$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft File: FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json) Hash identifier: XLa4Qe72NUEKoSUewCEhhH71XEjs8WtpBehzm4KR8yw= Subject key identifier: FD:79:0C:06:5A:C0:ED:57:C2:07:55:9E:7D:8D:CA:79:2D:F8:7E:B9 Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B Certificate issuer: /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft Manifest number: 06B9 Signing time: Wed 02 Jul 2025 22:24:31 +0000 Manifest this update: Wed 02 Jul 2025 22:24:31 +0000 Manifest next update: Wed 09 Jul 2025 22:24:31 +0000 Files and hashes: 1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: WJRai0gxan0MLT98UkAXE0Y1DmxKe/sJPmG8rs0ilLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Validity Not Before: Jul 2 22:24:31 2025 GMT Not After : Jul 9 22:24:31 2025 GMT Subject: CN=6865b19f-63df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:52:71:71:19:c6:e1:47:02:ef:6c:cf:81: eb:81:ca:55:50:e7:aa:78:b7:ca:40:3e:e0:83:eb: 73:90:80:54:d6:8e:dd:64:1e:ba:db:cb:e8:0b:4f: ba:36:68:8c:28:37:ef:51:c8:b4:60:5f:74:0c:35: 34:be:f1:70:55:03:5c:fe:09:ac:7f:98:a7:85:e3: fa:28:2b:5b:c1:44:8f:53:dd:a4:d9:6b:26:c0:ab: 19:a2:be:3e:70:0c:da:f7:58:d0:3a:96:81:45:f6: 83:54:c6:7f:7f:25:79:89:79:98:2c:55:4d:62:e3: a6:7e:6b:e4:17:e5:38:9a:b0:84:0c:76:90:d0:42: a8:a6:13:4b:12:ca:94:b7:26:ec:aa:b4:e2:1e:ef: 4c:60:12:05:97:24:0d:6b:a5:d3:bf:5e:cb:b7:c9: 19:9b:6b:08:88:fe:0e:69:f6:19:b3:41:ec:59:a5: c6:63:fc:da:1d:76:1f:11:db:4d:9f:92:8b:1e:9d: 37:40:68:b3:a0:67:fa:01:7b:36:7f:57:ec:6a:74: fb:a7:c6:8d:e7:3f:07:56:27:03:3c:84:46:f7:e3: 56:06:5a:92:80:45:97:79:2a:11:62:33:7d:28:6a: 85:5d:65:76:6b:9d:ca:04:77:68:7b:af:9e:b3:b5: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:79:0C:06:5A:C0:ED:57:C2:07:55:9E:7D:8D:CA:79:2D:F8:7E:B9 X509v3 Authority Key Identifier: keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:b9:34:09:5c:d7:28:49:5a:0b:b6:fb:3b:93:5b:95:d6: 44:44:fe:ce:01:bc:30:d9:32:39:9c:70:d9:b3:e9:24:8c:64: bf:3b:72:ee:a1:2c:5b:68:63:4b:ab:a8:48:30:9f:a0:91:0e: 0e:17:c0:1f:60:83:9c:d6:ae:26:dd:fb:5c:a8:04:f2:6a:9a: e3:13:7c:f0:61:42:24:49:fd:4c:da:39:b0:98:d2:63:14:b2: 4b:b2:e6:3a:0b:de:e3:a2:70:ed:b6:df:4a:69:c6:85:dd:a7: f9:1b:90:5b:ff:1f:28:f0:d6:d9:f9:df:69:88:49:cc:61:c7: 75:dd:30:91:f6:c8:76:76:a7:20:74:12:2b:fa:f9:c5:82:5c: 71:1f:77:a3:4e:79:a4:26:8a:36:68:45:6a:20:f6:d9:ab:aa: 21:8d:af:8b:6b:f8:27:5c:1c:f2:e4:73:04:a0:ac:87:19:2c: 39:7e:a1:82:6e:f9:0e:02:0c:02:ec:ff:40:aa:9d:69:f7:65: 40:c9:03:3d:18:78:d5:2a:b4:32:77:31:20:e3:82:65:85:e2: cb:87:3a:50:95:f2:15:39:6c:d4:17:d6:7e:cc:c1:d9:a0:f3: 4d:0b:e0:4f:6a:ec:35:3f:70:7e:71:64:3d:46:48:66:5e:84: 21:25:b9:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKDE2MzMyOUY1NzA1REU5QkMyMjM1QUM1N0Q3NTRGOTgw NzhDN0Y1MkIwHhcNMjUwNzAyMjIyNDMxWhcNMjUwNzA5MjIyNDMxWjAYMRYwFAYD VQQDEw02ODY1YjE5Zi02M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooZScXEZxuFHAu9sz4HrgcpVUOeqeLfKQD7gg+tzkIBU1o7dZB6628voC0+6 NmiMKDfvUci0YF90DDU0vvFwVQNc/gmsf5inheP6KCtbwUSPU92k2WsmwKsZor4+ cAza91jQOpaBRfaDVMZ/fyV5iXmYLFVNYuOmfmvkF+U4mrCEDHaQ0EKophNLEsqU tybsqrTiHu9MYBIFlyQNa6XTv17Lt8kZm2sIiP4OafYZs0HsWaXGY/zaHXYfEdtN n5KLHp03QGizoGf6AXs2f1fsanT7p8aN5z8HVicDPIRG9+NWBlqSgEWXeSoRYjN9 KGqFXWV2a53KBHdoe6+es7WqVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP15DAZa wO1XwgdVnn2Nynkt+H65MB8GA1UdIwQYMBaAFBYzKfVwXem8IjWsV9dU+YB4x/Ur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DMDdFMUNEMDY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZid2lOYXhYMTFUNWdIakg5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZqTXA5WEJkNmJ3aU5heFgxMVQ1Z0hqSDlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DMDdFMUNEMDY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZi d2lOYXhYMTFUNWdIakg5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAthrk0CVzXKElaC7b7O5NbldZERP7OAbww2TI5nHDZs+kkjGS/O3Lu oSxbaGNLq6hIMJ+gkQ4OF8AfYIOc1q4m3ftcqATyaprjE3zwYUIkSf1M2jmwmNJj FLJLsuY6C97jonDttt9KacaF3af5G5Bb/x8o8NbZ+d9piEnMYcd13TCR9sh2dqcg dBIr+vnFglxxH3ejTnmkJoo2aEVqIPbZq6ohja+La/gnXBzy5HMEoKyHGSw5fqGC bvkOAgwC7P9Aqp1p92VAyQM9GHjVKrQydzEg44JlheLLhzpQlfIVOWzUF9Z+zMHZ oPNNC+BPauw1P3B+cWQ9RkhmXoQhJblu -----END CERTIFICATE-----Generated at Thu Jul 3 23:20:57 2025 by rpki-client