$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: A8WxuRJ2zgpsyqJQsggrLfSE2GA9tNQfM/hUncZvPM8= Subject key identifier: 48:84:7E:8E:84:89:48:E2:33:42:6D:2E:E3:8F:B3:74:85:C5:F8:8D Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 237F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 235E Signing time: Wed 02 Jul 2025 15:56:46 +0000 Manifest this update: Wed 02 Jul 2025 15:56:45 +0000 Manifest next update: Wed 09 Jul 2025 15:56:45 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: K3XiT9om5541HIA60+gGiN128XYI6KIzZmy6Caa8JaE=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9087 (0x237f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Jul 2 15:56:45 2025 GMT Not After : Jul 9 15:56:45 2025 GMT Subject: CN=686556bd-357d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:94:11:e8:f0:be:f9:a1:b9:c1:29:0b:60: 30:f6:b2:7c:de:56:56:16:42:8d:ed:3d:d2:22:34: 6e:1c:88:f1:a0:f6:d4:45:7d:27:30:98:20:46:99: 71:85:54:df:89:0c:55:69:06:b3:84:6f:92:ec:9d: 86:52:be:f3:5e:3c:d7:cb:fd:de:68:b9:51:f3:e0: 0b:fb:cf:c2:23:46:61:de:e0:08:cc:01:01:39:e6: 37:5f:5b:35:fe:e0:2f:ec:5f:18:20:7f:4e:c0:cb: b6:4b:fc:42:fe:04:dd:b4:21:70:7e:e7:a8:6b:be: 39:0b:95:8d:97:f4:95:9b:43:15:d8:5d:7a:b5:27: 77:0e:dc:84:fd:8a:e7:69:45:1a:22:72:26:88:56: 73:02:ec:35:bd:06:de:fb:ce:ed:20:a9:81:e8:2c: c0:5a:48:85:a4:99:8a:73:a3:7d:74:6a:fe:91:2b: a3:99:ec:23:79:b1:7a:a1:71:3d:a3:07:62:8b:8f: 29:eb:68:6e:72:25:93:cc:c8:8d:00:34:98:70:86: 62:68:3e:86:26:db:c4:b4:a8:5d:63:e3:f4:e3:c9: 2c:44:f3:41:9a:f6:57:4d:d9:36:bc:28:24:ea:d5: 5e:6a:8f:03:98:44:65:d6:df:f6:5f:53:1a:f7:43: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:7E:8E:84:89:48:E2:33:42:6D:2E:E3:8F:B3:74:85:C5:F8:8D X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f1:11:ae:4a:48:d1:3c:b9:ff:40:ba:e5:a1:74:a6:1f:24: 8d:2e:21:e4:ce:0e:21:3e:9f:47:af:f9:fe:45:3d:fd:fc:fd: c6:52:eb:e8:70:db:9f:4c:95:33:11:e8:30:1c:91:44:dc:07: d1:6a:7f:14:8b:3f:42:b9:e4:f6:f2:7c:ef:63:29:17:73:b1: 55:56:d7:a2:7d:06:81:db:3b:e7:b1:38:3d:ae:c3:b9:91:d4: 1d:a5:5f:63:82:93:2a:ae:f4:6d:a3:65:e4:f5:1a:67:f4:b2: 40:35:d5:c9:6d:37:05:0c:c6:a9:05:3e:4a:e5:9c:a3:c6:d3: bd:5a:be:7f:1c:82:40:c1:a2:25:a0:05:98:19:8d:de:88:89: c9:c2:7b:2c:0f:62:d9:a0:d5:b0:73:fd:6a:85:9d:82:18:ec: e0:43:7c:3a:38:a1:09:eb:4a:ba:bd:2c:b5:95:48:30:60:37: 1d:2f:43:7f:d0:c8:26:41:fb:0c:a9:af:0c:ce:76:07:5b:21: 20:05:1d:82:eb:98:52:2d:60:17:a7:05:28:cb:f9:87:26:c0: 6d:f6:2c:fe:2f:92:ff:6b:57:df:5d:5d:ff:c1:88:a2:ee:cd: f9:43:94:62:b4:31:c6:f2:74:bb:b3:a5:64:ff:82:75:25:e7: e1:b7:4b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwNzAyMTU1NjQ1WhcNMjUwNzA5MTU1NjQ1WjAYMRYwFAYD VQQDEw02ODY1NTZiZC0zNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0GUEejwvvmhucEpC2Aw9rJ83lZWFkKN7T3SIjRuHIjxoPbURX0nMJggRplx hVTfiQxVaQazhG+S7J2GUr7zXjzXy/3eaLlR8+AL+8/CI0Zh3uAIzAEBOeY3X1s1 /uAv7F8YIH9OwMu2S/xC/gTdtCFwfueoa745C5WNl/SVm0MV2F16tSd3DtyE/Yrn aUUaInImiFZzAuw1vQbe+87tIKmB6CzAWkiFpJmKc6N9dGr+kSujmewjebF6oXE9 owdii48p62huciWTzMiNADSYcIZiaD6GJtvEtKhdY+P048ksRPNBmvZXTdk2vCgk 6tVeao8DmERl1t/2X1Ma90NgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiEfo6E iUjiM0JtLuOPs3SFxfiNMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ8RGuSkjRPLn/QLrloXSmHySNLiHkzg4hPp9Hr/n+RT39/P3GUuvo cNufTJUzEegwHJFE3AfRan8Uiz9CueT28nzvYykXc7FVVteifQaB2zvnsTg9rsO5 kdQdpV9jgpMqrvRto2Xk9Rpn9LJANdXJbTcFDMapBT5K5ZyjxtO9Wr5/HIJAwaIl oAWYGY3eiInJwnssD2LZoNWwc/1qhZ2CGOzgQ3w6OKEJ60q6vSy1lUgwYDcdL0N/ 0MgmQfsMqa8MznYHWyEgBR2C65hSLWAXpwUoy/mHJsBt9iz+L5L/a1ffXV3/wYii 7s35Q5RitDHG8nS7s6Vk/4J1Jefht0tZ -----END CERTIFICATE-----Generated at Thu Jul 3 17:41:00 2025 by rpki-client