$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: xsgE1KgRGw7Eazh66jbjKRwjci+CpXBCBIR/Aus/C60= Subject key identifier: D6:B2:59:3E:F7:75:72:9D:5D:2C:C3:BA:20:95:BB:33:14:1B:F9:45 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 70 Signing time: Fri 13 Jun 2025 05:48:40 +0000 Manifest this update: Fri 13 Jun 2025 05:48:39 +0000 Manifest next update: Fri 20 Jun 2025 05:48:39 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: VpujhW/E8bl9CYFzwADr9At3szD4dvTzA1e0veH6nhw=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Jun 13 05:48:39 2025 GMT Not After : Jun 20 05:48:39 2025 GMT Subject: CN=684bbbb7-4a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:c0:0d:f4:3f:61:62:94:2d:79:f3:b8:e5: 35:57:9d:f0:33:96:9f:72:af:60:ab:db:8b:93:2e: e0:a5:04:cd:57:df:33:21:a7:eb:a2:c0:37:47:a0: 63:76:43:6e:32:80:e9:67:8f:bb:11:d3:c8:48:b4: ea:67:15:ea:15:14:58:49:17:01:d5:a3:0b:0a:c0: a4:35:fb:bb:40:04:d3:9f:f9:03:3f:9a:4d:08:9b: e0:22:31:9d:c5:8d:d3:1f:d7:0c:14:7a:4c:95:0e: 57:49:a7:7e:15:71:2b:52:cd:c8:66:8f:56:1f:cc: 92:e7:b5:47:e1:5d:2f:e1:d3:2d:d3:1a:f1:8f:19: 1c:09:ab:90:9c:aa:cd:bc:e9:44:1d:a5:7a:91:6a: 04:5e:15:82:68:05:45:d0:a1:e1:82:b5:b9:3a:19: 33:fe:b4:9d:88:a8:b5:b8:a2:75:41:3c:f9:2e:f2: 11:29:34:56:55:0f:e1:c8:e1:9b:be:02:49:3d:bb: 76:35:4e:8f:a1:35:af:d5:26:1e:a5:0b:90:85:c8: 4e:c4:c2:f0:ed:4b:d2:85:b0:d0:87:d4:3d:f3:1a: 73:71:df:bf:1f:a9:8d:2c:bc:8a:fd:07:f3:63:5c: 8d:9e:60:f5:90:5d:7a:13:45:8b:c0:9a:1a:19:e1: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:59:3E:F7:75:72:9D:5D:2C:C3:BA:20:95:BB:33:14:1B:F9:45 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:99:bf:20:3b:31:56:a2:05:1f:79:ba:b5:9e:d0:f9:74: 95:d7:4d:23:1f:ca:0a:ae:86:d0:f5:33:01:3c:9d:6a:46:98: b2:3f:26:47:f7:72:01:23:27:be:00:8e:93:d0:47:18:5e:ea: 0e:65:fb:f3:c9:f6:74:a0:c5:ac:a0:d0:a6:1f:c9:06:e5:eb: 26:78:27:f5:ec:67:53:8e:d7:61:b0:99:3a:87:0f:c3:2f:af: 74:fb:c8:0a:5c:ca:35:bf:3d:db:9a:5e:62:ff:27:d5:3d:ff: c3:64:47:60:04:a3:5d:50:f5:1e:56:7a:57:75:2d:46:17:5c: 09:e8:7d:0b:2d:3c:2e:b4:d3:0b:03:e8:3d:4e:8d:d2:4c:d9: 73:b1:69:ae:4a:64:88:c8:c5:8c:7a:a0:1a:74:f4:4c:f7:bb: 1c:b3:ee:91:0e:97:1a:0a:bc:18:7f:36:71:6d:52:96:45:0b: c0:a8:c0:f4:ea:a0:11:7b:7c:69:6a:a3:56:f2:a2:8a:f9:78: 57:be:c5:c9:e5:99:e4:df:e4:de:17:c8:42:4b:a3:0f:88:e5: db:bc:30:2d:e4:3b:e8:13:83:78:fc:55:b0:2e:1b:75:45:06: 98:06:20:bf:99:bb:b4:74:de:4f:64:f7:f7:97:50:83:6a:fa: 66:28:6d:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNTA2MTMwNTQ4MzlaFw0yNTA2MjAwNTQ4MzlaMBgxFjAUBgNV BAMTDTY4NGJiYmI3LTRhNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN8cAN9D9hYpQtefO45TVXnfAzlp9yr2Cr24uTLuClBM1X3zMhp+uiwDdHoGN2 Q24ygOlnj7sR08hItOpnFeoVFFhJFwHVowsKwKQ1+7tABNOf+QM/mk0Im+AiMZ3F jdMf1wwUekyVDldJp34VcStSzchmj1YfzJLntUfhXS/h0y3TGvGPGRwJq5Ccqs28 6UQdpXqRagReFYJoBUXQoeGCtbk6GTP+tJ2IqLW4onVBPPku8hEpNFZVD+HI4Zu+ Akk9u3Y1To+hNa/VJh6lC5CFyE7EwvDtS9KFsNCH1D3zGnNx378fqY0svIr9B/Nj XI2eYPWQXXoTRYvAmhoZ4fbXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1rJZPvd1 cp1dLMO6IJW7MxQb+UUwHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqmmb8gOzFWogUfebq1ntD5dJXXTSMfygquhtD1MwE8nWpGmLI/Jkf3 cgEjJ74AjpPQRxhe6g5l+/PJ9nSgxayg0KYfyQbl6yZ4J/XsZ1OO12GwmTqHD8Mv r3T7yApcyjW/PduaXmL/J9U9/8NkR2AEo11Q9R5Weld1LUYXXAnofQstPC600wsD 6D1OjdJM2XOxaa5KZIjIxYx6oBp09Ez3uxyz7pEOlxoKvBh/NnFtUpZFC8CowPTq oBF7fGlqo1byoor5eFe+xcnlmeTf5N4XyEJLow+I5du8MC3kO+gTg3j8VbAuG3VF BpgGIL+Zu7R03k9k9/eXUINq+mYobSY= -----END CERTIFICATE-----Generated at Sun Jun 15 07:19:47 2025 by rpki-client