$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: vYfb9Zckn7BFGwzsM+ZTBehaGGitsG+EfwaIv+DJN5k= Subject key identifier: 4C:5A:7E:8F:98:E1:2D:D8:BA:15:E0:CE:29:20:30:7A:10:7D:46:4F Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 03F8 Signing time: Tue 17 Jun 2025 00:07:14 +0000 Manifest this update: Tue 17 Jun 2025 00:07:13 +0000 Manifest next update: Tue 24 Jun 2025 00:07:13 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: i6CZcxNL3z0dKPZyDb+Kk+4AG843T7iCRVIVaXAGJ7o=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 03QgKXxeVhyZFOfohBjqcW0vK1f3sUZMJYpV9kpUL1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Jun 17 00:07:13 2025 GMT Not After : Jun 24 00:07:13 2025 GMT Subject: CN=6850b1b2-590f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:9b:b3:ec:56:75:4a:a3:e7:42:13:01:20: bc:1a:80:87:2e:dc:81:26:08:b8:c4:07:53:f1:44: 73:60:da:60:12:12:24:25:26:ba:66:f3:d7:5e:b4: 51:89:f3:cb:5d:76:e5:0b:66:b2:6c:3f:0c:7b:24: f4:70:e1:d6:cd:37:e4:70:e0:be:9d:60:b5:44:0a: 95:ca:14:ad:24:f9:04:6d:f8:39:2d:ff:8a:b9:66: cf:c6:d6:86:c1:32:74:a3:38:fb:6c:1e:9b:18:94: 5c:8a:fa:08:40:9a:20:24:46:fa:83:8f:e7:1f:dd: f0:81:3e:e0:72:23:33:47:be:fb:8a:f0:d7:ed:86: e1:55:b3:ce:53:01:f0:c6:3b:61:b3:6d:bf:4b:4a: d5:36:11:a9:66:72:e4:9e:ce:1d:49:fe:5d:b4:dd: 9d:2f:5a:3f:ff:33:f2:c0:ed:01:1c:1e:e7:90:d0: d3:6b:d2:73:98:5b:c6:cb:2e:24:02:51:17:49:c0: b9:e3:9b:fa:e6:82:04:a1:b1:f8:0b:b8:1e:b7:dd: 37:56:98:63:41:89:b1:66:51:48:04:86:a1:42:51: e1:70:dc:4d:7d:cc:86:39:a8:19:a0:0d:8e:56:32: 76:73:8f:31:66:b9:f5:7c:df:12:d9:9a:8c:12:d9: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:7E:8F:98:E1:2D:D8:BA:15:E0:CE:29:20:30:7A:10:7D:46:4F X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f3:27:51:b4:1e:ed:3d:50:a1:2a:a9:46:ca:e4:27:13:e5: 08:c8:a8:f6:00:38:72:82:45:4c:28:25:f2:bb:65:e8:10:93: 96:7d:fb:1d:d9:82:13:c4:a9:13:00:ec:e4:d8:c4:85:60:a1: 91:0b:de:e6:22:cb:6b:76:71:8b:bb:a6:d9:a2:26:60:7c:6f: b1:59:6b:ad:67:ba:8d:ff:3e:57:da:d2:bb:42:a9:e9:58:67: d0:81:40:19:da:24:41:89:c3:b1:1c:31:cf:40:da:7d:31:2d: df:c5:9b:5a:55:35:26:d0:7b:6e:fc:16:b9:ca:2c:21:dd:32: 89:6c:9a:c2:3b:99:ec:71:40:18:db:d9:d1:9f:02:f9:ad:1f: 77:ab:35:a2:92:42:08:74:50:64:0c:4a:e4:d8:7c:41:c0:da: 01:7d:da:58:34:7e:29:af:93:9a:94:d6:b7:cd:0b:89:c2:ad: 0d:ea:77:8c:a9:7c:87:f9:7f:5f:26:f7:fa:33:e2:04:1a:32: 36:a6:91:74:6b:9e:25:69:a6:47:00:96:58:7d:87:0f:32:53: 27:00:97:d8:1f:81:d9:54:81:17:a7:1a:b1:e6:ad:35:c7:03: 2a:be:b1:b3:dd:67:00:72:71:a2:c1:2d:c4:53:99:2e:d0:e5: 12:3a:7d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUwNjE3MDAwNzEzWhcNMjUwNjI0MDAwNzEzWjAYMRYwFAYD VQQDEw02ODUwYjFiMi01OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrmbs+xWdUqj50ITASC8GoCHLtyBJgi4xAdT8URzYNpgEhIkJSa6ZvPXXrRR ifPLXXblC2aybD8MeyT0cOHWzTfkcOC+nWC1RAqVyhStJPkEbfg5Lf+KuWbPxtaG wTJ0ozj7bB6bGJRcivoIQJogJEb6g4/nH93wgT7gciMzR777ivDX7YbhVbPOUwHw xjths22/S0rVNhGpZnLkns4dSf5dtN2dL1o//zPywO0BHB7nkNDTa9JzmFvGyy4k AlEXScC545v65oIEobH4C7get903VphjQYmxZlFIBIahQlHhcNxNfcyGOagZoA2O VjJ2c48xZrn1fN8S2ZqMEtnUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExafo+Y 4S3YuhXgzikgMHoQfUZPMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp8ydRtB7tPVChKqlGyuQnE+UIyKj2ADhygkVMKCXyu2XoEJOWffsd 2YITxKkTAOzk2MSFYKGRC97mIstrdnGLu6bZoiZgfG+xWWutZ7qN/z5X2tK7Qqnp WGfQgUAZ2iRBicOxHDHPQNp9MS3fxZtaVTUm0Htu/Ba5yiwh3TKJbJrCO5nscUAY 29nRnwL5rR93qzWikkIIdFBkDErk2HxBwNoBfdpYNH4pr5OalNa3zQuJwq0N6neM qXyH+X9fJvf6M+IEGjI2ppF0a54laaZHAJZYfYcPMlMnAJfYH4HZVIEXpxqx5q01 xwMqvrGz3WcAcnGiwS3EU5ku0OUSOn2e -----END CERTIFICATE-----Generated at Wed Jun 18 02:26:10 2025 by rpki-client