$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: y+Vmmhkyu5QuHd6qYEm6aEFe4TAX8TI+KaE4z3db7Us= Subject key identifier: 24:D2:18:FD:7B:36:D1:1D:3D:E4:3A:88:3F:67:DB:93:0F:33:D9:EA Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: CD Signing time: Sun 29 Jun 2025 04:49:03 +0000 Manifest this update: Sun 29 Jun 2025 04:49:01 +0000 Manifest next update: Sun 06 Jul 2025 04:49:01 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: vY4Ga7RrmSiOjGCfHScwaoOUo3DUbms//b8i2DopPAw=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: rqaw6gYQFHtDXhAs9qwdnQlxs87gmG1kJR92kC6fKaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Jun 29 04:49:01 2025 GMT Not After : Jul 6 04:49:01 2025 GMT Subject: CN=6860c5bf-3404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:a7:bf:51:44:2e:37:67:23:7d:16:4c:c6: 98:dc:11:ef:74:91:62:64:e9:30:a7:e6:74:91:d3: 01:9f:de:b5:37:66:9f:db:04:ff:3d:6d:f2:1b:b3: 15:af:e1:12:e0:92:8e:ff:0b:02:9b:26:d7:cc:20: 34:2a:27:01:5a:19:8b:90:94:01:d3:9c:84:42:2b: 34:f4:77:55:d9:32:0e:3b:90:e5:4e:b7:4a:2c:09: 3e:1b:fe:f5:7a:f8:18:44:ff:c6:c2:1b:f6:8f:70: 8d:ed:3f:df:99:f3:21:23:0e:50:79:0f:d0:91:f2: 75:84:f6:4e:15:13:f8:70:65:90:7b:02:8b:54:b1: 6b:23:a6:4d:cc:6e:02:eb:c8:02:c2:9b:d4:65:af: 1e:ed:81:ae:87:6a:07:79:27:4b:c5:08:51:8a:ca: f2:4f:c7:bc:fb:35:0b:5f:fd:63:47:42:ce:3e:8b: cf:39:05:0d:34:bc:d3:ef:dd:67:bf:5c:40:d0:ff: 04:03:74:de:83:cf:b6:b7:c1:5a:2f:88:13:57:d6: ef:db:e9:25:11:e0:d0:ae:db:4c:66:29:3d:40:9b: 3e:b6:cd:80:f5:cf:87:dc:e8:71:87:37:35:c7:94: e5:53:ff:3a:0c:a8:90:50:9d:ad:2d:4e:54:18:b8: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:18:FD:7B:36:D1:1D:3D:E4:3A:88:3F:67:DB:93:0F:33:D9:EA X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a1:57:b0:38:8b:92:cc:97:e3:bb:b5:f5:bd:cd:8d:64:3d: 22:c6:af:f5:9e:41:0f:79:dc:31:52:b4:e7:fc:14:a6:7a:3f: db:d0:f4:b5:36:d7:17:b3:96:5a:8f:57:86:3a:09:6a:3d:e8: 90:5c:5c:0c:bc:75:fd:b5:62:ab:86:a4:e9:43:21:4a:1a:17: 30:d7:a6:b2:ae:87:ea:b3:16:3d:99:00:ce:3e:b3:56:50:2c: 83:65:37:e5:f2:bc:0d:56:15:30:8a:f8:d4:1e:72:38:c9:6a: 45:55:e6:89:4c:a7:32:1a:19:0a:83:30:11:5f:38:78:31:07: d7:a9:62:b4:42:c6:a5:1d:de:ac:ab:29:04:9a:d2:f0:d9:31: 86:df:4e:58:7d:88:61:1b:65:5f:bd:71:3f:a1:87:c2:ad:1d: 16:00:b0:df:4f:bc:d2:32:5b:21:57:ae:e1:70:83:be:7e:79: 75:7c:69:81:38:31:57:86:39:e3:91:a3:76:10:60:7f:2a:9f: f2:24:5c:2f:a0:6b:c6:24:2f:cf:4a:7a:22:b0:12:ba:27:99: c7:fe:9c:5d:6b:41:2b:3a:65:2d:e8:4c:bd:49:96:a7:f8:7e: dd:aa:4c:75:bf:9a:bb:ab:77:5b:5a:10:09:db:4e:75:95:a4: aa:8f:34:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUwNjI5MDQ0OTAxWhcNMjUwNzA2MDQ0OTAxWjAYMRYwFAYD VQQDEw02ODYwYzViZi0zNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOenv1FELjdnI30WTMaY3BHvdJFiZOkwp+Z0kdMBn961N2af2wT/PW3yG7MV r+ES4JKO/wsCmybXzCA0KicBWhmLkJQB05yEQis09HdV2TIOO5DlTrdKLAk+G/71 evgYRP/Gwhv2j3CN7T/fmfMhIw5QeQ/QkfJ1hPZOFRP4cGWQewKLVLFrI6ZNzG4C 68gCwpvUZa8e7YGuh2oHeSdLxQhRisryT8e8+zULX/1jR0LOPovPOQUNNLzT791n v1xA0P8EA3Teg8+2t8FaL4gTV9bv2+klEeDQrttMZik9QJs+ts2A9c+H3Ohxhzc1 x5TlU/86DKiQUJ2tLU5UGLgSqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTSGP17 NtEdPeQ6iD9n25MPM9nqMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEoVewOIuSzJfju7X1vc2NZD0ixq/1nkEPedwxUrTn/BSmej/b0PS1 NtcXs5Zaj1eGOglqPeiQXFwMvHX9tWKrhqTpQyFKGhcw16ayrofqsxY9mQDOPrNW UCyDZTfl8rwNVhUwivjUHnI4yWpFVeaJTKcyGhkKgzARXzh4MQfXqWK0QsalHd6s qykEmtLw2TGG305YfYhhG2VfvXE/oYfCrR0WALDfT7zSMlshV67hcIO+fnl1fGmB ODFXhjnjkaN2EGB/Kp/yJFwvoGvGJC/PSnoisBK6J5nH/pxda0ErOmUt6Ey9SZan +H7dqkx1v5q7q3dbWhAJ2051laSqjzQg -----END CERTIFICATE-----Generated at Mon Jun 30 18:16:25 2025 by rpki-client