$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: SphV0wEaaGQsU2ghGPKY4Iyh3KxhPS1uFzyrR9agjAs= Subject key identifier: FA:C6:AF:23:32:F9:31:48:56:87:30:35:7E:60:B6:24:04:0E:C8:54 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 38CA Signing time: Sat 14 Jun 2025 14:36:04 +0000 Manifest this update: Sat 14 Jun 2025 14:36:03 +0000 Manifest next update: Sat 21 Jun 2025 14:36:03 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 24Nt6nqMfvhe6auDz6jAgXzhd6XcgZfhZImCjVV2PS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Jun 14 14:36:03 2025 GMT Not After : Jun 21 14:36:03 2025 GMT Subject: CN=684d88d3-e697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:81:16:8c:b0:74:40:56:dc:35:a9:98:2e:60: 8f:1a:c0:69:ea:ac:db:6a:1b:44:84:08:27:e2:45: 61:6f:b3:76:4b:c1:4e:a6:c2:cd:93:fe:d7:52:4f: 83:69:37:d1:59:4a:5d:45:c8:a9:8e:1b:0c:28:8c: db:4b:75:de:85:24:55:a7:8b:92:40:8f:58:5c:83: 86:26:8d:2b:07:3c:6d:da:2c:54:8d:17:cc:68:8c: 50:74:b0:57:7c:f1:62:aa:39:27:c1:37:c1:a0:0f: c2:23:10:da:8d:27:49:ce:54:16:77:22:6b:ac:cc: 96:87:18:4e:5c:ed:89:ef:11:87:e6:00:cc:37:91: 14:bd:76:af:f8:45:c5:6e:2c:2e:44:3d:62:2a:9f: 09:2d:77:f2:a8:96:2e:e1:c3:2e:cf:7e:0f:7d:cd: 2b:64:10:b8:89:5d:62:70:6b:f0:15:bc:44:b6:99: a8:3c:94:50:7d:50:e5:ea:81:10:bf:0d:13:7e:ce: 61:a1:af:a2:a7:43:09:c8:7e:81:77:6b:7f:be:83: 12:99:a2:97:55:fb:df:fa:06:74:86:91:e8:4c:df: fa:f5:d1:7e:39:37:69:90:8b:5b:db:a1:99:93:ec: e7:e9:51:23:d8:11:00:a2:a7:08:ac:8e:a1:6b:60: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C6:AF:23:32:F9:31:48:56:87:30:35:7E:60:B6:24:04:0E:C8:54 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:38:e6:d0:49:ff:4a:d9:ce:b2:53:86:94:61:9a:f0:a9:08: 52:07:d1:d9:14:50:c0:4f:b0:c8:c0:89:40:5c:77:d5:e3:41: be:80:62:e7:2a:ba:4c:4d:5c:e3:c9:b2:03:60:4b:31:14:6e: c1:45:49:72:fd:ee:3d:c7:9e:25:bc:65:65:e5:2e:9f:1b:f5: ea:34:8b:51:ff:29:8f:ea:b2:4c:fc:88:46:b7:76:1a:1c:47: 41:32:f8:bd:ce:fb:e7:a6:41:5c:07:37:b7:96:20:86:63:b5: 74:e1:2d:0c:ef:f8:ab:82:fe:2e:77:9e:c5:cc:26:c7:30:7f: fc:20:a7:4b:59:e5:14:16:b5:9d:f0:a5:17:57:6b:69:27:4b: 14:2b:71:48:f3:25:89:07:f1:08:ca:b2:f3:18:c8:1f:58:d3: eb:75:0a:19:7c:32:ab:7c:fb:78:f0:ff:dc:ca:fa:6d:9d:23: 97:2d:c2:86:39:c7:14:1a:e1:44:d1:8e:40:02:8e:1b:18:c3: 0f:08:14:0e:98:05:94:7f:55:49:fa:da:a2:28:4c:fe:18:f4: 08:96:b1:1f:21:f1:db:92:bc:f9:5c:6c:f8:05:e8:bb:06:ca: a7:90:4e:a7:61:67:b5:30:99:7e:89:63:ac:1a:15:64:6b:10: 53:94:4b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwNjE0MTQzNjAzWhcNMjUwNjIxMTQzNjAzWjAYMRYwFAYD VQQDEw02ODRkODhkMy1lNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/YEWjLB0QFbcNamYLmCPGsBp6qzbahtEhAgn4kVhb7N2S8FOpsLNk/7XUk+D aTfRWUpdRcipjhsMKIzbS3XehSRVp4uSQI9YXIOGJo0rBzxt2ixUjRfMaIxQdLBX fPFiqjknwTfBoA/CIxDajSdJzlQWdyJrrMyWhxhOXO2J7xGH5gDMN5EUvXav+EXF biwuRD1iKp8JLXfyqJYu4cMuz34Pfc0rZBC4iV1icGvwFbxEtpmoPJRQfVDl6oEQ vw0Tfs5hoa+ip0MJyH6Bd2t/voMSmaKXVfvf+gZ0hpHoTN/69dF+OTdpkItb26GZ k+zn6VEj2BEAoqcIrI6ha2DJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrGryMy +TFIVocwNX5gtiQEDshUMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSOObQSf9K2c6yU4aUYZrwqQhSB9HZFFDAT7DIwIlAXHfV40G+gGLn KrpMTVzjybIDYEsxFG7BRUly/e49x54lvGVl5S6fG/XqNItR/ymP6rJM/IhGt3Ya HEdBMvi9zvvnpkFcBze3liCGY7V04S0M7/irgv4ud57FzCbHMH/8IKdLWeUUFrWd 8KUXV2tpJ0sUK3FI8yWJB/EIyrLzGMgfWNPrdQoZfDKrfPt48P/cyvptnSOXLcKG OccUGuFE0Y5AAo4bGMMPCBQOmAWUf1VJ+tqiKEz+GPQIlrEfIfHbkrz5XGz4Bei7 BsqnkE6nYWe1MJl+iWOsGhVkaxBTlEty -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:21 2025 by rpki-client