$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: rZqbM/087GE9WrELO9WVFvXm5ijn+1/gTDuzOGLjZEs= Subject key identifier: 1F:C5:F8:2E:AA:CB:A2:81:3B:2F:91:89:5A:18:F4:E1:5A:74:1F:51 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 0254 Signing time: Fri 13 Jun 2025 01:19:33 +0000 Manifest this update: Fri 13 Jun 2025 01:19:32 +0000 Manifest next update: Fri 20 Jun 2025 01:19:32 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: t9U6e7aar3aXEI1GZgVjXFXyDLVnQOVc+UdK4ObpWu4=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Jun 13 01:19:32 2025 GMT Not After : Jun 20 01:19:32 2025 GMT Subject: CN=684b7ca5-4f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:a5:28:e0:91:87:4b:ab:56:a9:15:26:45: 5b:8e:24:00:b8:c2:9b:36:c3:e4:39:f2:f6:81:df: 36:86:b1:23:ec:c8:70:a3:ed:ef:5e:03:db:05:da: a0:59:bb:31:09:8c:62:c1:6a:dd:15:fa:f6:fb:97: 51:c7:6e:57:0e:9a:12:92:92:33:05:8f:3c:74:13: 99:b2:32:0b:df:95:fc:bd:69:08:d0:59:34:ec:47: cc:d2:fb:c2:ba:dc:10:32:6e:09:eb:27:10:7f:e5: d8:e1:a2:8c:68:40:de:bc:3c:60:0c:b7:d4:df:f4: 99:21:1d:1f:dc:eb:69:96:83:0a:0f:77:e8:b3:99: b7:97:21:ef:73:23:f2:a9:e8:2a:60:81:3e:4f:b3: 0d:86:ee:05:ed:73:70:3f:f9:85:15:5a:70:db:22: 29:f3:d7:d7:f9:da:7e:70:04:a4:71:89:2e:01:77: e6:e2:b2:03:d3:a8:ec:26:0b:48:45:3a:03:8d:ba: df:46:69:e9:75:8b:2e:16:5a:b6:50:b5:c5:d5:88: 49:39:07:fc:68:b1:1b:cc:52:03:05:f9:e9:19:f1: 4d:0f:2e:c0:22:ad:ac:6c:17:18:12:7c:99:a1:01: 70:89:58:ef:67:3a:0b:f6:5f:06:26:3b:82:5a:f8: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C5:F8:2E:AA:CB:A2:81:3B:2F:91:89:5A:18:F4:E1:5A:74:1F:51 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:e6:79:c8:66:ac:7a:cc:8e:7e:3d:b9:0d:56:1c:b2:fe: 57:19:4e:d8:b1:86:4a:f7:e5:2a:b8:1f:66:b4:d4:36:26:6d: c9:cf:68:17:44:50:b1:64:89:db:f2:01:b2:d7:f5:51:36:94: fa:31:b9:e2:57:74:da:47:a4:ad:a6:4b:a0:38:06:06:5c:90: ca:9c:bc:92:f4:5a:ce:21:98:77:30:b2:c0:81:f1:e4:e0:80: 45:cd:f7:78:bc:60:f9:08:c2:c2:e5:08:f1:51:22:66:69:4d: 77:a2:53:b5:b2:94:42:50:a5:30:0c:60:f4:da:a5:c1:db:a2: af:a8:6f:a6:38:4d:40:0b:44:4d:33:bd:12:a7:f9:b1:f0:58: 6b:de:0e:36:3a:fc:69:ec:fb:17:28:86:87:b6:e8:da:f4:b9: b4:b3:59:44:28:b1:2e:4a:1c:97:d9:f4:4b:32:d3:4f:ec:87: de:82:bb:7e:c1:a5:79:3d:24:98:48:52:93:1d:86:c8:fa:90: 7b:b3:07:53:23:2a:0f:59:1b:8c:b4:14:49:80:03:54:3c:a2: 94:df:17:b8:01:a2:74:87:a8:68:f2:c0:b1:78:32:54:d5:94: e5:66:f0:74:9e:db:b8:49:b8:48:c3:52:cc:a0:76:32:5e:f2: f5:89:22:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwNjEzMDExOTMyWhcNMjUwNjIwMDExOTMyWjAYMRYwFAYD VQQDEw02ODRiN2NhNS00ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQmlKOCRh0urVqkVJkVbjiQAuMKbNsPkOfL2gd82hrEj7Mhwo+3vXgPbBdqg WbsxCYxiwWrdFfr2+5dRx25XDpoSkpIzBY88dBOZsjIL35X8vWkI0Fk07EfM0vvC utwQMm4J6ycQf+XY4aKMaEDevDxgDLfU3/SZIR0f3OtploMKD3fos5m3lyHvcyPy qegqYIE+T7MNhu4F7XNwP/mFFVpw2yIp89fX+dp+cASkcYkuAXfm4rID06jsJgtI RToDjbrfRmnpdYsuFlq2ULXF1YhJOQf8aLEbzFIDBfnpGfFNDy7AIq2sbBcYEnyZ oQFwiVjvZzoL9l8GJjuCWvib6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/F+C6q y6KBOy+RiVoY9OFadB9RMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW5+Z5yGasesyOfj25DVYcsv5XGU7YsYZK9+UquB9mtNQ2Jm3Jz2gX RFCxZInb8gGy1/VRNpT6MbniV3TaR6StpkugOAYGXJDKnLyS9FrOIZh3MLLAgfHk 4IBFzfd4vGD5CMLC5QjxUSJmaU13olO1spRCUKUwDGD02qXB26KvqG+mOE1AC0RN M70Sp/mx8Fhr3g42Ovxp7PsXKIaHtuja9Lm0s1lEKLEuShyX2fRLMtNP7Ifegrt+ waV5PSSYSFKTHYbI+pB7swdTIyoPWRuMtBRJgANUPKKU3xe4AaJ0h6ho8sCxeDJU 1ZTlZvB0ntu4SbhIw1LMoHYyXvL1iSJu -----END CERTIFICATE-----Generated at Sat Jun 14 17:25:04 2025 by rpki-client