$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: wGiJNraWlTvnydHkuGsDPePnuSES0TC/0HtG+FbqBWE= Subject key identifier: B8:FF:60:8A:36:E0:46:AD:7E:BC:AF:41:E1:3A:1B:10:41:D5:8A:F2 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FC1 Signing time: Thu 12 Jun 2025 17:24:59 +0000 Manifest this update: Thu 12 Jun 2025 17:24:59 +0000 Manifest next update: Thu 19 Jun 2025 17:24:59 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: Yq9C+7WbPMOrI/fN2M+GMZgEGrjrnS6O5BADD8wHnqM=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Jun 12 17:24:59 2025 GMT Not After : Jun 19 17:24:59 2025 GMT Subject: CN=684b0d6b-c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2b:bb:d4:d7:73:a3:3b:16:34:cb:9e:06:c0: 81:9d:43:5f:ad:66:2b:7b:3f:d6:da:38:13:58:02: df:a2:98:02:78:75:81:7f:75:52:8a:c9:73:b1:90: 76:ec:8a:d7:ee:1d:05:16:dd:ec:44:98:c5:bb:c9: 88:11:c4:d5:9b:af:ec:6a:f4:00:08:20:0e:38:fb: aa:94:93:f7:c6:b5:d5:6d:f5:b4:8e:eb:b6:22:67: 88:4c:18:09:67:a6:2e:db:3c:30:14:4e:67:c5:b8: d6:8e:74:e7:82:0c:a4:0d:0d:43:1d:72:c6:ae:53: 96:3d:9e:bd:50:47:bd:05:91:fd:77:cc:0a:9e:f2: b4:66:8f:77:89:d3:7c:10:94:45:e3:42:41:07:dc: ac:ff:6f:bf:2c:11:69:9e:0f:33:03:3d:62:5c:d7: 0d:86:29:df:5b:d7:c4:83:95:36:9e:8d:95:66:33: 0a:48:4a:35:2a:8c:8b:af:c4:06:d7:c0:63:9f:94: 3a:26:66:5e:51:8f:76:f9:ff:d9:54:b9:e0:81:ff: 8d:a7:b2:92:5e:05:68:2d:68:56:42:d7:df:e5:7c: e1:be:0f:06:33:00:de:a3:58:b8:f7:62:2a:2f:2e: 0f:68:fe:78:99:69:e6:91:83:8f:b8:68:d0:d7:4b: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:60:8A:36:E0:46:AD:7E:BC:AF:41:E1:3A:1B:10:41:D5:8A:F2 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:e5:c6:9f:68:15:a1:8f:7e:6d:ee:93:dc:76:4d:d9:b6: 7d:a3:08:c7:80:98:98:d8:71:c2:c9:2c:0e:82:c7:65:87:a0: 55:3f:82:93:28:c5:f5:73:c6:96:3d:70:bd:29:31:5b:fa:d1: 0b:d1:9b:4f:73:47:8a:1d:4c:fe:8c:6a:a9:57:1f:7b:ba:a0: ed:43:26:62:3c:44:bb:88:17:12:7f:3a:54:ca:da:0c:37:3d: 8d:ad:1b:5f:ee:37:a1:29:6d:f1:00:dd:da:4d:35:22:ff:f8: 5a:5e:2c:98:d1:5b:63:2b:24:9a:4b:b8:d8:1d:e3:49:8d:02: 1d:e3:fd:38:59:8f:71:18:08:79:3e:32:5e:15:b7:83:f0:9a: c8:47:e8:c9:75:92:1b:3b:66:72:51:49:f1:1b:f7:ad:69:b7: 58:bd:37:15:ed:56:cd:dd:99:d6:ab:43:3f:db:79:24:01:d9: 75:72:1f:bb:93:ef:fc:9e:f6:c6:ff:37:e7:bd:f7:11:bb:84: 75:da:37:ef:7e:5a:33:d2:e7:2b:fe:87:a7:7a:41:37:26:f2: 31:e4:8d:2e:19:23:c4:63:ed:59:f4:90:85:26:7c:dd:0f:4e: 53:ff:81:96:20:d3:e5:d0:ac:7c:cf:60:29:61:d5:19:8a:b7: c7:0f:a4:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwNjEyMTcyNDU5WhcNMjUwNjE5MTcyNDU5WjAYMRYwFAYD VQQDEw02ODRiMGQ2Yi1jMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Cu71NdzozsWNMueBsCBnUNfrWYrez/W2jgTWALfopgCeHWBf3VSislzsZB2 7IrX7h0FFt3sRJjFu8mIEcTVm6/savQACCAOOPuqlJP3xrXVbfW0juu2ImeITBgJ Z6Yu2zwwFE5nxbjWjnTnggykDQ1DHXLGrlOWPZ69UEe9BZH9d8wKnvK0Zo93idN8 EJRF40JBB9ys/2+/LBFpng8zAz1iXNcNhinfW9fEg5U2no2VZjMKSEo1KoyLr8QG 18Bjn5Q6JmZeUY92+f/ZVLnggf+Np7KSXgVoLWhWQtff5Xzhvg8GMwDeo1i492Iq Ly4PaP54mWnmkYOPuGjQ10uAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj/YIo2 4EatfryvQeE6GxBB1YryMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKBOXGn2gVoY9+be6T3HZN2bZ9owjHgJiY2HHCySwOgsdlh6BVP4KT KMX1c8aWPXC9KTFb+tEL0ZtPc0eKHUz+jGqpVx97uqDtQyZiPES7iBcSfzpUytoM Nz2NrRtf7jehKW3xAN3aTTUi//haXiyY0VtjKySaS7jYHeNJjQId4/04WY9xGAh5 PjJeFbeD8JrIR+jJdZIbO2ZyUUnxG/etabdYvTcV7VbN3ZnWq0M/23kkAdl1ch+7 k+/8nvbG/zfnvfcRu4R12jfvfloz0ucr/oenekE3JvIx5I0uGSPEY+1Z9JCFJnzd D05T/4GWINPl0Kx8z2ApYdUZirfHD6S9 -----END CERTIFICATE-----Generated at Sat Jun 14 18:14:15 2025 by rpki-client