$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: pe+p2bvABiqBuojBsf2JCFcLQwosSMVSDum0t/ppGqA= Subject key identifier: E5:CC:1A:CA:E6:CE:B3:AF:55:4B:18:A5:73:A6:0D:01:F3:BF:AA:D6 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 0449 Signing time: Thu 12 Jun 2025 23:52:29 +0000 Manifest this update: Thu 12 Jun 2025 23:52:29 +0000 Manifest next update: Thu 19 Jun 2025 23:52:29 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: 4Gl6alrrwlDtEwDGdjhDTI+rQIs2tet4SOcncQbIvS8=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Jun 12 23:52:29 2025 GMT Not After : Jun 19 23:52:29 2025 GMT Subject: CN=684b683d-122e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:86:47:71:49:ed:24:42:60:3a:03:5c:73:f5: 94:c0:ef:e3:46:02:f8:65:a6:de:6a:6f:53:ce:d8: 69:39:90:80:e6:71:9f:b6:6f:f5:d5:5d:e6:21:f3: 7a:b4:29:45:b6:26:ce:c7:ad:b3:91:d3:ae:01:35: 63:33:bc:c3:83:cb:c1:c0:65:65:47:8a:d2:f7:48: 20:35:47:0f:d2:ad:ab:34:58:66:0b:f0:47:7c:32: 64:78:bf:22:84:ec:28:50:69:0a:ca:8b:86:72:87: 10:77:9a:4d:96:7d:04:ae:c2:b2:86:7f:04:01:69: 23:4f:f8:ee:33:f1:77:9a:ea:7a:a9:17:4d:86:1e: 52:b8:09:12:4a:d7:ba:67:4f:75:e3:78:cc:66:8e: 64:27:68:fc:b0:ce:22:94:86:89:b7:ec:ce:98:57: dd:89:db:14:12:d3:2e:a1:6a:dd:ec:2e:7c:b9:07: 68:14:89:8b:e5:dc:fd:b4:65:e1:ea:fb:8d:9d:1b: 90:04:28:43:9a:f9:6a:ab:ae:74:63:52:e7:6f:94: b1:96:22:97:d4:33:d8:e2:1a:01:8b:e5:41:94:72: 8a:96:66:f2:3f:1f:40:56:c4:c2:78:55:e0:2c:8b: b8:50:a1:2c:97:0e:ff:dc:02:ee:54:a9:6e:9d:81: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:1A:CA:E6:CE:B3:AF:55:4B:18:A5:73:A6:0D:01:F3:BF:AA:D6 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c2:3a:cb:8a:7c:ef:85:8e:d8:27:91:f5:c6:9e:66:0c:e8: dc:0c:1b:74:eb:ff:46:f2:45:d4:c2:53:2e:5b:93:df:ce:93: 05:4e:9c:23:cb:68:69:32:e3:2e:43:94:c8:bc:51:40:94:af: d2:01:d5:80:30:a1:89:f8:8d:2e:46:92:34:ed:ec:62:40:a9: 4a:5c:18:02:e3:59:c4:1c:51:cb:0e:77:33:3b:24:29:63:d7: a9:c0:eb:87:b4:2d:bc:3d:c8:6c:e2:da:4a:6b:66:75:43:c3: 9c:ac:b3:6c:b9:45:39:e1:6f:bf:d4:7b:3b:2d:d5:52:64:c9: 44:d9:60:05:73:ae:05:e9:3b:76:b6:e1:51:d5:e2:29:26:24: 74:95:6a:49:8b:85:12:34:8f:dc:62:17:fa:f6:00:39:0b:a1: d8:7a:7a:8d:0b:55:ee:59:ce:45:5e:b0:8c:77:a6:9d:74:dc: d3:35:28:7c:0b:15:6e:cc:60:76:20:c1:f4:0f:df:a5:23:14: a7:10:17:46:c0:05:e2:a2:eb:96:13:3f:77:18:3c:1b:c2:62: 2c:54:63:4f:a2:dd:a3:48:0e:79:ab:5a:93:1a:03:1a:ba:cb: ab:e1:75:dc:98:1c:4c:e7:82:c0:f6:ea:d9:b4:2c:82:73:9b: 71:7b:fb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwNjEyMjM1MjI5WhcNMjUwNjE5MjM1MjI5WjAYMRYwFAYD VQQDEw02ODRiNjgzZC0xMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44ZHcUntJEJgOgNcc/WUwO/jRgL4Zabeam9TzthpOZCA5nGftm/11V3mIfN6 tClFtibOx62zkdOuATVjM7zDg8vBwGVlR4rS90ggNUcP0q2rNFhmC/BHfDJkeL8i hOwoUGkKyouGcocQd5pNln0ErsKyhn8EAWkjT/juM/F3mup6qRdNhh5SuAkSSte6 Z09143jMZo5kJ2j8sM4ilIaJt+zOmFfdidsUEtMuoWrd7C58uQdoFImL5dz9tGXh 6vuNnRuQBChDmvlqq650Y1Lnb5SxliKX1DPY4hoBi+VBlHKKlmbyPx9AVsTCeFXg LIu4UKEslw7/3ALuVKlunYGJkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXMGsrm zrOvVUsYpXOmDQHzv6rWMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYwjrLinzvhY7YJ5H1xp5mDOjcDBt06/9G8kXUwlMuW5PfzpMFTpwj y2hpMuMuQ5TIvFFAlK/SAdWAMKGJ+I0uRpI07exiQKlKXBgC41nEHFHLDnczOyQp Y9epwOuHtC28Pchs4tpKa2Z1Q8OcrLNsuUU54W+/1Hs7LdVSZMlE2WAFc64F6Tt2 tuFR1eIpJiR0lWpJi4USNI/cYhf69gA5C6HYenqNC1XuWc5FXrCMd6addNzTNSh8 CxVuzGB2IMH0D9+lIxSnEBdGwAXiouuWEz93GDwbwmIsVGNPot2jSA55q1qTGgMa usur4XXcmBxM54LA9urZtCyCc5txe/vV -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:56 2025 by rpki-client