$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json) Hash identifier: 3EUvb9mevyVk3GxKf7aVFufgviDnFktBaPf3DyWBv7k= Subject key identifier: 3A:40:D1:D7:46:95:10:9A:7A:13:6B:53:44:11:20:0E:94:ED:61:0B Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D Certificate issuer: /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft Manifest number: 0107 Signing time: Tue 17 Jun 2025 03:14:21 +0000 Manifest this update: Tue 17 Jun 2025 03:14:21 +0000 Manifest next update: Tue 24 Jun 2025 03:14:20 +0000 Files and hashes: 1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: N/84ywQxrF3E/zIogSiixfbP83+FFoSZUflgL47c0Wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Validity Not Before: Jun 17 03:14:21 2025 GMT Not After : Jun 24 03:14:20 2025 GMT Subject: CN=6850dd8d-90a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:5d:77:e6:18:37:6d:3a:70:43:c8:da:8c: cd:80:3f:b7:24:ad:ae:db:cf:05:51:32:4d:21:4d: fe:dd:95:72:42:9c:91:fb:aa:78:48:73:7c:cf:90: 37:a3:7b:95:05:16:0d:e1:64:e7:fe:5f:16:76:28: 14:5c:90:1a:9c:f8:e1:fd:d5:c3:41:ea:3b:af:16: 7f:d6:0d:23:f3:e3:12:8d:95:fb:5e:0b:32:5e:b0: f7:48:70:99:c8:99:1f:73:c0:f2:23:95:0e:ec:64: c1:be:f3:cc:ff:e9:fd:45:04:af:e7:c2:42:f2:ef: c5:95:28:4f:2b:26:ec:4d:89:ed:3f:14:27:d6:0e: 6c:54:e1:ba:ac:cb:07:f8:79:51:cf:cb:df:88:57: f4:66:a1:9c:a5:6a:07:61:7a:44:5f:c8:c8:c2:1b: 29:b3:a8:88:d0:04:26:a4:b3:56:72:6c:08:1e:54: 4a:5c:3e:e8:99:be:70:98:67:12:24:34:c9:96:11: 68:38:63:2c:fc:06:d9:e6:a9:f0:b8:c6:84:a9:87: 66:18:cc:35:16:7d:eb:83:16:e5:55:18:04:fc:88: 0f:22:43:fe:a9:d6:39:df:59:cf:a0:e7:46:53:64: e8:d5:4b:20:cc:20:de:22:1e:75:a9:63:d6:de:a5: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:D1:D7:46:95:10:9A:7A:13:6B:53:44:11:20:0E:94:ED:61:0B X509v3 Authority Key Identifier: keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:62:0a:91:f7:44:ab:99:62:6b:cf:bd:98:90:4f:54:73:b3: ed:10:3e:df:5d:09:f2:fc:34:f0:6f:85:3e:b6:d9:3c:4e:49: 6d:25:06:ff:73:ca:f2:ea:74:1a:9c:f7:e9:4e:96:42:0f:08: 2d:6a:6a:72:cb:7c:32:e1:e1:79:b4:62:70:68:1f:53:9a:95: 4a:0b:ed:96:a7:e4:12:dd:02:7c:b1:05:b4:7c:6e:34:73:18: 8c:d1:01:31:d3:ff:1b:92:f3:11:a6:a7:bc:ae:ef:68:54:ee: 9d:0a:bc:54:b1:12:fe:22:b7:49:d7:99:af:f3:2b:8a:0f:e1: f7:66:b4:2b:00:92:14:47:ec:d0:28:5e:be:20:2c:80:4b:27: 61:c5:df:98:a9:f5:0a:51:1f:1e:3d:50:99:54:fa:e7:d4:31: c9:51:fc:20:65:b7:82:1e:15:3f:df:db:f3:fd:19:c5:30:0c: 31:fc:6c:d2:33:cb:8d:cc:25:32:3a:da:e7:49:9e:ef:8b:0c: 56:b4:ac:fc:17:f3:ef:e0:e6:95:16:16:23:49:e9:8a:5e:9c: 74:4e:4c:85:9e:b4:92:c6:23:c7:17:1d:bd:04:54:3b:4d:63: c0:be:5b:c6:82:b2:2f:7a:6e:11:05:fe:95:3f:93:0a:51:b5: 65:ca:86:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDE0RTU1RUMzNDI4RTNEMkJBNERDNzFDMTU5RTVGNjA2 MUYxNjNDNkQwHhcNMjUwNjE3MDMxNDIxWhcNMjUwNjI0MDMxNDIwWjAYMRYwFAYD VQQDEw02ODUwZGQ4ZC05MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowVdd+YYN206cEPI2ozNgD+3JK2u288FUTJNIU3+3ZVyQpyR+6p4SHN8z5A3 o3uVBRYN4WTn/l8WdigUXJAanPjh/dXDQeo7rxZ/1g0j8+MSjZX7XgsyXrD3SHCZ yJkfc8DyI5UO7GTBvvPM/+n9RQSv58JC8u/FlShPKybsTYntPxQn1g5sVOG6rMsH +HlRz8vfiFf0ZqGcpWoHYXpEX8jIwhsps6iI0AQmpLNWcmwIHlRKXD7omb5wmGcS JDTJlhFoOGMs/AbZ5qnwuMaEqYdmGMw1Fn3rgxblVRgE/IgPIkP+qdY531nPoOdG U2To1UsgzCDeIh51qWPW3qXI7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpA0ddG lRCaehNrU0QRIA6U7WELMB8GA1UdIwQYMBaAFBTlXsNCjj0rpNxxwVnl9gYfFjxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8zQUU3MzlBRUI5 N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BTdWszSEhCV2VYMkJoOFdQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZPVmV3MEtPUFN1azNISEJXZVgyQmg4V1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8zQUU3MzlBRUI5N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BT dWszSEhCV2VYMkJoOFdQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1YgqR90SrmWJrz72YkE9Uc7PtED7fXQny/DTwb4U+ttk8TkltJQb/ c8ry6nQanPfpTpZCDwgtampyy3wy4eF5tGJwaB9TmpVKC+2Wp+QS3QJ8sQW0fG40 cxiM0QEx0/8bkvMRpqe8ru9oVO6dCrxUsRL+IrdJ15mv8yuKD+H3ZrQrAJIUR+zQ KF6+ICyASydhxd+YqfUKUR8ePVCZVPrn1DHJUfwgZbeCHhU/39vz/RnFMAwx/GzS M8uNzCUyOtrnSZ7viwxWtKz8F/Pv4OaVFhYjSemKXpx0TkyFnrSSxiPHFx29BFQ7 TWPAvlvGgrIvem4RBf6VP5MKUbVlyoaA -----END CERTIFICATE-----Generated at Wed Jun 18 06:55:01 2025 by rpki-client