$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: 8e136Tkx4NxYF8veRQwC+nhDAtExlS52SZkL46H9lu4= Subject key identifier: 7B:B1:8E:4B:46:65:B6:FC:7D:73:73:56:09:04:46:EF:FD:8C:2F:BC Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 05A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 0594 Signing time: Sat 28 Jun 2025 22:52:26 +0000 Manifest this update: Sat 28 Jun 2025 22:52:25 +0000 Manifest next update: Sat 05 Jul 2025 22:52:25 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: ZZdTEzlecBCO/b0KtW3xInTiqBQngsX7/eUg+kdDUzY=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1441 (0x5a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Jun 28 22:52:25 2025 GMT Not After : Jul 5 22:52:25 2025 GMT Subject: CN=68607229-69de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:b7:47:25:bf:75:7b:b1:d3:77:79:f0:1a: 86:1d:6a:52:46:4a:39:95:52:d6:5c:af:89:4c:cf: 99:bf:84:ce:51:74:fe:e6:97:e3:c5:00:28:72:63: c4:6c:7d:63:00:fa:17:23:48:2a:e3:2c:70:da:1a: 1d:9a:68:db:21:2a:78:01:ba:5d:ce:69:17:5a:10: 1f:29:7e:8c:11:08:ad:a3:7c:7d:37:7f:16:a8:a5: ad:d2:2c:98:f7:07:20:be:59:da:b7:e4:cf:35:84: bb:a4:d4:b5:00:ef:59:0c:31:c8:7e:61:86:94:66: 33:c9:40:f4:d6:c9:98:20:7b:42:74:1b:4b:36:b7: 33:1f:57:cd:5c:a0:96:fc:2b:1c:a6:88:40:7b:e8: ad:e9:0d:77:a6:20:ec:ce:ba:14:45:4c:ed:53:0b: 60:a1:c9:f8:39:6f:0f:f5:59:2a:bc:9b:1f:81:e2: 51:93:c9:e8:ad:49:93:b6:4a:58:88:e3:fb:ef:a9: 9d:f7:bf:6e:76:e4:07:36:42:29:79:0f:34:20:ed: 01:74:7a:f8:14:ee:48:c9:67:d1:9e:f3:88:e0:3c: e4:9f:7b:6a:fe:e5:24:93:28:3d:dc:f4:fa:3f:9c: 9f:53:1a:62:2d:20:3f:2c:32:9b:97:a3:44:4b:3a: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:8E:4B:46:65:B6:FC:7D:73:73:56:09:04:46:EF:FD:8C:2F:BC X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:44:54:84:a1:8f:4d:16:d7:b5:05:a1:6e:2e:e6:17:d3:27: fb:5b:20:2b:f4:6a:f4:d1:7f:ef:03:61:71:59:3a:14:8a:d2: b7:ea:11:33:79:2c:52:e4:bd:e9:06:01:dd:09:ac:9c:62:a5: 64:91:6d:67:bf:0b:71:a7:ed:6c:f7:18:e9:4d:10:00:b8:73: 5a:02:bf:72:c1:3c:a8:a6:8b:7b:66:b1:05:ac:41:57:7a:d5: a3:63:4e:25:eb:cd:b6:58:f6:d1:cb:ef:7f:53:1c:58:07:fe: b7:d9:b1:d1:89:f1:c2:ad:f5:2a:59:91:7b:cf:f4:c5:50:49: 64:f6:3c:13:3b:99:cc:73:c0:9e:bc:43:78:9d:6d:d8:5c:93: b5:b3:cd:3a:6c:5f:d2:16:dd:fe:6d:6c:d8:51:cc:9a:9e:3a: 3c:d0:3e:a7:fd:1c:86:d4:ba:5a:17:f8:ab:96:39:08:69:1f: 5e:4d:59:e6:6a:b0:dd:c0:7e:9e:a1:07:5b:18:c2:80:92:68: 75:6c:02:73:68:bf:a6:1b:47:d9:5f:2a:0c:54:7e:3d:59:7e: e8:f7:18:23:b0:73:4d:4d:92:94:6d:6b:d1:6a:7a:a0:3f:6b: fe:40:71:2b:c2:ff:eb:5e:df:60:68:cb:01:20:18:bd:91:20: 56:d9:26:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwNjI4MjI1MjI1WhcNMjUwNzA1MjI1MjI1WjAYMRYwFAYD VQQDEw02ODYwNzIyOS02OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Tq3RyW/dXux03d58BqGHWpSRko5lVLWXK+JTM+Zv4TOUXT+5pfjxQAocmPE bH1jAPoXI0gq4yxw2hodmmjbISp4AbpdzmkXWhAfKX6MEQito3x9N38WqKWt0iyY 9wcgvlnat+TPNYS7pNS1AO9ZDDHIfmGGlGYzyUD01smYIHtCdBtLNrczH1fNXKCW /CscpohAe+it6Q13piDszroURUztUwtgocn4OW8P9VkqvJsfgeJRk8norUmTtkpY iOP776md979uduQHNkIpeQ80IO0BdHr4FO5IyWfRnvOI4Dzkn3tq/uUkkyg93PT6 P5yfUxpiLSA/LDKbl6NESzrt2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuxjktG Zbb8fXNzVgkERu/9jC+8MB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAORFSEoY9NFte1BaFuLuYX0yf7WyAr9Gr00X/vA2FxWToUitK36hEz eSxS5L3pBgHdCaycYqVkkW1nvwtxp+1s9xjpTRAAuHNaAr9ywTyopot7ZrEFrEFX etWjY04l6822WPbRy+9/UxxYB/632bHRifHCrfUqWZF7z/TFUElk9jwTO5nMc8Ce vEN4nW3YXJO1s806bF/SFt3+bWzYUcyanjo80D6n/RyG1LpaF/irljkIaR9eTVnm arDdwH6eoQdbGMKAkmh1bAJzaL+mG0fZXyoMVH49WX7o9xgjsHNNTZKUbWvRanqg P2v+QHErwv/rXt9gaMsBIBi9kSBW2SYN -----END CERTIFICATE-----Generated at Mon Jun 30 23:47:05 2025 by rpki-client