$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: N9Thl8c0sAYfEWDEKmX+6MmJtf1e2YVsDgURK4NfYcg= Subject key identifier: C5:72:70:23:A5:0C:F0:44:53:1C:8A:CE:04:B4:E3:DF:50:94:64:D6 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CDF Signing time: Thu 12 Jun 2025 17:58:31 +0000 Manifest this update: Thu 12 Jun 2025 17:58:31 +0000 Manifest next update: Thu 19 Jun 2025 17:58:31 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: 9isWVCkhrQNU6imAk/8rY+MNuFstod9mW/GV97GCA0A=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Jun 12 17:58:31 2025 GMT Not After : Jun 19 17:58:31 2025 GMT Subject: CN=684b1547-00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:6d:c4:af:03:5e:73:f1:62:43:41:0f:ca: 19:96:24:3f:b7:28:94:52:de:19:a2:cf:de:9b:6f: b2:f7:e5:e4:4f:38:a5:fd:b9:09:f1:da:aa:2d:58: 99:30:27:70:14:91:bd:f4:09:0f:b1:47:94:d6:fc: 8c:51:bf:14:d1:a0:6d:2e:fc:64:f4:83:cb:4e:d3: ee:40:d4:19:d3:66:e8:3d:14:48:83:7a:c3:44:28: 89:39:ee:45:44:44:8e:c9:8e:ab:48:cf:37:1e:d9: de:3e:6f:fe:8c:1b:8b:b2:ba:1a:ce:4e:f0:72:27: 6c:39:ab:1c:d9:36:7a:db:e6:35:eb:0c:b4:f9:7a: ba:5a:ba:a8:48:89:61:13:5d:a3:0c:fc:82:d5:f0: 72:4c:d6:c1:96:39:80:96:1f:3c:07:e8:1c:e2:d2: bd:14:cf:99:8c:4d:f0:fe:4c:f6:4f:7d:2e:59:66: 7a:f2:9a:3d:34:4c:c7:ae:85:6f:9f:05:4b:99:4a: 45:6c:cb:dd:6c:77:43:e2:18:9c:36:cb:74:86:72: 10:a2:19:7a:b2:b2:5e:c5:6e:02:7f:97:8b:2c:c1: 79:53:30:91:ff:66:dd:2d:de:5d:dd:3a:aa:14:11: 49:61:74:9d:76:ba:c9:60:19:b8:7a:b6:6d:7c:3f: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:72:70:23:A5:0C:F0:44:53:1C:8A:CE:04:B4:E3:DF:50:94:64:D6 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f6:b8:31:93:cd:cf:cd:cb:c8:ca:b2:a4:36:a1:ff:94:0b: d1:9c:cf:80:67:92:b5:ce:44:d1:c5:21:af:6c:50:9b:42:be: d6:5c:c2:7c:95:5c:fa:d0:7c:4d:b0:81:fa:71:73:7e:da:0a: 8f:30:04:b1:bc:ed:8d:ef:33:bc:ab:93:c2:b3:3f:94:72:74: e8:c9:d2:59:75:97:37:cc:df:5c:a9:0a:86:be:e8:ec:d7:6e: 34:5f:f8:f0:58:21:20:6f:66:b8:52:b1:96:cb:0a:7c:33:0d: ee:0e:12:53:96:e4:a3:2e:59:86:d4:eb:01:cc:cf:6c:c5:10: 48:3a:91:1d:be:fe:4b:fe:53:67:34:0d:3c:cf:cf:40:b7:67: d5:03:5d:92:ad:d9:80:a6:4e:a2:ce:fe:1f:af:4c:59:78:1b: 75:22:93:40:4d:f4:65:83:88:d6:ed:8d:17:12:de:e5:73:6d: fd:c5:e7:1b:27:32:2c:71:d7:e1:22:bb:5b:fb:11:64:60:6a: f8:a8:2e:85:fc:9d:f8:6f:ee:35:b6:45:97:5a:bc:aa:2c:df: 5e:f4:f0:db:df:78:19:80:6a:a7:9b:23:86:c8:87:39:81:c9: b4:bc:8d:a8:9a:fb:67:b8:ff:3b:a2:6e:d0:7e:e8:20:d0:3d: 6e:0d:61:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNjEyMTc1ODMxWhcNMjUwNjE5MTc1ODMxWjAYMRYwFAYD VQQDEw02ODRiMTU0Ny0wMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGRtxK8DXnPxYkNBD8oZliQ/tyiUUt4Zos/em2+y9+XkTzil/bkJ8dqqLViZ MCdwFJG99AkPsUeU1vyMUb8U0aBtLvxk9IPLTtPuQNQZ02boPRRIg3rDRCiJOe5F RESOyY6rSM83HtnePm/+jBuLsroazk7wcidsOasc2TZ62+Y16wy0+Xq6WrqoSIlh E12jDPyC1fByTNbBljmAlh88B+gc4tK9FM+ZjE3w/kz2T30uWWZ68po9NEzHroVv nwVLmUpFbMvdbHdD4hicNst0hnIQohl6srJexW4Cf5eLLMF5UzCR/2bdLd5d3Tqq FBFJYXSddrrJYBm4erZtfD8ZOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVycCOl DPBEUxyKzgS0499QlGTWMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX9rgxk83PzcvIyrKkNqH/lAvRnM+AZ5K1zkTRxSGvbFCbQr7WXMJ8 lVz60HxNsIH6cXN+2gqPMASxvO2N7zO8q5PCsz+UcnToydJZdZc3zN9cqQqGvujs 1240X/jwWCEgb2a4UrGWywp8Mw3uDhJTluSjLlmG1OsBzM9sxRBIOpEdvv5L/lNn NA08z89At2fVA12SrdmApk6izv4fr0xZeBt1IpNATfRlg4jW7Y0XEt7lc239xecb JzIscdfhIrtb+xFkYGr4qC6F/J34b+41tkWXWryqLN9e9PDb33gZgGqnmyOGyIc5 gcm0vI2omvtnuP87om7Qfugg0D1uDWEB -----END CERTIFICATE-----Generated at Sat Jun 14 19:09:53 2025 by rpki-client