$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: xNFLR0Cf23Q9yVXqozZZjXLTitpyukUTrLhV7x7fIw4= Subject key identifier: 56:9B:73:FD:06:68:0B:05:51:9D:8F:B5:6F:FC:12:96:BA:1E:0E:3B Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 0798 Signing time: Thu 12 Jun 2025 21:02:01 +0000 Manifest this update: Thu 12 Jun 2025 21:02:01 +0000 Manifest next update: Thu 19 Jun 2025 21:02:01 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: nEnbuD5sLTpyFeVc6UCySt6nPAg6Y3yQx2cLdjQn5cQ=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Jun 12 21:02:01 2025 GMT Not After : Jun 19 21:02:01 2025 GMT Subject: CN=684b4049-6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:ef:39:2a:97:3a:1a:4d:e1:c2:6f:f9:68: 39:fd:d5:cd:9f:61:5e:11:b4:ee:33:db:73:b0:e2: dc:a0:50:a3:08:9b:ff:e3:83:6a:79:4c:4c:c6:36: c9:ce:3f:f9:fb:5d:c1:92:e6:08:ff:80:ab:8c:20: 9c:6c:b0:87:62:04:fa:e7:3b:62:cf:ef:16:af:e3: 85:00:39:6e:bf:6e:87:3a:9f:19:a9:2b:4b:f5:8f: 55:c7:ba:04:68:8a:93:d4:23:6d:b0:a1:b1:54:de: 87:03:25:ea:94:c2:71:49:77:bd:de:f2:70:27:a4: b8:fe:1e:73:bd:74:36:f3:21:19:7f:3a:3b:f5:a6: 7e:95:79:fd:93:4c:8f:e2:6e:98:78:68:bd:07:4a: f5:82:25:f0:3d:b1:ef:05:ac:d0:ec:69:a4:35:47: 29:6d:3e:dc:33:5a:8f:5c:28:a6:81:a5:98:e3:3d: 0a:27:76:c8:5d:29:1d:2d:cb:54:d8:4b:ec:b1:41: ca:3d:6c:a5:f5:61:53:42:6a:b3:48:1c:12:f7:cf: 16:4d:48:16:f2:f4:60:3a:c4:95:27:e3:c4:50:d8: 3a:c0:8e:b9:f9:3b:2a:fb:d9:ee:2c:72:c9:56:c1: 4f:60:d6:a0:d3:07:8f:37:44:18:8a:d4:4b:cf:7b: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:73:FD:06:68:0B:05:51:9D:8F:B5:6F:FC:12:96:BA:1E:0E:3B X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:11:90:d1:40:0c:62:70:bf:db:7b:90:57:de:75:e3:ee:e7: 72:57:46:89:65:b5:b5:f4:e0:52:cd:e2:7c:0d:3a:b3:6a:25: 1a:72:38:f2:00:7b:a8:2f:b9:41:73:f4:2a:36:68:57:da:f0: e9:1c:4b:c9:39:5d:69:6c:f7:6d:95:97:51:c2:c0:12:69:87: a2:6a:8b:be:29:7a:41:e3:e7:aa:20:c7:21:2c:24:f3:09:b1: 80:09:49:f0:d4:86:d3:59:58:83:61:eb:bb:ed:9b:7e:bb:b5: 37:4e:55:a5:c2:ef:80:73:41:58:cd:e6:48:82:ab:0d:71:eb: b2:27:e5:8c:6b:d6:bf:dd:2c:b9:6f:ec:bc:80:9f:df:37:20: f4:72:99:d2:59:d2:9a:8c:bf:56:c5:15:e5:5c:b6:dc:5c:c2: de:50:9c:e7:aa:90:ab:1f:6b:f0:9b:d3:8d:fc:c3:ad:f2:f1: 4e:48:f5:e4:22:3f:39:87:37:2a:c9:3c:82:50:3f:da:83:d5: bf:6b:11:f2:87:c0:af:a0:4d:dc:f2:5e:41:33:7d:b9:55:28: 86:85:2b:7f:d1:5d:4a:98:6e:ef:10:9c:bc:35:47:64:2c:23: cc:82:37:fb:d8:c0:6d:43:41:57:ef:a6:95:4b:6c:a6:70:4b: 4f:87:11:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUwNjEyMjEwMjAxWhcNMjUwNjE5MjEwMjAxWjAYMRYwFAYD VQQDEw02ODRiNDA0OS02NDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oTvOSqXOhpN4cJv+Wg5/dXNn2FeEbTuM9tzsOLcoFCjCJv/44NqeUxMxjbJ zj/5+13BkuYI/4CrjCCcbLCHYgT65ztiz+8Wr+OFADluv26HOp8ZqStL9Y9Vx7oE aIqT1CNtsKGxVN6HAyXqlMJxSXe93vJwJ6S4/h5zvXQ28yEZfzo79aZ+lXn9k0yP 4m6YeGi9B0r1giXwPbHvBazQ7GmkNUcpbT7cM1qPXCimgaWY4z0KJ3bIXSkdLctU 2EvssUHKPWyl9WFTQmqzSBwS988WTUgW8vRgOsSVJ+PEUNg6wI65+Tsq+9nuLHLJ VsFPYNag0wePN0QYitRLz3t7wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFabc/0G aAsFUZ2PtW/8Epa6Hg47MB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcEZDRQAxicL/be5BX3nXj7udyV0aJZbW19OBSzeJ8DTqzaiUacjjy AHuoL7lBc/QqNmhX2vDpHEvJOV1pbPdtlZdRwsASaYeiaou+KXpB4+eqIMchLCTz CbGACUnw1IbTWViDYeu77Zt+u7U3TlWlwu+Ac0FYzeZIgqsNceuyJ+WMa9a/3Sy5 b+y8gJ/fNyD0cpnSWdKajL9WxRXlXLbcXMLeUJznqpCrH2vwm9ON/MOt8vFOSPXk Ij85hzcqyTyCUD/ag9W/axHyh8CvoE3c8l5BM325VSiGhSt/0V1KmG7vEJy8NUdk LCPMgjf72MBtQ0FX76aVS2ymcEtPhxH7 -----END CERTIFICATE-----Generated at Sat Jun 14 18:56:24 2025 by rpki-client