$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: mnRzPmSqEkGzfyUFPHKjTgIHxt1y14QAuaa4FQoa9Lc= Subject key identifier: EF:B6:EA:2E:B0:86:AC:F3:91:08:98:2F:F6:3A:63:D8:54:EE:8E:0C Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AC1 Signing time: Sat 14 Jun 2025 19:19:57 +0000 Manifest this update: Sat 14 Jun 2025 19:19:57 +0000 Manifest next update: Sat 21 Jun 2025 19:19:57 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: Xy7YelQEYl2kewMa8GzA/uas15Qk7NWzG/3oPcmd2js=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: xe07Bh/37lddOkgu4nWtJeTBqHbyu/j2lK7PTJ6ZiCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Jun 14 19:19:57 2025 GMT Not After : Jun 21 19:19:57 2025 GMT Subject: CN=684dcb5d-4e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:67:12:de:83:cb:48:13:91:89:17:ee:eb: a9:70:9b:45:52:ec:9d:db:7c:a9:99:40:f5:ec:37: a8:87:64:75:7e:3d:3e:fc:ae:63:26:d4:f6:1d:ba: 90:4f:be:95:2a:c4:5e:89:9f:d8:50:f1:08:76:81: 25:f8:3a:a3:ed:cc:14:3f:98:71:a4:81:7e:2d:eb: c7:71:89:43:fc:cf:2a:d5:c9:5e:79:71:ee:c1:37: 4c:18:7d:33:9a:a5:4f:bb:12:ca:46:e2:f4:df:b6: e7:bb:74:99:b3:b1:01:04:50:69:0f:59:ae:ab:3f: 83:15:a6:c6:41:9c:11:5f:0a:7d:dd:d8:85:be:33: f3:56:b4:53:45:8f:f1:80:82:d0:2c:36:b0:2a:09: 94:d9:a4:e0:28:02:12:62:e7:22:be:62:5b:fb:4c: 89:4f:1f:eb:0a:90:0e:25:6e:9f:1d:4e:8d:8d:17: 20:be:19:fa:43:72:76:f1:aa:ca:97:31:7a:e0:07: c0:99:26:11:98:bf:0a:2a:b1:12:af:a5:d7:24:19: 1f:93:71:5e:af:4b:52:eb:e9:06:26:01:78:24:18: 38:44:37:3c:6a:72:f2:33:c4:c3:6b:fc:94:d3:12: 88:5a:7f:b1:5d:1d:dc:a8:c5:61:8e:29:a9:bc:29: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:EA:2E:B0:86:AC:F3:91:08:98:2F:F6:3A:63:D8:54:EE:8E:0C X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:41:00:63:72:09:ce:b7:a3:6c:18:c1:f4:14:b9:1a:77:75: 01:9f:d3:58:dc:ff:7f:95:ef:4d:81:79:ed:1c:f0:ba:d0:40: 49:0c:71:05:f8:81:b6:6d:9e:bb:4a:1d:e6:18:a9:e5:dd:bf: d0:f9:c0:39:05:3d:4f:75:d5:62:c3:52:d7:eb:a3:fd:48:02: 9c:95:81:6f:5b:53:64:ed:7e:9e:b5:c1:4b:12:29:7a:66:02: ef:e0:01:dd:f2:11:09:1c:b0:ea:f4:b6:9a:80:fd:54:f3:a2: 5d:7e:a7:27:b0:05:23:c7:09:0b:2e:dc:a5:66:f1:41:86:9b: 8e:47:be:2a:9a:e7:df:bc:2e:3f:c1:2e:69:d1:d3:56:c3:91: 0f:9b:c4:e1:0b:16:be:32:b4:f5:7b:d2:9e:f4:11:5f:5e:40: 56:52:cd:65:5c:66:76:a0:05:61:d6:05:66:c4:b7:0a:df:5f: de:9f:f4:25:ce:17:af:73:1c:a2:32:97:e6:71:fc:b3:15:04: c0:9a:d3:4e:02:6f:17:71:15:33:3c:f4:13:44:76:7a:5a:c4: bb:2c:85:2f:32:1d:da:61:10:ac:36:8b:02:75:ee:f0:2c:7d: ca:5d:cb:8b:d0:3d:fb:c1:09:dc:4f:7d:58:01:0a:3a:92:4d: d2:59:66:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwNjE0MTkxOTU3WhcNMjUwNjIxMTkxOTU3WjAYMRYwFAYD VQQDEw02ODRkY2I1ZC00ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxm9nEt6Dy0gTkYkX7uupcJtFUuyd23ypmUD17Deoh2R1fj0+/K5jJtT2HbqQ T76VKsReiZ/YUPEIdoEl+Dqj7cwUP5hxpIF+LevHcYlD/M8q1cleeXHuwTdMGH0z mqVPuxLKRuL037bnu3SZs7EBBFBpD1muqz+DFabGQZwRXwp93diFvjPzVrRTRY/x gILQLDawKgmU2aTgKAISYucivmJb+0yJTx/rCpAOJW6fHU6NjRcgvhn6Q3J28arK lzF64AfAmSYRmL8KKrESr6XXJBkfk3Fer0tS6+kGJgF4JBg4RDc8anLyM8TDa/yU 0xKIWn+xXR3cqMVhjimpvCm+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+26i6w hqzzkQiYL/Y6Y9hU7o4MMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrQQBjcgnOt6NsGMH0FLkad3UBn9NY3P9/le9NgXntHPC60EBJDHEF +IG2bZ67Sh3mGKnl3b/Q+cA5BT1PddViw1LX66P9SAKclYFvW1Nk7X6etcFLEil6 ZgLv4AHd8hEJHLDq9LaagP1U86JdfqcnsAUjxwkLLtylZvFBhpuOR74qmuffvC4/ wS5p0dNWw5EPm8ThCxa+MrT1e9Ke9BFfXkBWUs1lXGZ2oAVh1gVmxLcK31/en/Ql zhevcxyiMpfmcfyzFQTAmtNOAm8XcRUzPPQTRHZ6WsS7LIUvMh3aYRCsNosCde7w LH3KXcuL0D37wQncT31YAQo6kk3SWWY+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:45 2025 by rpki-client