$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: CGdQxQ9lt3h/JjPUw9zM+3cFzMawTe0oqhGuD+vBtHY= Subject key identifier: 9C:97:20:5E:F2:EF:5A:AD:42:78:7C:6A:6E:C3:E6:EB:1E:50:A3:55 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0C82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C6B Signing time: Thu 12 Jun 2025 18:11:43 +0000 Manifest this update: Thu 12 Jun 2025 18:11:42 +0000 Manifest next update: Thu 19 Jun 2025 18:11:42 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: Eh/1PPpbCFIr1TSYJcvz1po8Nu9qxsAzW+NJVtlMJvY=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Jun 12 18:11:42 2025 GMT Not After : Jun 19 18:11:42 2025 GMT Subject: CN=684b185e-16ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:1e:5e:0a:e7:a9:97:69:34:bd:32:8a:8f: ed:d1:4f:77:e1:6b:d4:7c:22:f1:cc:d8:2d:6d:88: a3:9d:92:02:9f:93:0f:0b:51:64:cf:5a:5d:9c:e5: ff:75:5e:17:4d:46:9e:6a:5a:90:56:12:e0:d4:62: 4c:ef:d1:aa:b6:ec:e4:cc:ad:2c:c5:1b:a9:98:b4: 34:60:e6:c9:e9:15:b2:e5:1f:1c:07:8e:a6:b0:56: 1d:16:0f:78:0b:a9:09:ed:a9:51:ec:49:79:8e:ac: b0:a9:f8:18:c5:20:fd:ce:5f:64:08:7d:f5:73:80: 39:0e:06:5d:ae:d3:98:f1:40:bc:c6:9c:01:63:fc: bd:4b:aa:1a:51:85:03:a3:00:1f:2c:88:3f:5e:54: be:f4:18:8a:04:8b:84:c3:3e:67:48:50:db:57:20: 70:bf:be:f7:6e:1b:ef:fb:07:92:dd:c4:fb:7e:f2: 94:8a:a5:37:a7:e6:79:23:2a:e4:d4:d7:af:85:c7: 89:da:7d:4b:d7:e1:fc:35:b7:a6:15:be:5d:50:e7: 53:4d:cc:37:7b:de:b0:2d:8e:4f:c4:7e:0b:ae:95: 84:a7:af:b4:02:79:85:42:4b:ba:f3:cc:cb:a7:58: 76:88:47:48:a5:32:3b:f7:a5:77:66:06:5c:ff:7f: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:97:20:5E:F2:EF:5A:AD:42:78:7C:6A:6E:C3:E6:EB:1E:50:A3:55 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:01:21:6a:01:db:96:98:e8:fb:28:57:c4:ea:d5:5b:08:ca: 58:4f:b4:df:7c:26:c3:32:f2:8c:38:42:88:b0:ca:86:70:ac: 8c:65:97:59:ca:63:9c:34:c6:5e:d9:58:5e:a4:d6:70:1d:62: b5:86:a9:f0:3a:4e:0e:41:e3:63:e6:a0:1e:86:a7:77:41:0d: 0e:3f:d3:2e:e1:5f:e1:6c:eb:6d:2a:64:c0:d8:95:78:58:04: 8c:bb:7c:64:b9:cf:18:7d:49:7d:33:b2:3b:d3:3c:70:83:a0: 2a:08:60:8b:6d:b8:b6:95:51:27:bf:8f:12:6b:ab:f8:f1:67: bd:2d:0a:df:b2:25:82:31:57:21:d2:ea:52:8a:94:74:58:82: 71:da:79:ef:95:17:88:55:5e:b9:55:b0:e4:8d:6c:ce:c7:57: 17:49:c0:a1:7c:54:b0:17:07:ea:07:85:27:3e:95:f5:66:df: fa:22:28:c4:57:75:66:fc:be:ed:7d:9a:d3:b4:ec:c6:00:3b: 15:11:eb:ee:5a:0e:fd:44:e6:b1:e4:7c:6f:4b:11:cb:de:03: dc:f3:dc:fa:80:86:51:c9:af:08:a7:ef:f9:bb:3c:06:53:4e: 43:84:8f:b9:b9:db:e3:8f:e6:17:4c:c0:60:a4:df:4a:e0:56: 32:ef:13:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwNjEyMTgxMTQyWhcNMjUwNjE5MTgxMTQyWjAYMRYwFAYD VQQDEw02ODRiMTg1ZS0xNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sMeXgrnqZdpNL0yio/t0U934WvUfCLxzNgtbYijnZICn5MPC1Fkz1pdnOX/ dV4XTUaealqQVhLg1GJM79GqtuzkzK0sxRupmLQ0YObJ6RWy5R8cB46msFYdFg94 C6kJ7alR7El5jqywqfgYxSD9zl9kCH31c4A5DgZdrtOY8UC8xpwBY/y9S6oaUYUD owAfLIg/XlS+9BiKBIuEwz5nSFDbVyBwv773bhvv+weS3cT7fvKUiqU3p+Z5Iyrk 1NevhceJ2n1L1+H8NbemFb5dUOdTTcw3e96wLY5PxH4LrpWEp6+0AnmFQku688zL p1h2iEdIpTI796V3ZgZc/39IbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyXIF7y 71qtQnh8am7D5useUKNVMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoASFqAduWmOj7KFfE6tVbCMpYT7TffCbDMvKMOEKIsMqGcKyMZZdZ ymOcNMZe2VhepNZwHWK1hqnwOk4OQeNj5qAehqd3QQ0OP9Mu4V/hbOttKmTA2JV4 WASMu3xkuc8YfUl9M7I70zxwg6AqCGCLbbi2lVEnv48Sa6v48We9LQrfsiWCMVch 0upSipR0WIJx2nnvlReIVV65VbDkjWzOx1cXScChfFSwFwfqB4UnPpX1Zt/6IijE V3Vm/L7tfZrTtOzGADsVEevuWg79ROax5HxvSxHL3gPc89z6gIZRya8Ip+/5uzwG U05DhI+5udvjj+YXTMBgpN9K4FYy7xNy -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:21 2025 by rpki-client