$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft File: -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json) Hash identifier: ouBMoHuJ8uCHPT09FJWueaK8jqCe5qjho/84iX27wvk= Subject key identifier: D7:C3:80:ED:F1:1E:E4:8F:E3:17:DA:BB:25:DB:44:C6:D5:40:7C:A0 Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 Certificate issuer: /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft Manifest number: A6 Signing time: Tue 01 Jul 2025 06:52:28 +0000 Manifest this update: Tue 01 Jul 2025 06:52:27 +0000 Manifest next update: Tue 08 Jul 2025 06:52:27 +0000 Files and hashes: 1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: 84vAG1cvMPQUhse5czyisFzq3cKyKnLg7NYCEEhcPAg=) 2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56 Validity Not Before: Jul 1 06:52:27 2025 GMT Not After : Jul 8 06:52:27 2025 GMT Subject: CN=686385ab-c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:ff:3a:16:89:4b:41:2f:74:5d:c0:2a:48: d6:10:14:c7:df:4d:b7:f3:6c:52:e7:13:20:74:04: b4:8b:b6:f6:6f:f3:c9:ee:ac:ec:48:8f:c0:3a:38: 98:50:72:c9:fd:2d:df:16:2c:c0:63:53:1c:2e:5b: 57:2e:7d:52:63:24:cb:61:8a:b0:bc:de:5f:14:f8: c6:30:e9:4b:43:2d:4a:28:90:6b:71:d4:33:58:a3: c9:f6:59:26:5b:d6:8c:9e:3d:ee:fd:0d:93:9b:14: dc:ec:9d:0c:31:1d:8d:c6:22:22:7e:03:6b:a5:58: 78:41:4b:6b:17:19:c4:e8:cb:db:16:11:b7:4e:37: bf:74:43:54:56:b5:d3:22:22:84:4d:68:28:d9:12: 83:4f:eb:eb:5c:1d:bf:97:e2:63:43:9e:21:bd:86: 42:35:0f:c0:79:bc:80:84:87:c0:68:e7:73:96:57: 89:79:11:00:21:28:f5:08:3a:59:16:02:1f:ec:6d: 24:bf:ec:12:e5:c8:0f:2f:ba:f8:80:ff:7d:08:a9: 76:8a:09:4d:8f:ef:70:6e:81:e4:68:10:a9:f1:ff: 03:d8:33:cb:12:e3:7d:ab:16:9a:37:a9:c2:81:d0: db:a0:90:a1:cc:f6:e4:12:80:2b:f3:eb:06:70:89: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C3:80:ED:F1:1E:E4:8F:E3:17:DA:BB:25:DB:44:C6:D5:40:7C:A0 X509v3 Authority Key Identifier: keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:44:5b:3a:d1:f9:b7:ea:72:ae:ca:18:5c:01:49:8a:8c:1c: 6a:34:3c:94:14:29:ca:5f:93:ff:8b:08:44:f2:d2:b7:56:52: 24:ea:0d:27:99:ee:0a:4f:8c:c1:d6:b8:23:c5:e0:f4:99:ab: 93:4a:a1:5f:ce:4f:32:a9:c9:ee:66:3e:fe:08:5b:5a:2b:a5: a7:df:01:d3:e3:a6:3c:9f:f4:f9:28:2f:45:8c:85:41:d0:54: b9:94:94:84:02:99:39:e0:d4:b2:90:98:2c:94:48:82:72:48: fa:33:40:2a:c8:80:fd:03:fa:ae:58:bb:1c:79:02:1d:66:a5: 83:e5:57:bb:ba:da:df:8e:a5:f4:43:97:fa:d6:c4:bb:0c:29: d2:80:39:e4:62:df:c7:06:37:2d:d5:e6:ef:05:ae:ef:88:90: bb:fd:c9:72:41:da:bc:eb:f8:38:22:ea:64:93:97:61:af:cc: aa:4b:81:32:d9:03:3d:11:1c:54:9f:7e:c4:51:60:53:ee:78: c0:46:bb:27:c8:5c:d1:98:2f:e4:77:f3:4a:9c:42:d6:81:f0: 84:78:bc:89:7f:c9:d2:ff:03:28:d1:ec:71:ca:60:20:a0:15: f9:51:8d:60:81:23:82:cb:8e:dc:81:d2:3a:b8:0c:32:c3:96: 15:51:f6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCODQxMTAvBgNVBAUTKEY4NUFGRDZFNzQ1QjBBMzQ3Q0E2OTZFRThFQkMxNjdE MDhBNDRGNTYwHhcNMjUwNzAxMDY1MjI3WhcNMjUwNzA4MDY1MjI3WjAYMRYwFAYD VQQDEw02ODYzODVhYi1jMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttn/OhaJS0EvdF3AKkjWEBTH302382xS5xMgdAS0i7b2b/PJ7qzsSI/AOjiY UHLJ/S3fFizAY1McLltXLn1SYyTLYYqwvN5fFPjGMOlLQy1KKJBrcdQzWKPJ9lkm W9aMnj3u/Q2TmxTc7J0MMR2NxiIifgNrpVh4QUtrFxnE6MvbFhG3Tje/dENUVrXT IiKETWgo2RKDT+vrXB2/l+JjQ54hvYZCNQ/AebyAhIfAaOdzlleJeREAISj1CDpZ FgIf7G0kv+wS5cgPL7r4gP99CKl2iglNj+9wboHkaBCp8f8D2DPLEuN9qxaaN6nC gdDboJChzPbkEoAr8+sGcIk8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfDgO3x HuSP4xfauyXbRMbVQHygMB8GA1UdIwQYMBaAFPha/W50Wwo0fKaW7o68Fn0IpE9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4NC8wRkI0REY5QzVC QTAxMUVGOTFEMzBFNUVDNEY5QUUwMi8tRnI5Ym5SYkNqUjhwcGJ1anJ3V2ZRaWtU MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1GcjliblJiQ2pSOHBwYnVqcndXZlFpa1QxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkI4NC8wRkI0REY5QzVCQTAxMUVGOTFEMzBFNUVDNEY5QUUwMi8tRnI5Ym5SYkNq UjhwcGJ1anJ3V2ZRaWtUMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdRFs60fm36nKuyhhcAUmKjBxqNDyUFCnKX5P/iwhE8tK3VlIk6g0n me4KT4zB1rgjxeD0mauTSqFfzk8yqcnuZj7+CFtaK6Wn3wHT46Y8n/T5KC9FjIVB 0FS5lJSEApk54NSykJgslEiCckj6M0AqyID9A/quWLsceQIdZqWD5Ve7utrfjqX0 Q5f61sS7DCnSgDnkYt/HBjct1ebvBa7viJC7/clyQdq86/g4Iupkk5dhr8yqS4Ey 2QM9ERxUn37EUWBT7njARrsnyFzRmC/kd/NKnELWgfCEeLyJf8nS/wMo0exxymAg oBX5UY1ggSOCy47cgdI6uAwyw5YVUfYB -----END CERTIFICATE-----Generated at Wed Jul 2 15:04:16 2025 by rpki-client