$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json) Hash identifier: Ssgrdow57J8TcjjqoRk65RuTYJY32p4sALIIVC4b63k= Subject key identifier: 32:73:19:06:BD:DF:DE:F5:D9:3D:CB:BA:91:FC:9B:C5:76:4D:3E:B1 Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft Manifest number: 0676 Signing time: Mon 16 Jun 2025 22:02:19 +0000 Manifest this update: Mon 16 Jun 2025 22:02:18 +0000 Manifest next update: Mon 23 Jun 2025 22:02:18 +0000 Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: NqaCWDwElc/wpboGRmWbfsjdfZ8YD3XzXA9OcPgxtLA=) 2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Validity Not Before: Jun 16 22:02:18 2025 GMT Not After : Jun 23 22:02:18 2025 GMT Subject: CN=6850946a-410c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:85:13:5f:55:fb:01:10:3c:29:c6:3a:f7: 12:c1:48:6a:70:85:53:51:e2:fe:c3:06:6a:a9:cd: ed:47:be:7d:be:30:5e:fc:50:c7:1f:17:28:f3:07: 18:5c:d9:76:50:04:2c:97:ea:b8:8b:1f:db:81:56: d7:c9:2d:b7:70:fa:d6:24:49:c3:ea:ea:0e:49:19: 71:7b:fc:8c:19:33:4a:9b:fa:3a:0f:37:96:c8:e0: eb:47:e7:ba:86:90:ea:44:28:38:fc:5b:cd:7f:b5: 72:ff:e4:fa:24:86:3c:e8:9c:6a:ba:55:43:80:c7: 45:06:3d:a0:c8:5f:cf:79:8a:96:24:66:c0:5b:76: 0c:61:a7:12:57:0f:6d:22:0f:93:e3:c7:16:f5:fc: 5c:f9:c3:19:ad:61:27:4f:7b:d6:6d:11:2d:84:d1: 29:4a:25:f3:ff:a4:ea:5d:fa:07:3b:24:3e:4f:3b: 95:27:77:cd:15:0d:00:86:1e:b2:b1:d3:85:4f:5c: e1:17:0d:88:af:3e:2f:c3:f4:6d:5c:78:9c:0a:c3: 01:69:5d:cc:d7:aa:9a:c6:7e:6d:bc:f2:2e:79:ad: 1f:8c:2e:c2:f2:a3:79:f3:7c:d3:fc:53:95:dc:05: 85:a9:99:ab:48:cf:50:47:37:3d:c7:68:14:69:18: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:19:06:BD:DF:DE:F5:D9:3D:CB:BA:91:FC:9B:C5:76:4D:3E:B1 X509v3 Authority Key Identifier: keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:29:15:78:bb:85:5b:37:6a:ff:3d:54:fd:32:f7:e7:c0:b4: 3f:37:1c:f1:33:c7:d8:e3:8e:91:99:61:9d:d3:92:c6:98:ed: d6:8c:83:95:c1:a7:f2:64:6b:fb:2f:9b:6a:14:84:00:b6:e1: 76:82:b8:92:f6:e1:68:0c:e2:59:29:f6:8b:98:d4:6e:15:88: 81:1e:2d:15:f0:9d:8a:cc:1b:89:f0:71:66:64:aa:f9:b6:19: 4c:a3:ca:d5:33:63:75:de:14:bf:ac:fc:71:6b:96:e6:9b:1d: 99:89:a6:c4:08:1f:c3:33:9b:1c:fe:b3:03:23:a2:38:a0:ff: 60:e2:df:f8:a3:de:83:d9:80:82:2f:9b:88:85:e4:b8:54:87: 29:de:e4:d5:52:7c:ff:50:a8:52:47:2d:6b:97:f4:08:f8:82: 2e:ef:fd:c8:13:63:19:9b:f4:f7:c3:9b:8c:f2:1f:b0:2c:7b: 28:bc:f3:24:fa:0a:06:64:34:40:01:10:22:82:78:c1:3c:0c: bb:a4:1c:df:b1:6e:1a:26:a6:66:24:89:5b:85:0a:07:62:42: 7b:95:78:ba:e4:ca:2b:c1:38:56:7c:f8:56:cf:b9:68:2c:8a: d3:8e:eb:fb:83:3d:26:fe:0b:e7:c7:ed:50:1c:a2:d3:ce:40: 67:47:7e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3 NUE5QzIzRjEwHhcNMjUwNjE2MjIwMjE4WhcNMjUwNjIzMjIwMjE4WjAYMRYwFAYD VQQDEw02ODUwOTQ2YS00MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0siFE19V+wEQPCnGOvcSwUhqcIVTUeL+wwZqqc3tR759vjBe/FDHHxco8wcY XNl2UAQsl+q4ix/bgVbXyS23cPrWJEnD6uoOSRlxe/yMGTNKm/o6DzeWyODrR+e6 hpDqRCg4/FvNf7Vy/+T6JIY86JxqulVDgMdFBj2gyF/PeYqWJGbAW3YMYacSVw9t Ig+T48cW9fxc+cMZrWEnT3vWbREthNEpSiXz/6TqXfoHOyQ+TzuVJ3fNFQ0Ahh6y sdOFT1zhFw2Irz4vw/RtXHicCsMBaV3M16qaxn5tvPIuea0fjC7C8qN583zT/FOV 3AWFqZmrSM9QRzc9x2gUaRitQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJzGQa9 39712T3LupH8m8V2TT6xMB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjEzMS9CRTRBNkNEMDdENzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZp UloyRHc2NjBpTWwxcWNJX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYKRV4u4VbN2r/PVT9MvfnwLQ/NxzxM8fY446RmWGd05LGmO3WjIOV wafyZGv7L5tqFIQAtuF2griS9uFoDOJZKfaLmNRuFYiBHi0V8J2KzBuJ8HFmZKr5 thlMo8rVM2N13hS/rPxxa5bmmx2ZiabECB/DM5sc/rMDI6I4oP9g4t/4o96D2YCC L5uIheS4VIcp3uTVUnz/UKhSRy1rl/QI+IIu7/3IE2MZm/T3w5uM8h+wLHsovPMk +goGZDRAARAignjBPAy7pBzfsW4aJqZmJIlbhQoHYkJ7lXi65MorwThWfPhWz7lo LIrTjuv7gz0m/gvnx+1QHKLTzkBnR36N -----END CERTIFICATE-----Generated at Wed Jun 18 06:33:44 2025 by rpki-client