$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: hqjnxAOzaEna1gmVuRHXT+P1ZP2GYdjg6Gw6t83eeFk= Subject key identifier: 53:90:1A:BD:DD:5B:47:63:D2:90:B7:B6:EC:74:3A:81:A5:A3:7E:86 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: DC Signing time: Fri 13 Jun 2025 04:28:19 +0000 Manifest this update: Fri 13 Jun 2025 04:28:18 +0000 Manifest next update: Fri 20 Jun 2025 04:28:18 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: qUKbCCl1ET3T/CYYKio3Pzl3CVCca7jV4MPJPRFIpuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Jun 13 04:28:18 2025 GMT Not After : Jun 20 04:28:18 2025 GMT Subject: CN=684ba8e2-e8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:35:f2:23:42:40:1c:80:be:f5:ef:b7:dc: de:84:ab:aa:70:ca:44:19:92:8a:37:81:81:8b:d7: b9:23:d2:d6:01:67:33:10:93:c8:28:80:92:08:f1: 9c:0f:93:93:05:7e:84:20:33:da:9a:df:9a:ce:5d: 61:30:3d:68:39:b0:b5:97:99:ba:72:0e:d7:65:fd: f8:14:3d:63:9f:6f:b9:6d:f2:a9:3c:d0:09:4f:f1: 7d:b9:f9:df:2c:be:b0:66:d2:9e:ba:cb:fb:ac:81: 25:4c:97:4e:91:09:d6:8e:5f:83:4c:3c:38:eb:75: 37:2e:48:05:fc:c7:d3:05:db:2b:7e:f5:c7:b8:a2: 10:9e:ba:b1:34:74:b6:62:1c:45:39:ac:fd:46:5b: d6:72:d2:6d:d9:c3:6c:5d:5f:65:f2:89:9f:17:f0: f7:82:47:d3:35:0f:e2:a5:1b:9a:86:5f:f3:56:1a: 27:e6:85:67:c3:f9:ba:2f:ac:c6:ff:e8:92:60:a4: 11:a0:78:eb:59:0f:03:76:2a:39:4e:93:06:9f:a3: b0:85:6f:52:f2:b7:df:f7:d6:a9:e9:6c:37:2c:63: 6e:b4:0e:b0:c1:20:a9:de:34:dc:75:6e:a1:10:7b: c0:bd:40:91:8d:ad:83:a5:90:16:25:4c:1b:a5:44: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:90:1A:BD:DD:5B:47:63:D2:90:B7:B6:EC:74:3A:81:A5:A3:7E:86 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0f:a5:dd:fd:aa:b0:77:82:65:33:b3:0c:e6:12:e2:10:0a: be:ce:c7:d3:69:83:40:04:a9:46:89:cb:f9:e8:79:10:0b:84: 4b:54:c8:7e:c1:67:cf:7d:ce:fb:75:56:84:b3:4c:b1:27:e3: 18:6c:90:02:0b:2b:2e:41:76:a7:13:3e:f0:96:d6:6c:1d:bb: eb:ae:c8:2f:cb:37:23:03:6b:30:a4:cd:1f:02:df:28:ee:f1: be:d2:b8:3a:12:6b:3d:5c:7a:95:a2:0b:27:50:86:d2:11:e5: 6c:fb:1c:06:39:e4:2b:b4:fb:df:fd:09:d9:a4:0a:23:27:d6: 39:d8:a8:22:05:35:ab:67:d7:44:56:f1:2b:6a:a6:f5:f9:79: 43:23:27:9a:36:10:69:b4:7a:fb:c8:9d:0b:3d:91:73:d7:20: b9:de:13:d2:aa:69:8b:2f:13:9e:f6:54:4a:33:78:1d:e0:18: a5:cf:fd:5a:25:c1:94:93:50:7f:4c:2e:90:87:89:ea:65:f7: f3:e0:50:d8:97:01:fa:6b:2d:34:0e:31:e0:c2:b9:07:8b:ab: e7:39:88:d4:72:db:65:45:b1:0e:22:7b:e5:b9:63:6b:7c:9c: 93:50:84:ec:a8:71:35:60:3f:18:9c:b7:7c:1d:5e:b9:67:0c: f3:cb:49:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwNjEzMDQyODE4WhcNMjUwNjIwMDQyODE4WjAYMRYwFAYD VQQDEw02ODRiYThlMi1lOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuY18iNCQByAvvXvt9zehKuqcMpEGZKKN4GBi9e5I9LWAWczEJPIKICSCPGc D5OTBX6EIDPamt+azl1hMD1oObC1l5m6cg7XZf34FD1jn2+5bfKpPNAJT/F9ufnf LL6wZtKeusv7rIElTJdOkQnWjl+DTDw463U3LkgF/MfTBdsrfvXHuKIQnrqxNHS2 YhxFOaz9RlvWctJt2cNsXV9l8omfF/D3gkfTNQ/ipRuahl/zVhon5oVnw/m6L6zG /+iSYKQRoHjrWQ8Ddio5TpMGn6OwhW9S8rff99ap6Ww3LGNutA6wwSCp3jTcdW6h EHvAvUCRja2DpZAWJUwbpURdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOQGr3d W0dj0pC3tux0OoGlo36GMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAD6Xd/aqwd4JlM7MM5hLiEAq+zsfTaYNABKlGicv56HkQC4RLVMh+ wWfPfc77dVaEs0yxJ+MYbJACCysuQXanEz7wltZsHbvrrsgvyzcjA2swpM0fAt8o 7vG+0rg6Ems9XHqVogsnUIbSEeVs+xwGOeQrtPvf/QnZpAojJ9Y52KgiBTWrZ9dE VvEraqb1+XlDIyeaNhBptHr7yJ0LPZFz1yC53hPSqmmLLxOe9lRKM3gd4Bilz/1a JcGUk1B/TC6Qh4nqZffz4FDYlwH6ay00DjHgwrkHi6vnOYjUcttlRbEOInvluWNr fJyTUITsqHE1YD8YnLd8HV65Zwzzy0kv -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:35 2025 by rpki-client