$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json) Hash identifier: xNf4KosFxL01AAkYUsfoH1W9HZJwEszpnFRYh+g5wos= Subject key identifier: E7:3C:B1:FE:10:FD:5C:50:DC:F5:36:AC:D9:7A:FD:23:33:A0:39:54 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 1362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft Manifest number: 1339 Signing time: Sat 14 Jun 2025 16:58:41 +0000 Manifest this update: Sat 14 Jun 2025 16:58:40 +0000 Manifest next update: Sat 21 Jun 2025 16:58:40 +0000 Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: f0iPlp6L8mTYQH8GjbDYgNqwGCM63gpC9BEADD54TUo=) 2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=) 3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=) 4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=) 5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Jun 14 16:58:40 2025 GMT Not After : Jun 21 16:58:40 2025 GMT Subject: CN=684daa40-a5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:32:e1:a8:ca:56:32:15:af:bd:b2:8e:f7:93: 35:74:71:d0:ce:fb:dc:f1:f3:d8:ce:3c:8d:f4:9e: 8e:1f:21:f6:b7:1a:2f:2d:8d:46:90:b2:9f:95:e6: bf:cf:2c:6b:1d:1b:15:bf:51:02:c1:24:6a:58:f7: 9a:e6:00:26:8a:40:7e:0f:94:fb:37:2f:9e:12:a0: 75:53:70:40:71:4e:dc:ec:96:87:6a:cc:e3:6c:b4: fa:d3:b2:72:de:68:91:b4:6a:d5:3b:5f:fd:3f:c1: 0e:80:49:7c:5f:86:d6:dd:10:cc:d9:b1:f2:39:c6: c9:b4:ce:20:78:04:7f:5c:40:3e:e7:dd:60:52:4e: 02:51:f0:5e:7d:c4:1b:cf:f5:4b:d9:63:16:6e:79: c4:38:75:0d:89:82:93:a1:19:ac:54:07:4e:ef:89: bf:6d:b4:ae:32:4a:d4:13:e5:a2:89:78:d0:d3:8a: 2f:66:a6:fd:4e:c2:fd:36:58:7a:25:cc:08:a5:1d: 99:48:2f:b9:5b:4a:75:9a:87:0b:d6:59:b6:80:cc: f4:6e:f4:4f:a6:9f:d9:de:b3:ca:3a:ad:25:32:d0: 48:59:72:1e:e7:60:d2:04:b5:6d:10:76:1e:45:e5: 09:f4:38:78:eb:d5:1b:94:4b:99:94:64:91:b7:5a: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3C:B1:FE:10:FD:5C:50:DC:F5:36:AC:D9:7A:FD:23:33:A0:39:54 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:2d:ee:ea:74:c4:15:d6:c8:1e:e2:ee:88:f7:1a:db:da:a8: 57:0b:03:2d:3e:32:34:ea:12:84:48:48:e1:13:8d:23:2b:bc: 7e:2c:e4:fa:30:9e:99:cc:5b:5d:47:e9:7f:0b:10:c1:ed:eb: e0:66:f0:e5:f4:e0:ba:c3:1a:55:10:58:3f:fe:2c:fb:3e:80: 7f:55:fc:68:72:20:08:a5:37:db:9a:4a:52:db:4d:c6:52:eb: 7e:00:bb:f5:30:c8:64:b6:3b:e6:88:06:bc:74:71:6a:78:d5: c9:bd:db:cb:5e:cc:12:7c:00:0a:8a:80:c4:16:ef:5a:7f:78: 14:25:85:8c:0d:c0:5c:91:1b:d6:10:ea:10:6c:8e:e6:50:15: dc:e3:de:27:26:9b:28:29:04:5d:93:08:26:08:94:f5:8d:e5: f2:fa:82:ec:c1:f7:9b:de:72:f9:1e:18:fb:99:23:53:ce:53: b8:9d:1d:6d:72:6a:05:19:da:c2:72:79:c1:20:24:bf:71:7e: 55:50:85:f6:69:24:52:cf:9a:5c:b1:07:78:f3:45:e5:85:8f: b6:28:88:47:47:1a:9d:b0:f3:47:4e:8b:21:86:ed:d6:9d:f7: 66:e4:72:2a:4f:3d:d2:ee:8c:99:0c:8d:3b:e8:62:2b:10:0e: 88:73:da:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjUwNjE0MTY1ODQwWhcNMjUwNjIxMTY1ODQwWjAYMRYwFAYD VQQDEw02ODRkYWE0MC1hNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zLhqMpWMhWvvbKO95M1dHHQzvvc8fPYzjyN9J6OHyH2txovLY1GkLKflea/ zyxrHRsVv1ECwSRqWPea5gAmikB+D5T7Ny+eEqB1U3BAcU7c7JaHaszjbLT607Jy 3miRtGrVO1/9P8EOgEl8X4bW3RDM2bHyOcbJtM4geAR/XEA+591gUk4CUfBefcQb z/VL2WMWbnnEOHUNiYKToRmsVAdO74m/bbSuMkrUE+WiiXjQ04ovZqb9TsL9Nlh6 JcwIpR2ZSC+5W0p1mocL1lm2gMz0bvRPpp/Z3rPKOq0lMtBIWXIe52DSBLVtEHYe ReUJ9Dh469UblEuZlGSRt1oM6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc8sf4Q /VxQ3PU2rNl6/SMzoDlUMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkLe7qdMQV1sge4u6I9xrb2qhXCwMtPjI06hKESEjhE40jK7x+LOT6 MJ6ZzFtdR+l/CxDB7evgZvDl9OC6wxpVEFg//iz7PoB/VfxociAIpTfbmkpS203G Uut+ALv1MMhktjvmiAa8dHFqeNXJvdvLXswSfAAKioDEFu9af3gUJYWMDcBckRvW EOoQbI7mUBXc494nJpsoKQRdkwgmCJT1jeXy+oLswfeb3nL5Hhj7mSNTzlO4nR1t cmoFGdrCcnnBICS/cX5VUIX2aSRSz5pcsQd480XlhY+2KIhHRxqdsPNHToshhu3W nfdm5HIqTz3S7oyZDI076GIrEA6Ic9rn -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:07 2025 by rpki-client