$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: BqzCR+p2dfsMIH0pyFTEkiQ5rzXb6Q4S404W//CQSRI= Subject key identifier: 5D:DD:6D:8E:76:1C:62:05:80:11:79:BA:98:EE:B4:10:0E:5A:B6:29 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BCC Signing time: Thu 12 Jun 2025 18:40:54 +0000 Manifest this update: Thu 12 Jun 2025 18:40:54 +0000 Manifest next update: Thu 19 Jun 2025 18:40:54 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: hJTLN8c4rg35VFQiO3biB19ROlcyBcFkzAUXniZNjgE=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Jun 12 18:40:54 2025 GMT Not After : Jun 19 18:40:54 2025 GMT Subject: CN=684b1f36-788b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:cb:94:08:47:a3:c6:eb:a3:5c:44:bf:f5: e6:d6:9b:e8:85:b4:d9:85:9b:70:1c:50:9d:cb:6a: df:c0:83:d2:0e:72:77:5e:13:2d:68:61:6f:f6:88: bb:e7:69:a7:bb:7d:24:42:25:94:aa:7f:8d:e0:78: ca:5a:10:a6:79:a5:52:46:ac:3b:36:62:3e:1c:25: 20:67:f6:a0:f4:71:ec:63:85:3e:7e:f7:08:d5:fd: bd:6f:aa:5b:42:cc:12:70:42:22:78:8e:3f:17:20: 61:d7:e7:40:16:10:e2:5c:eb:a7:39:c7:29:83:89: 9a:50:36:e1:8e:c2:ce:43:94:86:8a:73:fe:0f:c6: ad:70:49:2e:cf:61:60:7c:78:d3:2c:fe:43:b7:9d: dd:15:b0:4e:b9:c9:a5:00:a9:cb:c2:37:9f:6c:68: e3:23:69:0f:9f:8f:c1:11:b4:5c:91:8b:fb:d6:ba: 2b:58:6e:cc:b1:ac:b5:11:4f:6b:12:0c:9f:51:1c: bd:de:6c:ca:3c:b9:b6:ba:44:7c:dd:14:58:62:ab: 68:a7:02:f1:1c:17:b8:c8:ce:2b:d5:8f:69:a0:d2: b8:5d:9e:6c:b0:ea:80:ac:bc:d4:97:e7:48:26:e4: 6b:27:46:56:ff:24:27:17:de:44:6b:1b:1f:c4:73: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:6D:8E:76:1C:62:05:80:11:79:BA:98:EE:B4:10:0E:5A:B6:29 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b4:e6:b2:d0:4b:c9:b3:41:06:69:98:93:40:32:40:e3:53: 88:17:7e:cb:ee:92:cf:bc:38:59:82:27:65:0f:e5:87:2f:38: dc:78:19:87:06:3e:8b:de:70:81:41:93:32:1a:07:9a:f8:a6: 49:ff:d2:d9:2d:41:9b:d4:82:ce:09:28:7d:01:09:91:5f:52: be:1f:eb:6e:3a:5f:11:ff:80:0c:a0:bf:86:5a:13:77:51:55: f6:e9:a4:ab:e1:3b:99:1c:e2:41:db:5e:e5:36:01:00:a9:3b: 01:4d:68:62:2b:8a:aa:3e:0e:4a:68:dd:31:a1:ba:b6:a8:fa: 14:08:e7:8b:a6:e1:f3:87:ac:7e:fc:00:e9:32:d7:2b:90:fb: d8:b5:3e:fe:1e:6a:8f:f7:cd:db:60:fd:96:48:d5:e3:1a:e0: d7:40:65:c9:37:27:70:6a:39:8f:db:5b:22:9e:b0:f1:73:75: ed:5d:f4:df:24:cf:9b:9e:2d:da:d8:f3:5a:a7:25:48:63:96: ce:4f:53:92:fb:e8:0d:12:38:4c:44:fe:91:b1:58:eb:31:1b: 54:37:cc:22:94:fe:10:8f:6a:89:71:e1:02:0b:a7:3e:1f:0b: 20:df:3d:6f:48:cf:c5:59:f3:f1:0a:94:95:cb:c7:8a:bb:47: 87:89:4e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwNjEyMTg0MDU0WhcNMjUwNjE5MTg0MDU0WjAYMRYwFAYD VQQDEw02ODRiMWYzNi03ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCfLlAhHo8bro1xEv/Xm1pvohbTZhZtwHFCdy2rfwIPSDnJ3XhMtaGFv9oi7 52mnu30kQiWUqn+N4HjKWhCmeaVSRqw7NmI+HCUgZ/ag9HHsY4U+fvcI1f29b6pb QswScEIieI4/FyBh1+dAFhDiXOunOccpg4maUDbhjsLOQ5SGinP+D8atcEkuz2Fg fHjTLP5Dt53dFbBOucmlAKnLwjefbGjjI2kPn4/BEbRckYv71rorWG7Msay1EU9r EgyfURy93mzKPLm2ukR83RRYYqtopwLxHBe4yM4r1Y9poNK4XZ5ssOqArLzUl+dI JuRrJ0ZW/yQnF95EaxsfxHPJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3dbY52 HGIFgBF5upjutBAOWrYpMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmtOay0EvJs0EGaZiTQDJA41OIF37L7pLPvDhZgidlD+WHLzjceBmH Bj6L3nCBQZMyGgea+KZJ/9LZLUGb1ILOCSh9AQmRX1K+H+tuOl8R/4AMoL+GWhN3 UVX26aSr4TuZHOJB217lNgEAqTsBTWhiK4qqPg5KaN0xobq2qPoUCOeLpuHzh6x+ /ADpMtcrkPvYtT7+HmqP983bYP2WSNXjGuDXQGXJNydwajmP21sinrDxc3XtXfTf JM+bni3a2PNapyVIY5bOT1OS++gNEjhMRP6RsVjrMRtUN8wilP4Qj2qJceECC6c+ Hwsg3z1vSM/FWfPxCpSVy8eKu0eHiU6L -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:43 2025 by rpki-client