$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: bZJ27AKGuAjkU2mnxdQjTjbTTEAqOIIOx+aCVJE/QaI= Subject key identifier: A3:D8:96:D3:3B:38:6A:B9:F5:35:33:8E:5A:02:08:E2:59:A6:3C:4A Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 01AC Signing time: Fri 13 Jun 2025 02:15:58 +0000 Manifest this update: Fri 13 Jun 2025 02:15:58 +0000 Manifest next update: Fri 20 Jun 2025 02:15:58 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: oDpMwmYDfQW9XeLx72T+OAanJGtB5waJoxcyY8j+kl4=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Jun 13 02:15:58 2025 GMT Not After : Jun 20 02:15:58 2025 GMT Subject: CN=684b89de-49ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:ce:e9:37:6f:66:cb:68:26:25:f3:9b:3f: 52:8c:47:33:a1:01:a0:ac:6f:b3:5c:9e:29:47:3f: 8a:06:8d:cf:c0:13:66:7a:08:0d:ff:f2:e6:8a:c9: 1b:00:0b:de:52:c5:0b:e7:ee:45:4c:31:53:14:1a: c2:f0:19:bc:b7:d5:4e:9b:30:d8:89:94:8e:c4:ad: 3c:7d:f8:f3:ef:67:7d:93:db:02:8b:61:d7:a3:35: 76:f6:9f:c4:0e:4c:71:ba:9f:f7:64:ab:d5:d5:d5: 1d:b3:26:75:79:9a:16:bc:35:67:8e:90:26:e8:48: f6:9b:3e:5b:3a:86:f9:d1:49:94:89:4c:68:bb:f9: 88:a6:b2:09:fe:14:c1:ab:b2:9d:2d:0f:42:26:a7: a0:62:1d:01:ed:0f:d7:50:35:91:83:5a:01:f1:d5: 87:68:a6:1b:10:5b:58:92:87:0b:6f:b8:7b:8a:eb: 7f:c6:fb:91:03:31:d3:3c:74:5c:05:6d:c8:d3:fa: 16:8b:3c:e7:9b:21:09:26:40:91:74:e8:bc:aa:55: f0:e7:40:09:6b:3f:42:b7:86:52:bc:28:74:49:fb: 20:1f:86:02:63:0b:44:b0:94:1c:55:4e:58:ab:f0: 31:40:11:e7:56:09:4c:83:67:5b:07:2b:3c:a9:4e: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D8:96:D3:3B:38:6A:B9:F5:35:33:8E:5A:02:08:E2:59:A6:3C:4A X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a1:b7:80:d6:7e:39:8f:c4:27:1b:7d:0e:d7:c3:ed:e0:4c: 34:99:bf:62:cf:8d:55:4f:ab:c5:70:0e:30:3c:fc:22:61:6a: f2:1d:fc:ce:51:b7:c6:36:53:76:35:26:17:e7:81:ce:77:fc: 9f:08:e8:78:de:fe:93:6f:8b:2d:16:ed:fb:e4:53:fc:4d:77: 05:e5:16:c6:77:41:28:9e:c4:af:75:6e:af:05:eb:4a:40:bb: 32:86:53:0a:6b:a4:c4:62:22:04:c1:a4:ba:02:5b:ca:a9:8f: 03:3e:33:c4:d1:2f:03:d3:e1:e2:74:db:f8:2a:80:eb:24:a3: a0:12:e5:6c:9d:91:d4:73:00:2c:09:6b:89:ab:d9:8f:22:af: bf:e8:e4:d0:3a:ac:62:63:37:63:82:1f:58:4e:5e:ae:7a:c5: 2a:e4:bd:81:b2:a2:48:7b:d7:4b:63:6a:8c:6a:37:e1:0d:99: b0:c8:be:61:8b:85:1c:2f:31:86:f0:0d:25:9a:39:80:fb:93: 10:5d:0b:a9:0f:91:ff:9e:75:ad:ac:cf:c2:15:3d:d4:8f:e3: 49:b3:8e:71:fe:f9:fa:dd:80:5c:5c:50:0c:a7:03:31:91:f4: 15:c4:b8:a6:f6:1c:81:5b:8f:6f:c3:cd:e7:4d:6a:02:40:72: 71:da:20:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwNjEzMDIxNTU4WhcNMjUwNjIwMDIxNTU4WjAYMRYwFAYD VQQDEw02ODRiODlkZS00OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunrO6TdvZstoJiXzmz9SjEczoQGgrG+zXJ4pRz+KBo3PwBNmeggN//Lmiskb AAveUsUL5+5FTDFTFBrC8Bm8t9VOmzDYiZSOxK08ffjz72d9k9sCi2HXozV29p/E Dkxxup/3ZKvV1dUdsyZ1eZoWvDVnjpAm6Ej2mz5bOob50UmUiUxou/mIprIJ/hTB q7KdLQ9CJqegYh0B7Q/XUDWRg1oB8dWHaKYbEFtYkocLb7h7iut/xvuRAzHTPHRc BW3I0/oWizznmyEJJkCRdOi8qlXw50AJaz9Ct4ZSvCh0SfsgH4YCYwtEsJQcVU5Y q/AxQBHnVglMg2dbBys8qU7EYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPYltM7 OGq59TUzjloCCOJZpjxKMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVobeA1n45j8QnG30O18Pt4Ew0mb9iz41VT6vFcA4wPPwiYWryHfzO UbfGNlN2NSYX54HOd/yfCOh43v6Tb4stFu375FP8TXcF5RbGd0EonsSvdW6vBetK QLsyhlMKa6TEYiIEwaS6AlvKqY8DPjPE0S8D0+HidNv4KoDrJKOgEuVsnZHUcwAs CWuJq9mPIq+/6OTQOqxiYzdjgh9YTl6uesUq5L2BsqJIe9dLY2qMajfhDZmwyL5h i4UcLzGG8A0lmjmA+5MQXQupD5H/nnWtrM/CFT3Uj+NJs45x/vn63YBcXFAMpwMx kfQVxLim9hyBW49vw83nTWoCQHJx2iDW -----END CERTIFICATE-----Generated at Sat Jun 14 17:20:03 2025 by rpki-client