$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: Cdx4axz/B0TO8jaa+W9tpMWYLXQTxFHMEZ8uKSgxlGc= Subject key identifier: 0B:FE:A4:6B:87:83:83:36:DC:54:29:7C:C2:3C:41:28:E9:BB:C4:F8 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 6E Signing time: Thu 03 Jul 2025 07:08:14 +0000 Manifest this update: Thu 03 Jul 2025 07:08:14 +0000 Manifest next update: Thu 10 Jul 2025 07:08:14 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: CAXvh5ZoIWBB3NMZr56ZhGS0ioHyj90qX7dGo1j46SA=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Jul 3 07:08:14 2025 GMT Not After : Jul 10 07:08:14 2025 GMT Subject: CN=68662c5e-3967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:bf:3b:aa:b8:d6:bd:dd:3d:28:9a:80:ff: 82:7e:3f:db:c4:07:60:30:92:87:61:fb:6e:9b:df: 3e:fa:4c:25:d3:70:4c:4a:4a:a3:a0:39:7b:b5:a6: 9d:56:fa:c0:f7:91:3e:57:c5:86:db:06:89:14:c3: 32:8a:4a:d8:63:d4:f7:a4:42:70:b3:31:ce:9a:0d: 01:08:ce:56:4b:d4:1c:4b:b7:b5:cb:25:5f:97:d3: 0d:9a:67:58:c2:fa:fe:37:7a:b1:00:89:56:a6:82: 81:a0:31:1d:b9:69:56:df:0c:b3:a1:5d:8b:e4:00: 6c:42:c3:5b:4b:2f:b8:eb:54:7c:de:d1:4f:88:99: 2b:25:3a:9b:a4:f7:b1:ed:98:b2:43:f7:d4:13:76: 85:6b:2f:26:31:b1:ab:92:39:72:c7:a7:c5:68:3e: c7:6d:4a:88:f5:bd:3a:43:9a:b3:5b:37:76:ea:03: 10:dd:b4:7f:07:e2:42:2a:2e:78:70:5c:fc:69:7f: be:94:2c:64:b8:fc:ec:43:c6:8b:6a:b7:57:92:22: 74:3e:60:af:91:6a:92:a4:a6:82:c7:94:c1:e0:81: 3d:29:41:a6:1c:c5:22:67:88:5c:e7:61:98:50:1e: be:c6:69:12:81:01:74:57:f3:26:36:71:77:92:22: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FE:A4:6B:87:83:83:36:DC:54:29:7C:C2:3C:41:28:E9:BB:C4:F8 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:56:1d:66:26:54:5a:8a:df:17:dd:21:13:b6:39:74:ed: 5e:4e:76:3b:fe:dd:3c:33:e8:ff:4a:36:f6:6d:6a:aa:2a:46: d1:b1:bb:96:ff:24:19:f7:74:73:42:f7:2f:4f:13:4c:d0:c5: 4a:6b:80:d1:21:30:09:87:49:70:a8:42:a9:75:ac:25:7d:71: 8c:d6:22:db:cd:61:06:d0:fa:e5:d4:bc:d9:5d:5d:38:26:c9: de:ce:d7:a6:1f:34:63:ac:af:be:5a:14:16:19:37:0f:95:fd: 00:62:90:6f:9e:33:9a:54:67:16:80:64:af:13:e9:ad:75:1c: 72:25:5f:ce:81:8a:8e:66:b2:1f:71:4a:7d:cc:c4:5e:f0:3f: e0:ed:9a:45:61:8c:b0:ed:10:5f:1c:a0:76:61:94:22:3c:33: d2:bc:0f:bf:e7:18:29:c5:fa:a4:a3:be:e9:27:9c:01:1c:f4: 6e:df:f3:20:ad:e4:b3:36:9b:c2:fe:ec:5a:8f:db:09:86:c3: c9:c4:f6:b2:8d:6f:c2:2e:7a:3f:a6:c0:a1:97:51:29:62:6a: 78:f4:a0:da:0b:d1:22:64:f4:f9:81:3a:20:9e:49:e2:a2:3d: 71:4b:ed:93:fd:86:73:07:ec:0b:19:49:bb:76:48:9e:c0:8f: ef:ad:cc:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA3MDMwNzA4MTRaFw0yNTA3MTAwNzA4MTRaMBgxFjAUBgNV BAMTDTY4NjYyYzVlLTM5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEFL87qrjWvd09KJqA/4J+P9vEB2Awkodh+26b3z76TCXTcExKSqOgOXu1pp1W +sD3kT5XxYbbBokUwzKKSthj1PekQnCzMc6aDQEIzlZL1BxLt7XLJV+X0w2aZ1jC +v43erEAiVamgoGgMR25aVbfDLOhXYvkAGxCw1tLL7jrVHze0U+ImSslOpuk97Ht mLJD99QTdoVrLyYxsauSOXLHp8VoPsdtSoj1vTpDmrNbN3bqAxDdtH8H4kIqLnhw XPxpf76ULGS4/OxDxotqt1eSInQ+YK+RapKkpoLHlMHggT0pQaYcxSJniFznYZhQ Hr7GaRKBAXRX8yY2cXeSIlStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC/6ka4eD gzbcVCl8wjxBKOm7xPgwHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUfVh1mJlRait8X3SETtjl07V5Odjv+3Twz6P9KNvZtaqoqRtGxu5b/ JBn3dHNC9y9PE0zQxUprgNEhMAmHSXCoQql1rCV9cYzWItvNYQbQ+uXUvNldXTgm yd7O16YfNGOsr75aFBYZNw+V/QBikG+eM5pUZxaAZK8T6a11HHIlX86Bio5msh9x Sn3MxF7wP+DtmkVhjLDtEF8coHZhlCI8M9K8D7/nGCnF+qSjvuknnAEc9G7f8yCt 5LM2m8L+7FqP2wmGw8nE9rKNb8Iuej+mwKGXUSlianj0oNoL0SJk9PmBOiCeSeKi PXFL7ZP9hnMH7AsZSbt2SJ7Aj++tzOA= -----END CERTIFICATE-----Generated at Fri Jul 4 08:05:17 2025 by rpki-client