26:22:24:09:0c: 05:f2:18:f7:e7:88:a8:53:4c:0f:f3:b7:ac:41:78: 7c:34:c4:1d:b1:99:f4:78:84:b1:f2:d5:41:4d:5f: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:46:EE:6B:FC:39:66:29:18:B9:1D:2F:84:C9:19:40:D1:23:D1 X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1b:f6:7b:11:dd:13:78:51:77:98:4f:4b:80:5e:8d:7f:57: 74:af:55:97:b8:24:e3:12:e3:6d:e5:42:c5:9b:5e:3d:99:ad: 1b:c1:79:66:ef:0b:24:fd:03:ad:28:6a:9c:2b:dd:a1:9d:f1: 41:54:f4:7f:44:9f:56:12:ef:6b:b3:50:f8:55:3a:ac:a5:63: b0:15:7a:1b:6e:35:4d:29:1c:50:5e:ad:d1:fc:45:f3:12:f0: 43:a5:42:7d:03:23:19:8a:a5:db:10:d7:03:24:3e:aa:02:b1: 40:36:20:e5:2e:0a:56:61:9d:77:d3:c7:9b:be:c5:c6:08:2e: 4f:83:12:be:c9:7b:95:29:dd:a8:b1:0f:82:a2:94:c4:a8:c6: 38:5e:b8:c3:05:42:8b:f3:6e:78:0b:4b:41:80:22:ee:a3:c8: 0e:ed:69:84:81:5b:11:d3:fe:ff:19:30:68:29:a5:33:70:f4: b8:79:5a:9d:0b:5d:56:2f:14:43:f6:88:9a:e6:64:24:27:b9: a8:6f:fd:d5:b2:97:f3:35:3c:05:20:35:ee:75:31:30:60:50: f4:77:cc:6b:ba:f9:26:60:d3:95:cb:e7:03:47:1a:55:6e:28: d9:0a:bb:1b:27:b3:73:70:e5:da:44:1e:73:5a:59:70:fe:16: 2d:f0:26:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUwNzAyMTQ1MjA5WhcNMjUwNzA5MTQ1MjA5WjAYMRYwFAYD VQQDEw02ODY1NDc5OS0xY2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB/75mi+EseGN3j4SPWo57SGq2Ra26wqyyiP0pDJJKIGbvJYeEA3rSzjyq+j jCjFsa2Sm+LDbkG3+O2RoQLS6hkCDUu3RZ/8PRr6vm+ipcreEBB4Fcj/fddwS/cG O1ecmTLb+O+ZsO+FbzFKDbJHEax+OjYlEIGYduc1pMgQr0cuISxrYRdxk/eW7l5P yWzJVc8ScSM3cSqYqyTXk/rd0CHM9hR4ETPQQLSk3QJqg7303TBjtQ5JT80ZQ8e4 zkgkRPoA3oNg+OPqcBWprtttCPwyd6tn+/Y/bPeJJiIkCQwF8hj354ioU0wP87es QXh8NMQdsZn0eISx8tVBTV+XiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVuRu5r /DlmKRi5HS+EyRlA0SPRMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACG/Z7Ed0TeFF3mE9LgF6Nf1d0r1WXuCTjEuNt5ULFm149ma0bwXlm 7wsk/QOtKGqcK92hnfFBVPR/RJ9WEu9rs1D4VTqspWOwFXobbjVNKRxQXq3R/EXz EvBDpUJ9AyMZiqXbENcDJD6qArFANiDlLgpWYZ1308ebvsXGCC5PgxK+yXuVKd2o sQ+CopTEqMY4XrjDBUKL8254C0tBgCLuo8gO7WmEgVsR0/7/GTBoKaUzcPS4eVqd C11WLxRD9oia5mQkJ7mob/3VspfzNTwFIDXudTEwYFD0d8xruvkmYNOVy+cDRxpV bijZCrsbJ7NzcOXaRB5zWllw/hYt8Ca1 -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:23 2025 by rpki-client