$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: kiwt1GdTEtFcnuF2C1pLBOeYoIW7Q0WcWy2L82oWOyU= Subject key identifier: E4:42:64:10:62:5C:1E:B5:66:B4:DB:CB:47:D9:AC:71:14:FC:20:E8 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C2E Signing time: Wed 18 Jun 2025 17:32:27 +0000 Manifest this update: Wed 18 Jun 2025 17:32:27 +0000 Manifest next update: Wed 25 Jun 2025 17:32:27 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: GOR6Sdm42xtVyojnDZJi3uQTOnhNAOSeZcjiMg2mSvs=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Jun 18 17:32:27 2025 GMT Not After : Jun 25 17:32:27 2025 GMT Subject: CN=6852f82b-91f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:8f:ad:3e:69:f8:65:4a:bd:1c:f8:4b:2d: 34:11:7a:a7:87:da:24:5b:ed:cc:3b:fc:be:38:8a: 33:1e:21:cc:87:43:f2:56:eb:11:29:eb:40:2a:ec: 26:01:77:d4:a8:33:ba:c3:3e:97:79:4c:d1:b0:89: 6d:87:b0:a6:57:07:9d:5f:d2:5f:ca:12:15:3c:bc: 76:20:4d:98:56:6a:2c:be:cc:64:78:8e:fc:e0:a0: b9:50:d1:47:28:e8:e7:f3:7f:ee:d6:c7:6b:7d:b5: d3:2e:61:52:94:8a:ba:cf:d6:5e:4e:34:82:2b:bd: 0f:b0:a4:48:46:89:3c:79:5b:cd:f9:bc:39:43:c6: 15:09:c5:ac:90:ee:e9:66:91:40:c2:56:8c:0c:78: be:25:8f:5a:70:d5:ac:1c:ce:e3:2f:97:6c:93:ae: 3e:0d:2b:53:01:88:eb:1f:e2:27:a3:54:01:b0:9d: 76:2a:0b:7b:ba:23:53:fa:8c:b5:38:c6:a5:93:76: c4:7b:29:24:18:f2:09:fb:71:01:20:a8:9b:ae:df: b3:f3:1c:44:83:8e:d4:78:0d:79:ba:a5:07:0c:09: 4d:56:af:bc:f8:cd:16:36:19:a7:fe:bd:44:d3:42: b2:dd:fd:d4:e6:6f:95:d0:4b:b4:94:b4:61:19:80: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:64:10:62:5C:1E:B5:66:B4:DB:CB:47:D9:AC:71:14:FC:20:E8 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e9:19:5a:56:76:e0:91:62:04:65:41:34:92:29:b5:bf:28: b2:25:58:7f:cf:80:2c:c6:6e:5a:fe:e2:15:87:84:71:db:f5: ef:df:26:ed:0d:b3:a4:4d:b9:d5:ca:be:d1:73:5a:0e:18:64: ea:bb:b8:4a:bc:e5:96:3d:19:6c:bb:af:bc:ac:4b:ad:c8:d3: 15:18:15:cd:01:14:13:3b:b5:57:f5:7d:fa:50:bc:1d:f4:49: 0b:1c:e1:dc:84:c0:f8:cc:05:59:a4:9e:0c:5f:ff:6f:26:2c: 43:38:75:6f:8a:91:ec:2a:f0:e4:8c:14:a5:15:2a:56:75:33: d0:ba:9a:85:6b:ad:26:38:16:21:d5:9d:ab:9f:21:75:6d:b8: 84:6b:6f:71:2e:9e:60:27:d6:a4:ad:70:35:f9:a5:1f:38:e0: 86:76:c3:f7:1c:1c:20:be:4d:a0:68:39:d6:23:59:93:39:7a: f9:59:d1:90:6e:39:b8:cd:cf:52:94:50:49:df:48:43:9a:3d: b7:15:53:1b:bb:d9:c2:54:67:d0:ed:ca:07:9a:13:d7:b5:2f: 99:8c:79:c5:6a:40:46:47:84:9a:05:b2:4a:d7:aa:20:67:e9: c4:c7:24:13:08:90:d6:d5:18:17:c0:8a:12:f4:5a:49:39:fa: 98:41:cf:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNjE4MTczMjI3WhcNMjUwNjI1MTczMjI3WjAYMRYwFAYD VQQDEw02ODUyZjgyYi05MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMSPrT5p+GVKvRz4Sy00EXqnh9okW+3MO/y+OIozHiHMh0PyVusRKetAKuwm AXfUqDO6wz6XeUzRsIlth7CmVwedX9JfyhIVPLx2IE2YVmosvsxkeI784KC5UNFH KOjn83/u1sdrfbXTLmFSlIq6z9ZeTjSCK70PsKRIRok8eVvN+bw5Q8YVCcWskO7p ZpFAwlaMDHi+JY9acNWsHM7jL5dsk64+DStTAYjrH+Ino1QBsJ12Kgt7uiNT+oy1 OMalk3bEeykkGPIJ+3EBIKibrt+z8xxEg47UeA15uqUHDAlNVq+8+M0WNhmn/r1E 00Ky3f3U5m+V0Eu0lLRhGYDe6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORCZBBi XB61ZrTby0fZrHEU/CDoMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD6RlaVnbgkWIEZUE0kim1vyiyJVh/z4Asxm5a/uIVh4Rx2/Xv3ybt DbOkTbnVyr7Rc1oOGGTqu7hKvOWWPRlsu6+8rEutyNMVGBXNARQTO7VX9X36ULwd 9EkLHOHchMD4zAVZpJ4MX/9vJixDOHVvipHsKvDkjBSlFSpWdTPQupqFa60mOBYh 1Z2rnyF1bbiEa29xLp5gJ9akrXA1+aUfOOCGdsP3HBwgvk2gaDnWI1mTOXr5WdGQ bjm4zc9SlFBJ30hDmj23FVMbu9nCVGfQ7coHmhPXtS+ZjHnFakBGR4SaBbJK16og Z+nExyQTCJDW1RgXwIoS9FpJOfqYQc+H -----END CERTIFICATE-----Generated at Thu Jun 19 17:14:15 2025 by rpki-client