$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: Zs57Y/zc3qP+/v5Rrg4j2P6kMw7hbGWUywl9GyZ1J5c= Subject key identifier: 07:67:85:F4:DE:3F:2D:70:62:81:19:D6:4B:84:0B:1D:CF:8C:BC:CB Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1A03 Signing time: Sat 14 Jun 2025 16:26:40 +0000 Manifest this update: Sat 14 Jun 2025 16:26:40 +0000 Manifest next update: Sat 21 Jun 2025 16:26:40 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: 8VUTZxgJy0X0mimY/QwHJqeo8IrpkX4Zcsz3ON+ChA4=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6680 (0x1a18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Jun 14 16:26:40 2025 GMT Not After : Jun 21 16:26:40 2025 GMT Subject: CN=684da2c0-d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:27:a3:70:20:dd:30:38:f3:92:7e:85:f9: a6:03:c6:42:d7:2b:80:94:c5:62:05:5c:3b:65:2d: e4:ac:50:d9:f7:96:a6:32:08:0f:cc:93:11:17:25: 1c:e1:f6:93:4c:1b:16:32:8c:98:99:e8:79:72:a4: 9b:3a:34:e0:2d:01:7c:5f:fd:e8:86:c1:c7:e4:8b: a5:00:49:bd:a1:f2:ab:f1:29:48:71:2f:59:e5:d0: 9b:26:29:1f:4a:09:1f:e1:68:ad:b4:78:9a:73:92: 08:b2:89:3e:84:9c:d5:58:54:61:c7:2e:38:78:64: 31:ac:e3:5c:37:c5:41:aa:c4:68:1b:b3:59:f0:b8: 2b:d5:bb:14:33:4c:62:c4:33:e7:8d:da:01:1c:98: 1f:f0:b6:33:1d:ae:8b:f3:27:e9:e4:17:64:30:8c: 82:ac:09:18:87:87:8b:8c:02:e8:4b:13:3f:40:25: 4c:01:c1:e6:5d:f1:93:e1:c5:e6:6b:a2:28:c8:61: 98:a0:c3:8b:c4:a2:77:9e:86:54:74:20:3c:31:69: c8:ce:7a:48:0c:f0:0f:43:60:42:af:36:21:e5:90: 50:2e:ed:4f:4d:e3:89:c2:c2:98:67:7b:f7:7e:47: db:e7:e1:24:06:37:22:25:ef:73:ca:71:48:ae:f4: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:85:F4:DE:3F:2D:70:62:81:19:D6:4B:84:0B:1D:CF:8C:BC:CB X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:16:dd:fc:76:0b:36:18:46:4b:86:de:d9:a3:fc:fa:9c: 7b:26:e1:9c:cd:5a:ff:80:44:14:94:d9:2f:1a:ad:dd:c0:aa: 8d:4a:59:18:d3:5d:d3:2d:43:4b:25:08:86:da:19:77:87:f8: 7d:87:e3:f2:e5:13:23:ec:91:cf:24:50:ab:41:8c:c3:40:20: 13:a6:e1:79:a2:bd:b9:d6:b7:d1:94:36:55:f7:d7:56:b8:5c: c2:a1:0a:78:ae:8e:a7:93:69:4f:0d:82:9b:a5:eb:c9:05:95: 59:60:66:68:aa:81:16:21:e1:7a:4e:5e:b8:2b:ae:70:99:68: f5:72:fa:dc:14:fa:07:fe:be:44:06:2e:05:5c:fc:37:08:f3: dd:4d:e9:78:2b:06:50:b3:2e:14:19:2e:07:89:48:2e:7d:1c: a0:c2:7b:7c:9e:ab:4a:29:50:c8:1f:53:f6:e3:2b:26:55:8d: c7:96:59:15:8a:52:c9:4e:9f:49:54:de:b0:f1:cf:0f:d9:ee: 69:a1:f3:74:2d:13:de:47:0a:c2:ca:55:9e:fd:07:c1:74:ba: 56:90:ec:bb:50:ed:27:dd:a4:f8:0e:44:65:61:e4:79:ca:84: 11:bb:28:96:86:56:3c:6b:f4:bc:0c:96:2d:6b:8c:5f:36:7c: 14:ed:9e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUwNjE0MTYyNjQwWhcNMjUwNjIxMTYyNjQwWjAYMRYwFAYD VQQDEw02ODRkYTJjMC1kNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSYno3Ag3TA485J+hfmmA8ZC1yuAlMViBVw7ZS3krFDZ95amMggPzJMRFyUc 4faTTBsWMoyYmeh5cqSbOjTgLQF8X/3ohsHH5IulAEm9ofKr8SlIcS9Z5dCbJikf Sgkf4WittHiac5IIsok+hJzVWFRhxy44eGQxrONcN8VBqsRoG7NZ8Lgr1bsUM0xi xDPnjdoBHJgf8LYzHa6L8yfp5BdkMIyCrAkYh4eLjALoSxM/QCVMAcHmXfGT4cXm a6IoyGGYoMOLxKJ3noZUdCA8MWnIznpIDPAPQ2BCrzYh5ZBQLu1PTeOJwsKYZ3v3 fkfb5+EkBjciJe9zynFIrvRLUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdnhfTe Py1wYoEZ1kuECx3PjLzLMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXbxbd/HYLNhhGS4be2aP8+px7JuGczVr/gEQUlNkvGq3dwKqNSlkY 013TLUNLJQiG2hl3h/h9h+Py5RMj7JHPJFCrQYzDQCATpuF5or251rfRlDZV99dW uFzCoQp4ro6nk2lPDYKbpevJBZVZYGZoqoEWIeF6Tl64K65wmWj1cvrcFPoH/r5E Bi4FXPw3CPPdTel4KwZQsy4UGS4HiUgufRygwnt8nqtKKVDIH1P24ysmVY3HllkV ilLJTp9JVN6w8c8P2e5pofN0LRPeRwrCylWe/QfBdLpWkOy7UO0n3aT4DkRlYeR5 yoQRuyiWhlY8a/S8DJYta4xfNnwU7Z4f -----END CERTIFICATE-----Generated at Mon Jun 16 14:33:38 2025 by rpki-client