$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: QNow2daymkmdyjhkl4GQvUYvNh+tKUkU2bCycyNWQLg= Subject key identifier: 9C:A2:9B:A2:5B:7A:7C:DF:8D:57:76:03:7C:BA:A7:A1:2A:48:A7:21 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0245 Signing time: Tue 01 Jul 2025 02:37:58 +0000 Manifest this update: Tue 01 Jul 2025 02:37:58 +0000 Manifest next update: Tue 08 Jul 2025 02:37:58 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: qkVwdslq6cG4p4fLtXkHlFtbwriVWxh6BXE8p3p8lV8=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Jul 1 02:37:58 2025 GMT Not After : Jul 8 02:37:58 2025 GMT Subject: CN=68634a06-f25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:81:02:fa:76:b5:59:0d:75:13:8d:c6:a2:10: 0b:70:02:67:a1:8d:05:bc:43:32:ce:54:af:28:a7: 1b:b0:2b:28:ca:a4:e3:94:fd:35:93:3d:b6:8b:77: 34:92:7f:80:c2:a3:a3:42:ab:39:f4:5f:a7:05:2c: 3d:ed:57:c9:a3:3e:95:1b:ad:5a:0b:19:6a:a2:6e: cb:e1:3a:1f:41:4b:5d:3f:3c:f5:90:9d:7e:74:d6: 7f:38:6c:7e:dc:9b:6d:a4:e7:10:27:dc:d6:5b:7f: 62:55:10:7d:2b:45:1e:da:e5:b6:9e:11:0e:92:bb: e6:92:c7:b9:16:ac:75:e7:e5:83:71:c3:29:eb:f3: fa:6d:ef:ac:8d:b6:8b:54:12:14:3a:3a:a0:8d:34: d9:99:a2:da:c6:2f:87:25:ea:36:9b:52:70:b5:40: f1:76:58:34:e4:e3:a5:9d:56:a3:dd:e1:26:86:74: 15:7c:0c:ec:11:da:d1:80:63:fe:e3:68:0c:8a:35: cc:92:94:05:00:bd:ff:71:a3:14:d8:be:57:be:ce: 56:2a:6d:af:06:0d:3c:31:11:ed:60:2b:0c:a1:67: df:8a:43:1b:c9:dc:8b:4d:e4:90:91:54:8d:69:6b: a7:39:a1:2a:c0:54:17:34:02:b5:33:fc:78:95:f3: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:9B:A2:5B:7A:7C:DF:8D:57:76:03:7C:BA:A7:A1:2A:48:A7:21 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8a:7f:81:75:60:f8:8a:97:19:df:b2:2d:a8:28:87:ab:51: 05:fb:ac:71:82:a8:25:5f:1d:74:80:50:46:fe:de:c2:ad:62: e6:ca:46:77:99:8d:de:61:d3:36:8a:07:c5:04:18:52:29:5b: 76:06:79:5d:37:d2:ba:11:9a:c6:d0:8f:f3:32:41:3c:b1:fc: d1:1b:3d:66:e5:2e:c8:1d:73:c4:f6:d9:06:2e:12:ce:27:34: 17:cd:9f:22:6a:98:f7:66:3b:aa:17:c4:60:96:4d:fb:c2:24: ca:d5:0c:f6:3f:85:be:f3:1f:7d:2f:2d:83:a8:1b:dc:8e:70: 4b:e2:0b:6c:c1:ac:3a:a6:b1:b2:db:78:c3:a5:c7:42:10:0d: e8:5d:59:f6:7e:8a:c7:45:ad:72:8d:6a:65:e2:ee:86:a5:6d: 1a:4b:a1:9a:bc:49:c4:9f:e4:0f:0b:64:e2:29:d6:5c:e5:64: 33:03:0c:b8:66:d5:ec:0f:5a:e5:6c:61:4b:fc:65:f9:19:79: 0b:d2:7c:30:74:3c:ed:9b:8a:2a:ce:ec:6d:6c:54:3f:07:3c: de:99:bb:fa:5e:3c:7f:98:de:45:6d:25:16:54:96:fa:3e:6b: dc:67:0a:3e:3e:67:11:96:9c:52:b4:b0:58:4b:cc:4b:3e:21: 37:ed:ad:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwNzAxMDIzNzU4WhcNMjUwNzA4MDIzNzU4WjAYMRYwFAYD VQQDEw02ODYzNGEwNi1mMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9YEC+na1WQ11E43GohALcAJnoY0FvEMyzlSvKKcbsCsoyqTjlP01kz22i3c0 kn+AwqOjQqs59F+nBSw97VfJoz6VG61aCxlqom7L4TofQUtdPzz1kJ1+dNZ/OGx+ 3JttpOcQJ9zWW39iVRB9K0Ue2uW2nhEOkrvmkse5Fqx15+WDccMp6/P6be+sjbaL VBIUOjqgjTTZmaLaxi+HJeo2m1JwtUDxdlg05OOlnVaj3eEmhnQVfAzsEdrRgGP+ 42gMijXMkpQFAL3/caMU2L5Xvs5WKm2vBg08MRHtYCsMoWffikMbydyLTeSQkVSN aWunOaEqwFQXNAK1M/x4lfPvHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyim6Jb enzfjVd2A3y6p6EqSKchMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZin+BdWD4ipcZ37ItqCiHq1EF+6xxgqglXx10gFBG/t7CrWLmykZ3 mY3eYdM2igfFBBhSKVt2BnldN9K6EZrG0I/zMkE8sfzRGz1m5S7IHXPE9tkGLhLO JzQXzZ8iapj3ZjuqF8Rglk37wiTK1Qz2P4W+8x99Ly2DqBvcjnBL4gtswaw6prGy 23jDpcdCEA3oXVn2forHRa1yjWpl4u6GpW0aS6GavEnEn+QPC2TiKdZc5WQzAwy4 ZtXsD1rlbGFL/GX5GXkL0nwwdDztm4oqzuxtbFQ/Bzzembv6Xjx/mN5FbSUWVJb6 PmvcZwo+PmcRlpxStLBYS8xLPiE37a0Z -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:15 2025 by rpki-client