$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: JJ8xF65J8+SrinKes99a8eT+mh6weGZreVN3qLJoRBQ= Subject key identifier: FD:2C:2A:69:59:7C:12:D3:37:5C:88:D7:5D:77:38:3F:A9:05:56:07 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 013E Signing time: Thu 19 Jun 2025 03:48:33 +0000 Manifest this update: Thu 19 Jun 2025 03:48:32 +0000 Manifest next update: Thu 26 Jun 2025 03:48:32 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: vyh6i1lRiXUjCEWdMeHSijUeVTCnqigL0fPMO3bRvXc=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Jun 19 03:48:32 2025 GMT Not After : Jun 26 03:48:32 2025 GMT Subject: CN=68538891-1417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:1d:50:70:43:e7:25:ae:40:e6:63:70:cb: cb:8e:7c:2d:6d:41:d4:40:23:6e:c9:cd:42:21:cd: 2a:d6:ee:2d:bd:a8:8b:5a:63:2f:80:ff:7e:95:2b: 3f:8c:67:7d:4a:de:a1:ff:69:48:76:19:fb:0b:6d: c1:25:cf:a5:c3:b3:2f:38:1b:ba:cc:d1:0d:d7:8a: 21:df:cd:1a:11:a4:cb:24:6f:23:e7:82:0f:e3:3e: 2f:6b:17:bb:ad:55:e9:87:f9:f7:dd:21:1c:bb:06: 88:0a:d5:75:21:6a:27:3d:d7:39:37:20:ff:2e:0b: 66:87:e0:b0:b2:bc:11:0d:59:fc:86:fc:fd:b7:02: a8:43:67:aa:0d:4f:4a:83:0a:28:a0:4d:7b:e7:b6: 68:49:02:17:c6:ec:f1:9a:9c:03:76:32:0f:c0:57: a2:b2:72:53:25:15:69:da:21:49:48:0d:5a:90:fd: ba:3e:4f:65:23:f5:26:3a:f7:db:3e:1b:b1:9b:b3: 52:7a:f1:19:e2:0f:c7:1f:ac:44:d1:0c:bb:56:dc: b8:c8:6a:29:fc:8f:ae:35:6f:a2:8a:e1:eb:7b:e8: 63:cc:d0:be:cf:a3:b8:ad:a2:b8:ee:b0:bd:64:5f: 62:cf:83:0d:18:97:c5:3f:ca:2a:06:45:fd:0a:f5: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:2A:69:59:7C:12:D3:37:5C:88:D7:5D:77:38:3F:A9:05:56:07 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d3:36:ce:cb:9b:95:eb:65:cb:6d:a5:50:5c:b2:ff:c1:05: 23:d9:c2:9c:c8:6d:f1:93:8e:d2:b2:9f:56:e1:db:ad:d3:67: 9f:c9:84:7c:7b:0b:6b:fb:3e:d2:2d:04:e6:d5:d6:5f:03:b0: 1f:23:d3:ec:79:05:57:b2:e7:15:04:f3:ed:84:1c:9a:5e:35: b7:e8:5e:ee:a1:8b:95:74:00:2c:7d:d9:15:f8:5d:25:e5:28: 1c:f9:1b:a4:5e:a7:5c:9d:3f:d1:11:17:ea:fc:96:c4:65:33: e3:6b:71:de:86:2f:72:6b:c6:07:fd:06:69:0c:0b:e0:f7:f2: 41:4a:33:89:07:7b:f3:d4:12:15:19:3d:80:c1:9f:81:74:28: a6:0c:37:88:4a:66:15:8f:bc:8a:8f:54:db:b8:d4:d8:11:41: f0:52:36:36:fb:64:0e:4e:57:f1:79:51:90:3a:91:c8:a8:7b: a4:f2:48:39:f9:e3:4d:ae:d9:bc:4e:b8:87:1c:57:24:74:1d: 02:ab:11:c8:20:4e:dc:b3:21:89:dd:3e:f5:67:95:ea:c2:a1: a3:a1:66:41:e0:85:f4:b9:7a:fb:55:96:67:66:3f:b2:07:1b: 01:6b:f0:92:88:94:aa:f9:50:92:e0:52:60:ca:28:91:60:8c: ab:c4:37:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwNjE5MDM0ODMyWhcNMjUwNjI2MDM0ODMyWjAYMRYwFAYD VQQDEw02ODUzODg5MS0xNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHIdUHBD5yWuQOZjcMvLjnwtbUHUQCNuyc1CIc0q1u4tvaiLWmMvgP9+lSs/ jGd9St6h/2lIdhn7C23BJc+lw7MvOBu6zNEN14oh380aEaTLJG8j54IP4z4vaxe7 rVXph/n33SEcuwaICtV1IWonPdc5NyD/Lgtmh+CwsrwRDVn8hvz9twKoQ2eqDU9K gwoooE1757ZoSQIXxuzxmpwDdjIPwFeisnJTJRVp2iFJSA1akP26Pk9lI/UmOvfb Phuxm7NSevEZ4g/HH6xE0Qy7Vty4yGop/I+uNW+iiuHre+hjzNC+z6O4raK47rC9 ZF9iz4MNGJfFP8oqBkX9CvWEFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0sKmlZ fBLTN1yI1113OD+pBVYHMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA30zbOy5uV62XLbaVQXLL/wQUj2cKcyG3xk47Ssp9W4dut02efyYR8 ewtr+z7SLQTm1dZfA7AfI9PseQVXsucVBPPthByaXjW36F7uoYuVdAAsfdkV+F0l 5Sgc+RukXqdcnT/RERfq/JbEZTPja3Hehi9ya8YH/QZpDAvg9/JBSjOJB3vz1BIV GT2AwZ+BdCimDDeISmYVj7yKj1TbuNTYEUHwUjY2+2QOTlfxeVGQOpHIqHuk8kg5 +eNNrtm8TriHHFckdB0CqxHIIE7csyGJ3T71Z5XqwqGjoWZB4IX0uXr7VZZnZj+y BxsBa/CSiJSq+VCS4FJgyiiRYIyrxDfU -----END CERTIFICATE-----Generated at Thu Jun 19 05:55:24 2025 by rpki-client