$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: xrO7SGdrOxzxSe80CS9YM6sjRi/7M86/0kGeOjUW0g8= Subject key identifier: 5D:E1:95:4E:3D:79:93:55:E8:32:FB:88:BC:A6:A5:4F:C1:A9:CD:9B Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 0108 Signing time: Tue 17 Jun 2025 04:04:10 +0000 Manifest this update: Tue 17 Jun 2025 04:04:09 +0000 Manifest next update: Tue 24 Jun 2025 04:04:09 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: L6FQ2Wbf2Q0LFKm+hTO/4+BOXj4EVNTtJJtkpykVzug=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Jun 17 04:04:09 2025 GMT Not After : Jun 24 04:04:09 2025 GMT Subject: CN=6850e93a-1e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:b9:da:d1:52:22:a0:c6:21:1e:a2:b6:a0: 6d:88:bc:a4:da:31:77:cf:e9:1c:05:60:6e:34:08: bf:01:88:e8:2b:70:d4:6b:48:1a:4e:f0:57:90:77: 11:64:6c:a7:3c:91:20:50:80:17:38:cd:6f:f3:eb: 21:57:86:32:59:f9:d7:c8:ae:b2:be:2b:ab:22:c7: 87:cf:90:96:3c:fd:f2:38:c0:cb:69:44:4a:ba:14: 20:ec:de:b4:18:d7:f1:16:63:c7:ac:43:89:a7:b8: fd:09:69:d9:61:f6:5b:db:0e:d7:00:4c:c8:66:72: f0:14:75:66:12:d2:5a:9b:02:ad:09:5a:d9:35:f3: 62:14:35:32:3c:db:a8:34:44:67:aa:80:a6:06:da: 0b:a3:73:1f:1b:fd:f3:20:58:c9:99:20:3b:3f:3f: 85:80:35:df:64:a5:00:f4:02:0a:d3:c4:b5:14:02: 81:88:a4:9e:b3:1d:b1:89:70:f7:9b:6d:25:56:9d: 85:80:a8:1d:39:26:16:ae:76:f6:af:9d:1f:c8:60: d5:ea:50:07:e1:7b:f5:9a:d0:02:28:be:1b:df:5a: e1:3a:8f:ad:c7:4c:59:4e:65:a5:1e:97:61:dc:b3: b0:9c:c2:5e:10:7f:38:50:01:06:19:5e:e9:90:89: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:95:4E:3D:79:93:55:E8:32:FB:88:BC:A6:A5:4F:C1:A9:CD:9B X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:78:ba:e8:cf:a2:a3:04:f0:d7:28:d8:7c:d2:8c:ec:c7:96: c4:15:d6:9b:1d:89:8a:96:a1:5d:3c:84:1c:bd:8f:cb:a7:f1: 8a:3c:23:3e:f6:27:dc:e1:e7:ed:f6:6e:96:34:2c:f4:31:c8: 98:d9:20:d5:ca:d2:17:17:c6:0a:39:45:91:f7:8e:bc:14:cc: 19:d6:56:85:e3:b0:d2:bd:df:53:c2:8f:89:e2:b5:b1:78:99: d7:55:a5:30:6b:f7:b0:dc:7a:fd:1b:58:77:a4:21:bd:82:32: 49:cb:8f:2b:f6:b0:56:25:1a:8f:b9:28:b0:e8:14:28:c9:52: 96:fc:93:1a:c3:bc:cd:1b:01:a4:73:ec:d3:17:73:f2:a0:ec: a7:50:1f:40:bd:16:ea:de:de:5f:d9:b2:49:ac:b2:d1:7b:44: 9f:88:ec:ce:f2:c8:3d:bc:8b:60:ad:a3:3c:89:fd:f8:78:74: e5:85:5c:f1:dc:8d:6e:7f:44:15:ad:cc:ca:a8:68:98:ed:7f: 2a:d3:a0:45:ee:a0:36:9f:24:32:56:e0:20:17:b6:1f:e7:03: dc:02:4a:6a:2f:c2:76:01:a8:a7:ba:db:c8:31:84:d9:2c:6f: ee:c1:cf:29:10:85:ae:9a:f5:94:1f:c6:c1:90:9a:dc:95:3f: 80:20:5a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUwNjE3MDQwNDA5WhcNMjUwNjI0MDQwNDA5WjAYMRYwFAYD VQQDEw02ODUwZTkzYS0xZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmy52tFSIqDGIR6itqBtiLyk2jF3z+kcBWBuNAi/AYjoK3DUa0gaTvBXkHcR ZGynPJEgUIAXOM1v8+shV4YyWfnXyK6yviurIseHz5CWPP3yOMDLaURKuhQg7N60 GNfxFmPHrEOJp7j9CWnZYfZb2w7XAEzIZnLwFHVmEtJamwKtCVrZNfNiFDUyPNuo NERnqoCmBtoLo3MfG/3zIFjJmSA7Pz+FgDXfZKUA9AIK08S1FAKBiKSesx2xiXD3 m20lVp2FgKgdOSYWrnb2r50fyGDV6lAH4Xv1mtACKL4b31rhOo+tx0xZTmWlHpdh 3LOwnMJeEH84UAEGGV7pkImMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3hlU49 eZNV6DL7iLympU/Bqc2bMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmeLroz6KjBPDXKNh80ozsx5bEFdabHYmKlqFdPIQcvY/Lp/GKPCM+ 9ifc4eft9m6WNCz0MciY2SDVytIXF8YKOUWR9468FMwZ1laF47DSvd9Two+J4rWx eJnXVaUwa/ew3Hr9G1h3pCG9gjJJy48r9rBWJRqPuSiw6BQoyVKW/JMaw7zNGwGk c+zTF3PyoOynUB9AvRbq3t5f2bJJrLLRe0SfiOzO8sg9vItgraM8if34eHTlhVzx 3I1uf0QVrczKqGiY7X8q06BF7qA2nyQyVuAgF7Yf5wPcAkpqL8J2AainutvIMYTZ LG/uwc8pEIWumvWUH8bBkJrclT+AIFr/ -----END CERTIFICATE-----Generated at Tue Jun 17 10:49:50 2025 by rpki-client