$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: cqzm4IgGilMB91fanqmgUS5MexFJZ+yVCzQPLPg7do8= Subject key identifier: 3D:48:D3:C2:12:70:FF:54:57:27:25:D8:85:4F:EF:EE:27:0F:CA:CA Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F39 Signing time: Thu 12 Jun 2025 17:30:34 +0000 Manifest this update: Thu 12 Jun 2025 17:30:33 +0000 Manifest next update: Thu 19 Jun 2025 17:30:33 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: Z1LBV0Kux0hai7cx38xivkQADOPeOo6G1Izsq5ykWAM=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Jun 12 17:30:33 2025 GMT Not After : Jun 19 17:30:33 2025 GMT Subject: CN=684b0eba-0c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:6b:cc:25:f0:4d:82:f1:9d:6a:d1:c3:1a: 41:9c:cc:38:96:46:ba:95:49:6d:8c:bc:51:c4:17: a4:2e:b6:90:b2:9a:77:3e:77:3e:66:e2:43:83:6c: 5c:55:ba:1b:92:c3:35:58:50:91:91:37:e8:94:28: 30:19:81:e3:53:66:d0:22:63:bf:16:7a:9a:11:a0: 03:ab:d8:e1:6b:dc:9b:be:71:7c:18:a7:25:48:76: 79:96:80:36:2c:39:11:5f:f1:d1:3d:5d:03:14:f9: 81:11:58:ad:d9:ec:96:b2:80:8c:0f:2b:33:27:1d: 45:d6:cb:f6:32:b1:0f:84:14:41:90:11:96:89:71: 6a:f9:29:50:4e:76:a5:43:9d:c4:0f:b7:dc:69:14: 90:2a:1e:95:4a:90:eb:87:4d:b2:bd:11:1d:06:7f: cf:2f:12:c8:34:44:20:b6:11:b6:e7:0c:ee:67:2e: d1:9b:23:45:8e:93:61:e9:a5:39:cf:52:b2:39:32: 61:2a:27:4e:77:a7:ca:80:50:ae:22:8d:4f:d3:44: a0:df:52:92:25:ef:c5:c0:06:65:b1:98:0f:1b:5f: c2:9a:05:a2:19:7c:03:b2:25:55:a9:95:92:04:59: 77:40:5f:c7:2c:18:7f:e6:55:60:02:f7:46:87:d5: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:D3:C2:12:70:FF:54:57:27:25:D8:85:4F:EF:EE:27:0F:CA:CA X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3a:51:cf:64:7c:87:03:19:8d:b8:f4:18:66:3a:77:d8:ba: 0e:0d:8b:7c:dc:f3:c8:12:bf:a8:fe:45:b1:06:69:1c:2f:c2: d6:67:99:ad:22:29:79:3c:7e:15:45:8e:92:fa:1a:74:05:90: 8a:3a:fe:40:58:fa:e4:5f:64:3a:f9:16:73:ee:39:bc:26:8f: eb:cf:f0:b9:34:94:a2:53:35:f9:5b:cb:d6:6a:65:36:2e:7d: 49:ea:e5:4d:11:bf:bf:91:85:91:87:b6:9e:c9:28:e8:d7:8e: 4f:6d:80:d4:e6:ee:75:b6:a5:52:df:93:ab:b8:c3:ec:54:60: 17:87:af:62:c8:6f:3f:88:72:80:eb:0b:37:3b:04:a3:86:cb: 28:b4:56:d5:28:16:db:99:50:a5:c3:00:19:5c:31:41:2e:1c: a7:80:18:db:0e:9f:25:41:a9:16:21:f0:c7:7b:50:03:b2:3e: 5f:21:a9:e9:1d:4d:eb:72:fc:67:d5:28:f4:f5:cc:79:b4:de: c3:ca:54:cf:e2:eb:ff:d3:f0:eb:2b:cd:53:f0:e1:4e:ef:6f: fe:8e:ea:6a:38:be:22:81:0b:9b:6e:9e:44:d3:9a:db:12:81: 01:d2:c3:f8:fb:e6:11:03:83:bc:5c:8f:5e:1a:f2:57:9c:6b: 0b:07:3e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNjEyMTczMDMzWhcNMjUwNjE5MTczMDMzWjAYMRYwFAYD VQQDEw02ODRiMGViYS0wYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvohrzCXwTYLxnWrRwxpBnMw4lka6lUltjLxRxBekLraQspp3Pnc+ZuJDg2xc VbobksM1WFCRkTfolCgwGYHjU2bQImO/FnqaEaADq9jha9ybvnF8GKclSHZ5loA2 LDkRX/HRPV0DFPmBEVit2eyWsoCMDyszJx1F1sv2MrEPhBRBkBGWiXFq+SlQTnal Q53ED7fcaRSQKh6VSpDrh02yvREdBn/PLxLINEQgthG25wzuZy7RmyNFjpNh6aU5 z1KyOTJhKidOd6fKgFCuIo1P00Sg31KSJe/FwAZlsZgPG1/CmgWiGXwDsiVVqZWS BFl3QF/HLBh/5lVgAvdGh9WfHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1I08IS cP9UVycl2IVP7+4nD8rKMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9OlHPZHyHAxmNuPQYZjp32LoODYt83PPIEr+o/kWxBmkcL8LWZ5mt Iil5PH4VRY6S+hp0BZCKOv5AWPrkX2Q6+RZz7jm8Jo/rz/C5NJSiUzX5W8vWamU2 Ln1J6uVNEb+/kYWRh7aeySjo145PbYDU5u51tqVS35OruMPsVGAXh69iyG8/iHKA 6ws3OwSjhssotFbVKBbbmVClwwAZXDFBLhyngBjbDp8lQakWIfDHe1ADsj5fIanp HU3rcvxn1Sj09cx5tN7DylTP4uv/0/DrK81T8OFO72/+jupqOL4igQubbp5E05rb EoEB0sP4++YRA4O8XI9eGvJXnGsLBz4x -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:59 2025 by rpki-client