$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: u2MKZACyZX1u2dmzed5beaAVOq5VArSZz3vDvY9ycyo= Subject key identifier: D2:09:E6:7E:70:8D:7C:18:89:E9:8E:CA:11:0E:B7:7B:DA:5B:6C:8E Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 0192 Signing time: Sun 15 Jun 2025 02:45:00 +0000 Manifest this update: Sun 15 Jun 2025 02:44:59 +0000 Manifest next update: Sun 22 Jun 2025 02:44:59 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: YdhvpntxJdfzM9sioOQFVn6hEmQAaooVl56M9jhjdjI=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Jun 15 02:44:59 2025 GMT Not After : Jun 22 02:44:59 2025 GMT Subject: CN=684e33ab-a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:a3:0a:b8:03:89:76:be:d3:d5:3e:67:8c: ef:71:8b:9b:b0:0d:ec:d6:df:55:a4:a3:de:07:85: da:82:6c:b3:61:3c:7e:38:74:bd:59:a2:00:e2:b9: ee:24:78:66:12:cb:44:1e:9e:7c:d9:f1:e8:23:04: b9:02:9f:84:c5:be:e6:bc:76:cc:f7:9e:2f:2a:27: 33:49:2b:ae:43:a3:b6:aa:c2:4d:8c:fc:cb:6c:7f: 9c:35:28:33:41:82:85:3c:f0:e6:1c:e0:6c:a2:ac: 7d:37:90:7b:a4:dd:08:39:17:17:9b:f8:1a:63:1f: e6:1f:fd:a4:75:fa:d5:31:4e:5e:4b:28:05:e6:97: 67:a9:4c:cf:1b:5b:d4:89:1d:13:cd:19:e4:fc:6d: 43:5e:76:f4:69:1d:08:97:8a:9f:8a:cc:9e:c4:2b: 07:44:91:91:ca:31:e4:52:46:f6:b5:53:99:ce:a3: c6:a8:b2:97:22:fa:3d:1d:3a:13:05:9c:10:39:f7: 40:1d:e9:f5:87:ee:94:69:eb:4c:a8:43:3b:9b:70: 81:15:00:2f:84:94:dc:c6:52:3c:10:4c:be:3f:51: cc:d6:3b:da:1b:b1:0e:4e:41:aa:23:09:df:9a:5b: 88:7c:e1:16:32:05:14:c6:d4:88:33:9a:79:a7:44: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:E6:7E:70:8D:7C:18:89:E9:8E:CA:11:0E:B7:7B:DA:5B:6C:8E X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:c4:d4:c8:44:49:41:79:78:6f:53:b3:bc:3c:32:11:0c:f1: 21:f5:c7:1d:5c:d6:82:17:32:4c:fb:38:38:49:88:ef:f9:4c: ea:30:f4:b8:94:c9:ab:12:94:1f:e0:3d:9b:40:66:dd:72:4b: d8:d6:94:93:63:b9:d0:cd:be:99:e3:43:48:79:1c:c3:cf:fc: fb:93:a1:6f:0c:2f:27:ae:3f:cf:da:1d:5b:8a:a5:7a:80:5f: 4c:ec:46:3f:8e:29:a0:85:6d:f4:ef:5d:99:c1:db:98:ef:0f: 4a:a0:8c:d9:68:bd:8d:10:3e:37:e5:05:73:06:fd:45:8b:55: 8b:9d:e8:38:eb:f7:e2:65:58:88:74:70:01:05:61:56:bd:27: 9e:26:9c:0b:d1:bb:b2:13:8d:e5:8f:eb:75:42:fe:04:1b:54: a7:8d:60:cd:85:c5:ea:4c:56:e7:8d:cf:13:39:61:ce:fc:26: 01:f3:02:9a:2c:bf:8d:48:f5:96:83:fa:5e:e0:08:f4:65:e1: e8:2b:6d:6d:98:72:a0:bc:00:6e:1e:49:50:e2:20:31:09:30: a5:53:f1:dc:e1:34:7b:9d:53:08:04:93:83:72:41:57:83:f8: 27:70:a4:d3:ec:99:61:37:cc:78:73:58:06:93:7b:13:ae:48: 83:ed:96:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwNjE1MDI0NDU5WhcNMjUwNjIyMDI0NDU5WjAYMRYwFAYD VQQDEw02ODRlMzNhYi1hMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRGjCrgDiXa+09U+Z4zvcYubsA3s1t9VpKPeB4XagmyzYTx+OHS9WaIA4rnu JHhmEstEHp582fHoIwS5Ap+Exb7mvHbM954vKiczSSuuQ6O2qsJNjPzLbH+cNSgz QYKFPPDmHOBsoqx9N5B7pN0IORcXm/gaYx/mH/2kdfrVMU5eSygF5pdnqUzPG1vU iR0TzRnk/G1DXnb0aR0Il4qfisyexCsHRJGRyjHkUkb2tVOZzqPGqLKXIvo9HToT BZwQOfdAHen1h+6UaetMqEM7m3CBFQAvhJTcxlI8EEy+P1HM1jvaG7EOTkGqIwnf mluIfOEWMgUUxtSIM5p5p0S29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIJ5n5w jXwYiemOyhEOt3vaW2yOMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfxNTIRElBeXhvU7O8PDIRDPEh9ccdXNaCFzJM+zg4SYjv+UzqMPS4 lMmrEpQf4D2bQGbdckvY1pSTY7nQzb6Z40NIeRzDz/z7k6FvDC8nrj/P2h1biqV6 gF9M7EY/jimghW30712ZwduY7w9KoIzZaL2NED435QVzBv1Fi1WLneg46/fiZViI dHABBWFWvSeeJpwL0buyE43lj+t1Qv4EG1SnjWDNhcXqTFbnjc8TOWHO/CYB8wKa LL+NSPWWg/pe4Aj0ZeHoK21tmHKgvABuHklQ4iAxCTClU/Hc4TR7nVMIBJODckFX g/gncKTT7JlhN8x4c1gGk3sTrkiD7Zah -----END CERTIFICATE-----Generated at Mon Jun 16 08:41:42 2025 by rpki-client