$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: T1Ur/YRnx7c4M2qvZypQveuWuQpFy1jyUBjY5LIBQ8c= Subject key identifier: 5F:45:17:14:66:E0:F4:52:DA:D9:FD:74:D6:A8:F1:C3:CB:B5:FB:8B Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0455 Signing time: Sat 14 Jun 2025 23:57:10 +0000 Manifest this update: Sat 14 Jun 2025 23:57:10 +0000 Manifest next update: Sat 21 Jun 2025 23:57:10 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: tTvaQi/keAZt1QmNNQgBOZAd9bw86UNFCVt+r/E/NYg=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Jun 14 23:57:10 2025 GMT Not After : Jun 21 23:57:10 2025 GMT Subject: CN=684e0c56-60bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:79:ce:08:87:26:18:b3:6b:e3:81:c1:22: 63:75:f0:d0:ad:93:b6:5f:b2:5f:e7:b8:b3:98:f2: 3e:e3:c8:bb:29:9a:32:fe:c0:2c:26:db:be:48:6f: f6:87:51:da:6f:70:cc:7f:cb:9d:e0:e6:eb:b7:3a: e0:77:b4:dd:b9:5a:1e:5d:85:96:3e:44:d4:d1:51: a2:5e:27:a6:fd:96:a8:9d:e0:31:36:ef:b9:10:dd: 32:1d:57:fe:77:9d:b6:a6:0b:54:f9:7d:5a:0b:1e: bc:13:24:80:1e:83:40:ba:64:4b:48:68:26:8d:1c: 96:30:a7:52:cd:d2:ce:90:12:58:88:4e:8e:e8:f6: 4b:df:b0:fc:11:89:05:1a:82:ee:4c:92:d9:da:ff: 27:c7:46:72:87:92:cb:cb:40:32:b6:6d:78:d8:4a: 8f:dd:29:09:8a:67:c8:df:f9:02:c2:49:bf:ae:22: 47:e6:df:26:7a:f4:44:e6:92:d1:a7:0a:2e:d4:61: 54:39:17:67:b3:ab:ce:15:8d:95:ea:cc:d7:29:45: e6:26:c7:8c:31:ec:d8:ad:1d:bf:a7:d1:d3:0f:64: be:9b:ef:d2:b8:ad:d4:fe:a2:e7:9a:25:22:7c:0f: 90:a2:22:d1:8c:e9:27:00:34:c9:cc:39:88:7f:00: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:17:14:66:E0:F4:52:DA:D9:FD:74:D6:A8:F1:C3:CB:B5:FB:8B X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:42:c7:1c:4d:c0:75:b6:cb:89:e7:60:7e:5e:74:03:ae:82: 32:28:e3:9e:d2:de:d1:5d:fb:3f:16:9f:63:49:c1:f8:db:fd: 66:93:f9:ad:99:58:0c:62:7f:cf:af:2d:58:15:e7:61:1e:c9: c0:b5:98:44:bb:e3:2a:67:79:88:2b:90:56:ab:df:22:ec:aa: 6a:5f:d1:dd:3d:96:5c:1b:4f:d0:e1:53:60:e3:d1:cd:d1:96: 66:58:06:67:9e:e2:db:78:78:9a:18:a3:43:a7:b8:74:f4:e2: 05:a1:01:05:3c:df:be:02:76:a0:89:bf:84:8a:e2:ed:fd:fc: e6:bd:50:31:9d:b9:a9:af:79:02:92:7a:a0:a4:fa:dd:1e:e9: 61:6d:79:a4:8d:a5:57:b2:b4:6c:e0:9d:cc:b2:f7:cb:7d:eb: 72:0d:a4:21:cb:84:03:0c:de:ab:16:4c:f2:1e:9a:d7:3d:21: b9:98:0d:88:29:ed:86:31:90:ed:b1:64:e3:fc:fb:5d:0f:4b: 5a:7f:0b:0d:6a:43:2c:0d:6a:48:3d:53:f0:57:14:f8:3c:53: ad:aa:e5:62:f8:90:5f:a8:84:8a:81:39:1d:9a:d5:2a:fc:47: a9:fe:3d:7f:50:6b:4c:e9:f6:0b:30:15:82:b4:fb:a6:43:28: d5:7c:a9:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwNjE0MjM1NzEwWhcNMjUwNjIxMjM1NzEwWjAYMRYwFAYD VQQDEw02ODRlMGM1Ni02MGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukF5zgiHJhiza+OBwSJjdfDQrZO2X7Jf57izmPI+48i7KZoy/sAsJtu+SG/2 h1Hab3DMf8ud4Obrtzrgd7TduVoeXYWWPkTU0VGiXiem/ZaoneAxNu+5EN0yHVf+ d522pgtU+X1aCx68EySAHoNAumRLSGgmjRyWMKdSzdLOkBJYiE6O6PZL37D8EYkF GoLuTJLZ2v8nx0Zyh5LLy0Aytm142EqP3SkJimfI3/kCwkm/riJH5t8mevRE5pLR pwou1GFUORdns6vOFY2V6szXKUXmJseMMezYrR2/p9HTD2S+m+/SuK3U/qLnmiUi fA+QoiLRjOknADTJzDmIfwAJdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9FFxRm 4PRS2tn9dNao8cPLtfuLMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbQsccTcB1tsuJ52B+XnQDroIyKOOe0t7RXfs/Fp9jScH42/1mk/mt mVgMYn/Pry1YFedhHsnAtZhEu+MqZ3mIK5BWq98i7KpqX9HdPZZcG0/Q4VNg49HN 0ZZmWAZnnuLbeHiaGKNDp7h09OIFoQEFPN++Anagib+EiuLt/fzmvVAxnbmpr3kC knqgpPrdHulhbXmkjaVXsrRs4J3MsvfLfetyDaQhy4QDDN6rFkzyHprXPSG5mA2I Ke2GMZDtsWTj/PtdD0tafwsNakMsDWpIPVPwVxT4PFOtquVi+JBfqISKgTkdmtUq /Eep/j1/UGtM6fYLMBWCtPumQyjVfKnu -----END CERTIFICATE-----Generated at Sun Jun 15 05:15:09 2025 by rpki-client