$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: 7mdiqooev9pRDuYsUOWGYmvcqWMdammYYb5ft5uFehA= Subject key identifier: EB:53:DD:57:F1:6E:72:4B:2B:7B:75:4F:A6:13:BA:3D:50:42:A8:37 Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 0214 Signing time: Fri 13 Jun 2025 01:28:48 +0000 Manifest this update: Fri 13 Jun 2025 01:28:48 +0000 Manifest next update: Fri 20 Jun 2025 01:28:48 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: B+NDny2G0PwYhcqZs+iD0uZ2eUaZymjDR5aHZdVaq6s=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Jun 13 01:28:48 2025 GMT Not After : Jun 20 01:28:48 2025 GMT Subject: CN=684b7ed0-e31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:ec:a1:c8:2f:98:1b:af:e5:7c:11:77:57: 77:db:7b:c8:2d:36:39:1f:6c:ee:20:91:e6:d2:04: 9c:9e:a5:8c:32:69:f7:89:93:bc:30:38:e1:08:1c: 24:b9:4c:df:c6:e8:96:67:db:f5:56:f7:e4:98:a8: d0:4a:6b:61:64:b9:6a:64:0d:81:55:42:61:11:d6: b3:60:93:d7:c4:19:d0:43:c8:15:20:6a:a4:7d:72: 66:0f:92:84:d8:a1:45:1a:97:ad:30:99:bb:5b:a9: 25:0b:51:4a:cf:b5:70:5e:a6:3c:b8:d8:40:5f:42: 17:29:e9:ca:6e:c3:99:19:7c:3c:19:bf:c0:7b:76: e0:3d:e4:dd:e0:69:0b:64:0b:51:e7:37:f1:30:96: 11:53:03:e9:54:9d:1a:96:c2:79:1d:a5:a6:b9:95: e0:0c:dd:74:28:6d:18:05:4a:b9:7d:23:65:0d:9b: d6:54:77:1a:05:4e:4c:c5:0c:b0:3e:cc:cd:ae:3c: 47:ee:5c:2e:b6:cf:c3:e0:d4:a3:94:06:f8:3b:a5: 01:66:f6:68:63:a7:fa:22:b5:fd:b1:c6:79:17:93: 75:db:a1:b6:4f:9f:de:d3:fe:09:e6:58:67:f7:fb: 6f:64:59:0c:94:6d:85:53:59:8f:8e:a1:1a:62:09: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:DD:57:F1:6E:72:4B:2B:7B:75:4F:A6:13:BA:3D:50:42:A8:37 X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e5:c5:3d:ff:cf:81:98:8b:4d:8a:b3:63:24:32:0a:38:31: 6e:4d:bb:30:b4:db:dd:24:e7:7e:e2:1c:88:2f:c0:cf:2d:63: b3:55:0f:fa:e7:14:63:ff:c0:a9:05:35:23:42:cd:9f:3f:b5: cd:de:64:ea:48:a7:5f:b2:cb:1e:bb:9a:7f:4c:27:7e:e3:08: 1f:95:8b:27:ba:a4:c4:b2:40:ee:23:13:8d:fe:dd:0a:d2:7b: c8:0f:0b:f6:29:4b:17:28:67:cb:d4:9b:27:3b:0d:cb:ff:e4: 26:24:9f:f6:7f:31:a9:cd:47:4d:ad:40:21:0f:72:18:b8:a6: fe:42:1b:b7:cb:45:0b:b4:f3:88:8d:eb:99:84:b3:6c:ed:2c: 64:26:3d:f9:2e:33:c6:c6:dd:46:a8:15:19:a9:76:22:fc:85: 24:7d:2a:64:ea:8f:8a:99:9b:71:97:65:68:2a:e4:a6:5d:88: d5:79:c5:eb:0d:b5:29:7e:c0:9d:a7:ba:d1:fa:e8:72:49:8e: 9b:42:6c:7a:2f:e8:b4:a1:9a:7f:01:f4:7a:ae:3b:a6:57:44: 3d:b6:1a:d6:97:90:ad:7e:77:75:82:0c:11:d2:5a:b7:2f:22: 79:09:1c:b4:a7:19:73:28:3d:c6:a6:dd:49:f1:41:8a:f6:d6: 27:e3:fd:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwNjEzMDEyODQ4WhcNMjUwNjIwMDEyODQ4WjAYMRYwFAYD VQQDEw02ODRiN2VkMC1lMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm7socgvmBuv5XwRd1d323vILTY5H2zuIJHm0gScnqWMMmn3iZO8MDjhCBwk uUzfxuiWZ9v1VvfkmKjQSmthZLlqZA2BVUJhEdazYJPXxBnQQ8gVIGqkfXJmD5KE 2KFFGpetMJm7W6klC1FKz7VwXqY8uNhAX0IXKenKbsOZGXw8Gb/Ae3bgPeTd4GkL ZAtR5zfxMJYRUwPpVJ0alsJ5HaWmuZXgDN10KG0YBUq5fSNlDZvWVHcaBU5MxQyw PszNrjxH7lwuts/D4NSjlAb4O6UBZvZoY6f6IrX9scZ5F5N126G2T5/e0/4J5lhn 9/tvZFkMlG2FU1mPjqEaYgnhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtT3Vfx bnJLK3t1T6YTuj1QQqg3MB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg5cU9/8+BmItNirNjJDIKODFuTbswtNvdJOd+4hyIL8DPLWOzVQ/6 5xRj/8CpBTUjQs2fP7XN3mTqSKdfssseu5p/TCd+4wgflYsnuqTEskDuIxON/t0K 0nvIDwv2KUsXKGfL1JsnOw3L/+QmJJ/2fzGpzUdNrUAhD3IYuKb+Qhu3y0ULtPOI jeuZhLNs7SxkJj35LjPGxt1GqBUZqXYi/IUkfSpk6o+KmZtxl2VoKuSmXYjVecXr DbUpfsCdp7rR+uhySY6bQmx6L+i0oZp/AfR6rjumV0Q9thrWl5Ctfnd1ggwR0lq3 LyJ5CRy0pxlzKD3Gpt1J8UGK9tYn4/1c -----END CERTIFICATE-----Generated at Sat Jun 14 17:13:56 2025 by rpki-client