$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: U2FJ2f19NEat6zfn299IyWjd9tGyQzyn/TwKTYibqn4= Subject key identifier: C7:AD:2C:B8:80:06:B8:37:D6:3E:CC:A7:1B:56:33:87:5C:9F:F7:91 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 01C5 Signing time: Sun 15 Jun 2025 02:12:57 +0000 Manifest this update: Sun 15 Jun 2025 02:12:57 +0000 Manifest next update: Sun 22 Jun 2025 02:12:57 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: 3I2Bigupur2ok300U0/e+ySgV3E5DTI5tgkaQucNkPg=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Jun 15 02:12:57 2025 GMT Not After : Jun 22 02:12:57 2025 GMT Subject: CN=684e2c29-07c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:22:e6:62:91:9d:84:f4:d3:20:3b:4e:cd: 9e:8f:54:b2:ae:39:04:d7:b6:ee:e8:9c:39:18:1f: 7d:31:69:9a:69:5d:1a:d7:1a:5e:e2:00:f8:25:64: 77:6c:19:0d:3a:c4:56:dc:1b:a1:88:52:08:fd:9a: e9:71:7f:82:4f:01:e6:c8:67:7b:fe:b5:c1:89:27: f8:a3:6b:9d:dd:5b:24:0f:f9:27:f9:2c:f3:a3:76: e0:14:8f:79:d5:1f:8b:93:73:ff:bc:6b:a6:f6:28: ce:3e:14:69:5d:89:97:7b:22:8c:80:8c:fc:f6:a7: 94:4a:34:63:fc:3f:e6:14:ba:ad:19:ad:b8:5f:51: 14:35:ac:71:6a:5c:54:96:56:8b:e0:65:78:99:71: 9a:e9:4b:52:72:a3:d6:77:26:13:73:4e:e0:72:ae: 4f:f0:5d:c7:2c:ed:e9:6b:3f:a1:42:1c:51:fd:30: 8f:e4:17:d2:bf:d1:74:d0:14:b7:5a:90:f4:7d:d5: 5b:6f:84:70:0e:30:87:7f:05:75:f2:b7:56:e4:0e: fe:34:f4:f3:42:a7:74:8e:5c:cf:f6:49:78:b9:79: e7:e8:40:98:7d:29:d3:91:05:66:f6:56:14:d7:dc: 60:99:fa:96:ab:8d:b7:bf:7b:a2:38:81:da:3b:31: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AD:2C:B8:80:06:B8:37:D6:3E:CC:A7:1B:56:33:87:5C:9F:F7:91 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:08:5b:ee:73:13:d0:09:48:ca:c7:0a:5d:ff:eb:51:c4:bf: 2f:98:67:a2:e8:ee:a5:ad:5c:16:01:0c:f1:73:80:c1:3a:e6: 4f:80:dc:fe:cb:2f:be:32:45:be:f6:4a:73:98:f1:56:e6:6c: 5c:cc:c7:cd:dc:6e:3f:64:66:01:1c:23:e3:a2:ff:10:56:69: b1:bd:22:b0:eb:7f:05:f5:ff:37:b0:61:a3:c8:ba:58:48:0a: fc:5e:65:4c:45:21:0b:ab:75:a0:c2:31:e0:10:da:a8:75:1a: 38:3f:72:2a:57:69:c3:62:47:d3:fc:12:c8:c0:77:38:86:81: 8d:f8:91:d7:77:31:e9:35:69:c8:3b:86:93:fd:f7:62:30:70: f6:36:e8:8b:cd:30:1a:72:e9:dd:b3:e7:b1:92:25:eb:7d:68: 1f:a8:df:23:c5:86:79:4e:01:f5:69:2a:c6:48:f5:c0:0c:25: 15:e7:f3:db:6b:48:2d:00:03:be:c0:8d:c3:4c:2c:63:f5:93: c1:91:b5:0a:04:48:c7:c1:4b:1d:0f:3d:54:98:51:3a:cf:cf: 16:d5:ff:bd:01:8d:26:2d:c3:56:83:f3:97:4b:6d:d2:11:05: 71:03:be:cd:ab:3e:bb:a2:a2:80:e5:df:ee:15:7b:41:6d:86: ef:cc:a9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUwNjE1MDIxMjU3WhcNMjUwNjIyMDIxMjU3WjAYMRYwFAYD VQQDEw02ODRlMmMyOS0wN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzwi5mKRnYT00yA7Ts2ej1SyrjkE17bu6Jw5GB99MWmaaV0a1xpe4gD4JWR3 bBkNOsRW3BuhiFII/ZrpcX+CTwHmyGd7/rXBiSf4o2ud3VskD/kn+Szzo3bgFI95 1R+Lk3P/vGum9ijOPhRpXYmXeyKMgIz89qeUSjRj/D/mFLqtGa24X1EUNaxxalxU llaL4GV4mXGa6UtScqPWdyYTc07gcq5P8F3HLO3paz+hQhxR/TCP5BfSv9F00BS3 WpD0fdVbb4RwDjCHfwV18rdW5A7+NPTzQqd0jlzP9kl4uXnn6ECYfSnTkQVm9lYU 19xgmfqWq423v3uiOIHaOzHQuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMetLLiA Brg31j7MpxtWM4dcn/eRMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyCFvucxPQCUjKxwpd/+tRxL8vmGei6O6lrVwWAQzxc4DBOuZPgNz+ yy++MkW+9kpzmPFW5mxczMfN3G4/ZGYBHCPjov8QVmmxvSKw638F9f83sGGjyLpY SAr8XmVMRSELq3WgwjHgENqodRo4P3IqV2nDYkfT/BLIwHc4hoGN+JHXdzHpNWnI O4aT/fdiMHD2NuiLzTAacunds+exkiXrfWgfqN8jxYZ5TgH1aSrGSPXADCUV5/Pb a0gtAAO+wI3DTCxj9ZPBkbUKBEjHwUsdDz1UmFE6z88W1f+9AY0mLcNWg/OXS23S EQVxA77Nqz67oqKA5d/uFXtBbYbvzKka -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:06 2025 by rpki-client