$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: qsVXC9Koz3StfzgWJOQ9lVzZOwsikkFis/lHm+afrtI= Subject key identifier: C5:04:6B:60:57:CB:53:C8:42:F5:02:A8:79:0C:95:62:07:D3:5A:16 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 0158 Signing time: Thu 03 Jul 2025 04:09:08 +0000 Manifest this update: Thu 03 Jul 2025 04:09:08 +0000 Manifest next update: Thu 10 Jul 2025 04:09:08 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: N1vhNzfhYekW5u8K0VNNMEMMdKYfOoRFCkODUa6cHI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Jul 3 04:09:08 2025 GMT Not After : Jul 10 04:09:08 2025 GMT Subject: CN=68660264-b483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:dd:02:d8:f2:78:ce:25:03:25:69:5e:2d: 35:58:33:6c:57:db:58:4e:ba:12:2d:c0:37:ef:f6: 6e:b0:96:7b:b8:e5:43:32:44:3f:e4:c8:20:fa:ce: dd:de:b6:2a:bf:bd:4e:53:1c:51:9b:2d:cc:72:23: 07:25:34:de:20:23:4d:38:89:9e:be:95:12:ee:d2: 93:b5:34:78:62:46:08:4b:e9:2b:74:4d:11:9a:87: a2:84:b2:54:3a:72:61:11:84:0c:c3:7b:24:a2:50: 6c:00:36:ba:24:98:f0:31:eb:fa:0e:38:4c:c0:1e: 77:1c:78:b3:73:c9:97:74:c3:58:65:a6:8b:25:30: 80:d6:a6:9b:d6:68:76:52:ae:bc:46:03:08:ca:b9: 6b:1c:0c:08:c5:a1:24:59:c9:da:79:73:d3:29:7f: 3c:29:f8:af:9c:d8:31:d1:2c:cf:22:b9:46:43:dc: e6:94:09:ed:b4:1d:77:2f:e4:ca:82:55:b1:a5:55: 61:20:75:b7:b0:13:25:d6:17:ee:51:4c:b9:a0:b5: b6:ba:19:b4:28:d7:a3:61:88:51:8a:ee:2d:7b:2f: 49:c8:19:93:d2:37:ce:10:97:1a:ea:8e:e0:8d:3e: a1:81:14:5c:f4:44:5a:5c:52:68:16:90:6a:8b:98: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:6B:60:57:CB:53:C8:42:F5:02:A8:79:0C:95:62:07:D3:5A:16 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ab:44:42:f2:c5:a4:c5:d0:31:a0:20:63:af:20:d2:28:6c: 09:86:0d:9f:19:b1:63:b0:8b:4f:47:cc:8b:dd:f2:ee:eb:ab: ff:6a:bc:8a:12:5b:12:3f:84:ca:7b:18:c4:36:4c:b6:59:82: 35:b3:51:1d:db:d2:fd:17:b8:da:a5:fc:49:ec:9d:c3:6d:7a: f2:c9:17:01:36:b6:d2:68:21:79:90:75:34:7b:ab:3f:9f:78: 52:6b:0b:e6:d7:c5:0d:63:a2:9c:01:f5:db:d5:0b:b2:53:09: 34:0f:35:d3:06:79:25:a8:1f:92:99:78:83:49:54:27:e5:8e: 5a:55:4f:ad:f3:d2:2f:4f:2f:da:86:71:b7:b5:e7:67:99:1f: e2:ac:eb:c6:8a:bd:1a:5a:b1:95:86:85:39:09:4f:26:ac:b9: 89:35:68:1f:6d:c8:00:da:65:87:7d:db:82:d2:0b:af:bb:f4: c1:6d:96:04:9b:a3:26:0c:0c:4d:dc:1b:d5:b7:f4:78:b4:0e: 97:69:37:16:d2:64:f6:ac:ed:b9:d2:1e:7a:1b:84:8e:b3:72: e8:b5:a6:82:44:24:40:c5:35:22:6c:9b:f4:b9:2a:38:42:4b: 61:74:95:9e:c3:44:f2:a0:b4:8f:fa:93:54:0e:b1:7c:10:ff: 64:16:8d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUwNzAzMDQwOTA4WhcNMjUwNzEwMDQwOTA4WjAYMRYwFAYD VQQDEw02ODY2MDI2NC1iNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVHdAtjyeM4lAyVpXi01WDNsV9tYTroSLcA37/ZusJZ7uOVDMkQ/5Mgg+s7d 3rYqv71OUxxRmy3MciMHJTTeICNNOImevpUS7tKTtTR4YkYIS+krdE0RmoeihLJU OnJhEYQMw3skolBsADa6JJjwMev6DjhMwB53HHizc8mXdMNYZaaLJTCA1qab1mh2 Uq68RgMIyrlrHAwIxaEkWcnaeXPTKX88KfivnNgx0SzPIrlGQ9zmlAnttB13L+TK glWxpVVhIHW3sBMl1hfuUUy5oLW2uhm0KNejYYhRiu4tey9JyBmT0jfOEJca6o7g jT6hgRRc9ERaXFJoFpBqi5jltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUEa2BX y1PIQvUCqHkMlWIH01oWMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXq0RC8sWkxdAxoCBjryDSKGwJhg2fGbFjsItPR8yL3fLu66v/aryK ElsSP4TKexjENky2WYI1s1Ed29L9F7japfxJ7J3DbXryyRcBNrbSaCF5kHU0e6s/ n3hSawvm18UNY6KcAfXb1QuyUwk0DzXTBnklqB+SmXiDSVQn5Y5aVU+t89IvTy/a hnG3tednmR/irOvGir0aWrGVhoU5CU8mrLmJNWgfbcgA2mWHfduC0guvu/TBbZYE m6MmDAxN3BvVt/R4tA6XaTcW0mT2rO250h56G4SOs3LotaaCRCRAxTUibJv0uSo4 QkthdJWew0TyoLSP+pNUDrF8EP9kFo3f -----END CERTIFICATE-----Generated at Thu Jul 3 18:16:57 2025 by rpki-client