$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: +dX5U+VstSApZXGoDLMrPxmb0LJ5XhHkoN7elga3ZDU= Subject key identifier: A8:B0:8F:62:E0:00:F0:C8:09:CC:9E:68:B0:7A:0C:EA:B8:07:C5:57 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 15:07:22 +0000 Manifest this update: Sat 14 Jun 2025 15:07:21 +0000 Manifest next update: Sat 21 Jun 2025 15:07:21 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: NuEFV45yZQlTBYmLaifB5W7CHoCQciMj95wWqrB+SGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Jun 14 15:07:21 2025 GMT Not After : Jun 21 15:07:21 2025 GMT Subject: CN=684d902a-b7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:39:49:3c:bd:9b:11:63:4a:99:4e:3f:a0:46: 24:f7:cf:76:e9:88:c5:d8:14:1a:60:a4:7e:4f:7f: d8:16:26:36:2a:9b:4c:db:cf:8a:2f:af:f8:00:3b: c2:d8:24:e7:3c:d4:6b:90:4e:9a:71:b5:db:50:e3: fe:d2:d5:a6:ec:6a:00:a4:b5:ad:7b:3c:0e:36:2d: 91:65:99:e9:7e:6b:72:09:2d:a6:7c:85:a3:d4:ae: 91:4f:b2:79:3d:52:1f:f0:bf:ea:4f:52:f1:53:39: b9:42:85:5e:7f:4b:68:20:f9:89:cb:0c:b6:6b:5e: 9b:6f:c3:61:57:4b:08:7e:f8:cf:93:2d:e9:f9:ae: ae:86:12:f9:0b:6a:1b:b3:8c:9c:ad:3a:d1:56:56: c4:bc:b8:3e:23:04:fd:dc:34:e4:06:63:16:cb:6b: f6:d4:5c:7e:77:cb:1e:6b:5a:4d:32:9f:5f:ed:89: c0:a4:bd:a5:31:aa:51:c7:12:ae:e6:68:e9:ad:e3: 49:b8:11:24:10:66:94:d0:bb:22:8b:1c:bf:ef:5a: 37:59:9e:c2:91:04:07:e4:69:1c:85:09:2c:ac:d9: 9c:f0:52:45:a2:70:79:8e:ac:50:a7:0f:98:b2:b7: 06:34:6b:10:d5:fb:a0:cb:67:01:dd:15:2b:05:23: 2f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B0:8F:62:E0:00:F0:C8:09:CC:9E:68:B0:7A:0C:EA:B8:07:C5:57 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:05:e2:80:01:8c:3d:8f:75:f3:c8:90:56:9d:1a:a6:8a:63: e0:33:92:a7:6e:33:d7:41:7a:23:d6:62:0b:11:36:0c:45:38: 18:45:cd:0a:aa:50:0d:66:fe:97:4e:31:18:e2:b0:d0:46:2e: 5c:9c:0e:3c:38:38:d9:6b:f8:b2:f1:74:e5:56:a6:5a:16:dc: 36:e5:a8:e3:60:63:7f:9b:a8:b1:3a:06:9c:c0:09:25:12:c6: 83:24:da:41:13:49:cc:48:20:33:08:da:77:02:98:76:62:e0: c5:0c:d5:b9:45:68:e3:99:3e:f3:e0:53:bb:c8:38:cc:b5:bc: b2:a0:79:be:4d:c4:72:e0:f0:f4:4d:aa:b4:14:5d:cf:4c:6e: 34:8b:0b:7e:e2:94:0e:2f:3c:d6:b5:23:5e:67:56:ea:6e:fa: 16:ce:7e:96:76:83:d6:d6:60:b1:a1:9f:3f:8f:dd:51:9d:65: 73:c1:84:63:66:03:c2:ff:a5:4e:d1:33:c1:d9:9d:09:bf:ed: af:ee:fc:69:63:69:b3:6a:39:d7:a1:52:f5:43:71:44:0a:ee: a4:c7:e8:dc:d6:07:1e:da:6c:98:00:c3:b6:a3:a9:78:e6:f9: cf:ef:7b:44:fb:55:e7:93:f8:fe:44:88:24:c3:4c:1d:19:39: 0e:72:91:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUwNjE0MTUwNzIxWhcNMjUwNjIxMTUwNzIxWjAYMRYwFAYD VQQDEw02ODRkOTAyYS1iN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TlJPL2bEWNKmU4/oEYk98926YjF2BQaYKR+T3/YFiY2KptM28+KL6/4ADvC 2CTnPNRrkE6acbXbUOP+0tWm7GoApLWtezwONi2RZZnpfmtyCS2mfIWj1K6RT7J5 PVIf8L/qT1LxUzm5QoVef0toIPmJywy2a16bb8NhV0sIfvjPky3p+a6uhhL5C2ob s4ycrTrRVlbEvLg+IwT93DTkBmMWy2v21Fx+d8sea1pNMp9f7YnApL2lMapRxxKu 5mjpreNJuBEkEGaU0Lsiixy/71o3WZ7CkQQH5GkchQksrNmc8FJFonB5jqxQpw+Y srcGNGsQ1fugy2cB3RUrBSMvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiwj2Lg APDICcyeaLB6DOq4B8VXMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwBeKAAYw9j3XzyJBWnRqmimPgM5KnbjPXQXoj1mILETYMRTgYRc0K qlANZv6XTjEY4rDQRi5cnA48ODjZa/iy8XTlVqZaFtw25ajjYGN/m6ixOgacwAkl EsaDJNpBE0nMSCAzCNp3Aph2YuDFDNW5RWjjmT7z4FO7yDjMtbyyoHm+TcRy4PD0 Taq0FF3PTG40iwt+4pQOLzzWtSNeZ1bqbvoWzn6WdoPW1mCxoZ8/j91RnWVzwYRj ZgPC/6VO0TPB2Z0Jv+2v7vxpY2mzajnXoVL1Q3FECu6kx+jc1gce2myYAMO2o6l4 5vnP73tE+1Xnk/j+RIgkw0wdGTkOcpHw -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:25 2025 by rpki-client