$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: cUkfRU0xZ8RASnoqMluslEMhVXW3T3YSMIet0VfIwsk= Subject key identifier: 15:DB:40:3C:2C:7F:EE:D6:3B:12:9E:FB:11:7E:0B:A9:9C:DC:33:B6 Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 0792 Signing time: Thu 12 Jun 2025 21:04:34 +0000 Manifest this update: Thu 12 Jun 2025 21:04:33 +0000 Manifest next update: Thu 19 Jun 2025 21:04:33 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: 3252aaHXPMxihNHLB6UvmKaffQniaob3xlxdaNTMsx0=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Jun 12 21:04:33 2025 GMT Not After : Jun 19 21:04:33 2025 GMT Subject: CN=684b40e2-7d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:71:ef:e9:31:34:47:d2:1e:ec:e2:1b:90: 77:5a:41:3e:85:6a:aa:3c:53:f5:d1:a1:d8:9d:87: a5:f3:ed:be:7f:35:69:f7:dd:a3:e6:86:44:47:ae: f6:8b:77:fe:b3:b7:64:10:2a:b8:9e:e7:67:a3:2d: 93:f1:af:02:2d:06:57:8e:21:87:0a:27:72:ff:c4: 73:82:19:21:66:c1:26:dc:0b:93:df:2a:a3:8d:4b: fc:de:c6:97:d9:9c:90:36:02:8c:73:b2:a4:f4:88: 1b:5b:3c:4d:c8:b8:b7:d7:51:8c:51:0c:cd:7e:2f: 63:f9:18:45:d6:1b:29:d6:a1:c2:8b:a7:60:7f:6c: 0f:10:03:cc:9e:63:91:3e:95:1c:5b:5e:a1:af:82: 2b:ee:87:66:95:e0:3a:33:9a:52:9d:28:2f:d9:14: 36:2a:c8:77:f4:86:a2:15:c2:e5:97:41:dd:c4:2d: f7:09:35:0a:be:4b:46:9b:f0:52:53:b9:94:b6:c7: ef:46:e2:e9:57:1b:dd:2e:24:4d:65:38:a5:c1:cd: f6:46:de:07:e4:8d:2f:b2:2d:1a:82:03:75:95:35: 9a:16:4d:74:00:f0:58:3a:f9:ef:29:3b:d4:06:6c: 5e:90:ef:c9:59:8d:f9:93:a9:fd:61:05:42:8f:ba: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:40:3C:2C:7F:EE:D6:3B:12:9E:FB:11:7E:0B:A9:9C:DC:33:B6 X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9b:3d:53:7f:db:80:84:d4:0c:b0:9a:3b:1a:94:ed:81:e8: e3:c3:24:e8:58:33:4b:d1:76:72:e8:e1:16:e5:0b:ca:aa:44: 8b:47:06:74:b6:94:58:67:12:79:04:6b:b5:27:06:1d:69:6e: c5:d5:81:ba:d2:9d:14:d7:13:54:2c:ee:c7:e9:71:63:33:8f: 59:30:00:1b:06:40:37:df:16:f4:a2:2a:75:9f:d8:a8:f2:8d: fe:c9:04:c7:88:b1:06:67:e4:ce:76:1d:cf:97:ac:37:b9:43: ec:2b:d1:b9:8e:88:62:f9:b5:57:55:e3:ee:27:9a:e8:75:a2: f8:c9:64:56:7d:34:75:51:73:01:56:e7:4d:3e:48:89:d8:3f: 33:a0:9a:dc:c5:77:f0:a1:24:9d:cc:98:82:2f:e4:c3:04:7e: b2:98:bf:59:d2:35:a6:ff:d5:9d:a4:40:8c:53:32:45:62:5c: 2f:24:1d:88:5d:7c:c2:f3:4f:ea:b4:0f:9b:61:72:e2:0a:e0: 77:8e:9a:3f:40:a3:cb:72:d9:8e:5c:49:53:8e:72:96:62:d4: 42:fb:6d:27:2e:e6:bd:d7:79:45:89:23:9c:96:5b:24:cc:b4: 3f:7a:c4:7d:e3:05:1c:fd:f1:0b:8e:3f:d9:eb:b8:a6:0e:39: 2b:63:7b:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUwNjEyMjEwNDMzWhcNMjUwNjE5MjEwNDMzWjAYMRYwFAYD VQQDEw02ODRiNDBlMi03ZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR5x7+kxNEfSHuziG5B3WkE+hWqqPFP10aHYnYel8+2+fzVp992j5oZER672 i3f+s7dkECq4nudnoy2T8a8CLQZXjiGHCidy/8RzghkhZsEm3AuT3yqjjUv83saX 2ZyQNgKMc7Kk9IgbWzxNyLi311GMUQzNfi9j+RhF1hsp1qHCi6dgf2wPEAPMnmOR PpUcW16hr4Ir7odmleA6M5pSnSgv2RQ2Ksh39IaiFcLll0HdxC33CTUKvktGm/BS U7mUtsfvRuLpVxvdLiRNZTilwc32Rt4H5I0vsi0aggN1lTWaFk10APBYOvnvKTvU BmxekO/JWY35k6n9YQVCj7oLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXbQDws f+7WOxKe+xF+C6mc3DO2MB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApmz1Tf9uAhNQMsJo7GpTtgejjwyToWDNL0XZy6OEW5QvKqkSLRwZ0 tpRYZxJ5BGu1JwYdaW7F1YG60p0U1xNULO7H6XFjM49ZMAAbBkA33xb0oip1n9io 8o3+yQTHiLEGZ+TOdh3Pl6w3uUPsK9G5johi+bVXVePuJ5rodaL4yWRWfTR1UXMB VudNPkiJ2D8zoJrcxXfwoSSdzJiCL+TDBH6ymL9Z0jWm/9WdpECMUzJFYlwvJB2I XXzC80/qtA+bYXLiCuB3jpo/QKPLctmOXElTjnKWYtRC+20nLua913lFiSOcllsk zLQ/esR94wUc/fELjj/Z67imDjkrY3t8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:30 2025 by rpki-client