$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: hvCCZvz5ua4TSKs/TUtaMK6gPNSbaPUr3HC1Zc1ZAAU= Subject key identifier: 2C:04:75:C7:BC:C6:4D:53:5D:81:0E:37:79:6C:FC:C2:5E:B5:CA:65 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B46 Signing time: Mon 16 Jun 2025 19:01:17 +0000 Manifest this update: Mon 16 Jun 2025 19:01:16 +0000 Manifest next update: Mon 23 Jun 2025 19:01:16 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: tO6r/3fDxomHOwydACtf6qtVB1gpSm1Q7ZikfiUUTUk=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: Jun 16 19:01:16 2025 GMT Not After : Jun 23 19:01:16 2025 GMT Subject: CN=685069fc-6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:71:e8:a2:c5:66:96:81:4b:ca:d2:66:31: 1d:55:99:e9:f9:df:e6:ed:1e:64:9f:55:fb:95:33: 3d:56:95:5d:d8:9a:18:82:41:cd:d9:65:1d:5d:6d: 81:e0:a4:41:b7:32:ee:e7:7d:66:9e:83:db:69:be: cc:86:ac:1c:ed:00:c8:1f:38:50:09:5c:92:0e:26: a7:65:a8:80:1c:89:be:f3:df:65:6e:c0:13:6f:9d: 94:8b:b4:cd:86:ca:97:c1:06:26:d2:d3:bb:11:3b: 68:2f:7a:25:e7:31:b0:37:dc:8b:d6:00:1b:6f:50: 54:60:84:06:a8:88:53:2e:9b:c4:a6:9f:ed:91:c5: c4:e2:21:93:27:cd:ea:30:29:ab:73:15:c0:fd:af: 0c:f3:3c:10:99:82:99:22:d9:07:de:12:97:17:97: 89:e9:5d:c9:60:c2:54:c6:0d:04:6c:aa:76:f1:5f: 91:0f:0e:b4:59:a2:42:0a:0a:c6:a3:ed:78:94:7c: 70:fe:4a:aa:44:8e:93:67:71:b5:59:13:b5:5e:06: 65:e5:2c:46:9b:03:09:bc:92:fd:0e:f9:16:bd:78: 7b:9e:8a:33:a8:6d:50:3f:cf:6b:b8:52:7a:ae:80: 29:52:7c:00:71:66:9e:13:85:c7:c4:3a:00:ae:e1: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:75:C7:BC:C6:4D:53:5D:81:0E:37:79:6C:FC:C2:5E:B5:CA:65 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:54:67:47:42:5b:02:0d:2b:6e:30:c3:e1:93:0c:03:f2:7f: 2f:0b:ef:f5:21:8b:a2:b0:a4:75:63:b8:92:d4:8f:4b:35:6c: 29:63:f5:49:7e:76:ca:cf:b5:f1:90:2c:90:fb:4a:7c:f7:cf: 3b:5b:84:93:9b:96:57:f3:ee:3a:13:4e:b1:7b:42:3d:11:56: 3d:39:32:3e:68:17:64:76:9f:15:ac:d3:bc:0e:e8:bc:3a:45: 7f:23:c4:55:66:39:c9:a4:5b:df:27:db:47:ed:c0:66:4d:fc: 7c:91:e1:b3:37:d2:45:76:90:b1:0f:d1:0c:82:d9:8a:ab:36: 09:be:fe:c6:8d:cf:21:9a:25:1c:d6:ce:f7:da:0a:88:18:74: c5:d0:f6:f8:6d:53:6b:a3:a2:ea:cf:30:ca:86:d0:0e:de:32: 44:52:c5:38:c0:83:8c:ec:b8:6d:79:8b:3c:ec:ec:4b:22:b5: 1f:e5:b4:fc:10:75:f0:3e:c7:17:12:97:b9:61:44:94:2a:62: 75:d9:5d:99:ba:8f:06:40:94:84:ec:05:15:fd:8e:2d:79:1b: b3:62:66:77:b3:1a:8c:af:a7:1c:f1:18:0b:88:12:3f:d6:24: d5:0e:69:71:e0:52:5e:1e:5c:46:8b:d7:2e:28:a4:af:03:8c: b3:7b:5e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUwNjE2MTkwMTE2WhcNMjUwNjIzMTkwMTE2WjAYMRYwFAYD VQQDEw02ODUwNjlmYy02ZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGxx6KLFZpaBS8rSZjEdVZnp+d/m7R5kn1X7lTM9VpVd2JoYgkHN2WUdXW2B 4KRBtzLu531mnoPbab7Mhqwc7QDIHzhQCVySDianZaiAHIm+899lbsATb52Ui7TN hsqXwQYm0tO7ETtoL3ol5zGwN9yL1gAbb1BUYIQGqIhTLpvEpp/tkcXE4iGTJ83q MCmrcxXA/a8M8zwQmYKZItkH3hKXF5eJ6V3JYMJUxg0EbKp28V+RDw60WaJCCgrG o+14lHxw/kqqRI6TZ3G1WRO1XgZl5SxGmwMJvJL9DvkWvXh7noozqG1QP89ruFJ6 roApUnwAcWaeE4XHxDoAruEFAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwEdce8 xk1TXYEON3ls/MJetcplMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeVGdHQlsCDStuMMPhkwwD8n8vC+/1IYuisKR1Y7iS1I9LNWwpY/VJ fnbKz7XxkCyQ+0p89887W4STm5ZX8+46E06xe0I9EVY9OTI+aBdkdp8VrNO8Dui8 OkV/I8RVZjnJpFvfJ9tH7cBmTfx8keGzN9JFdpCxD9EMgtmKqzYJvv7Gjc8hmiUc 1s732gqIGHTF0Pb4bVNro6LqzzDKhtAO3jJEUsU4wIOM7LhteYs87OxLIrUf5bT8 EHXwPscXEpe5YUSUKmJ12V2Zuo8GQJSE7AUV/Y4teRuzYmZ3sxqMr6cc8RgLiBI/ 1iTVDmlx4FJeHlxGi9cuKKSvA4yze15Z -----END CERTIFICATE-----Generated at Tue Jun 17 06:22:13 2025 by rpki-client