$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: S+IxuId1zR0FDtDohJD9hROZmEuhUZPs+TrJxLXM+Ps= Subject key identifier: C6:19:06:9D:97:1E:3F:C9:AF:64:8A:CC:7B:B9:90:D5:D6:72:AC:14 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 116C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1165 Signing time: Fri 20 Jun 2025 17:14:36 +0000 Manifest this update: Fri 20 Jun 2025 17:14:36 +0000 Manifest next update: Fri 27 Jun 2025 17:14:36 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: jvOimkMHnYyPTAQe8F5vfh1TBVdzkZlSNHCbEoZ4lGw=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4460 (0x116c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jun 20 17:14:36 2025 GMT Not After : Jun 27 17:14:36 2025 GMT Subject: CN=685596fc-77ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:d6:e6:65:2a:89:29:1e:ee:18:45:63:8b: 5d:86:55:db:6a:52:2c:86:cf:82:95:65:a4:aa:27: 39:61:52:99:81:c6:4a:d0:5e:06:92:f7:c5:9c:3e: 76:92:78:5d:69:97:ac:9d:d0:ca:ed:e4:48:14:c4: 49:90:dd:50:43:8b:4a:2c:38:ef:de:7f:c3:2e:52: b4:ac:64:76:99:0c:74:52:3d:f5:be:57:5c:e1:41: a7:4d:1d:7d:d5:4d:d2:fa:2c:35:d9:80:99:f6:5d: 7d:6f:33:e2:6a:b3:10:c3:8b:2b:c9:fa:ee:7a:cb: 35:b4:06:4f:54:b7:75:38:54:a6:b6:97:ab:c0:56: a4:83:63:04:d8:21:83:34:84:b2:4c:e0:55:e9:72: 9c:3b:ac:1b:5f:58:ad:cf:df:ff:fc:3b:0f:de:28: 19:ef:cc:97:eb:77:40:f0:07:38:0a:e0:30:95:08: 0c:28:bc:26:20:e7:4b:a2:ce:bd:75:26:eb:3f:b6: 76:b8:b5:aa:d0:30:fd:7c:85:1d:e9:a9:06:86:75: 22:2a:44:1f:cc:a6:98:fb:0b:02:fc:5c:d6:95:79: 73:49:a8:6c:7d:3a:aa:6a:9a:c3:7e:d0:64:b3:e3: 17:79:34:6a:c1:33:a0:fb:d0:7a:72:dd:b8:cd:80: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:19:06:9D:97:1E:3F:C9:AF:64:8A:CC:7B:B9:90:D5:D6:72:AC:14 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d9:6c:00:69:69:05:08:51:d6:da:a2:90:cc:b9:fe:dd:b4: 2a:bd:e9:57:12:42:49:99:94:57:0a:b2:05:db:b6:90:18:89: af:3e:dd:b0:d5:6f:ea:86:31:b5:97:d1:ad:ae:7c:b9:72:a0: 29:41:c9:9c:78:74:a9:2f:1e:cf:b9:58:7e:fb:d4:1a:af:a9: 26:bb:7f:b2:b1:b3:99:f1:06:fd:9b:ab:f1:2c:1f:be:bf:4b: 8a:42:93:77:0e:90:c2:9d:aa:22:0f:50:c4:52:39:f7:7c:69: 40:23:e7:f7:f8:a8:0a:ec:90:80:4f:21:75:1a:6a:6d:57:93: c7:45:27:b2:70:b8:f3:73:df:9e:c2:c5:5e:2a:5d:8d:33:47: b8:33:8b:e3:72:f4:4e:83:d3:e0:6f:88:fb:16:fd:9a:0e:bf: 12:72:c2:2f:19:96:12:bd:4e:9b:e2:b3:67:ce:f7:b9:45:af: 0d:e2:aa:e4:bd:d3:a4:e7:7c:dd:16:ce:2d:3d:02:01:8f:a4: 18:9b:22:68:9b:64:42:4a:00:7d:7a:2d:d4:03:dc:94:df:13: 04:b0:a4:ca:1f:87:24:d6:ea:c8:80:76:51:e1:29:53:86:14: 0a:c1:ee:bb:e1:c2:06:c9:8a:ce:59:b3:d0:88:42:63:06:c6: 8f:d9:ab:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwNjIwMTcxNDM2WhcNMjUwNjI3MTcxNDM2WjAYMRYwFAYD VQQDEw02ODU1OTZmYy03N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwfW5mUqiSke7hhFY4tdhlXbalIshs+ClWWkqic5YVKZgcZK0F4GkvfFnD52 knhdaZesndDK7eRIFMRJkN1QQ4tKLDjv3n/DLlK0rGR2mQx0Uj31vldc4UGnTR19 1U3S+iw12YCZ9l19bzPiarMQw4sryfruess1tAZPVLd1OFSmtperwFakg2ME2CGD NISyTOBV6XKcO6wbX1itz9///DsP3igZ78yX63dA8Ac4CuAwlQgMKLwmIOdLos69 dSbrP7Z2uLWq0DD9fIUd6akGhnUiKkQfzKaY+wsC/FzWlXlzSahsfTqqaprDftBk s+MXeTRqwTOg+9B6ct24zYBYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYZBp2X Hj/Jr2SKzHu5kNXWcqwUMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN2WwAaWkFCFHW2qKQzLn+3bQqvelXEkJJmZRXCrIF27aQGImvPt2w 1W/qhjG1l9Gtrny5cqApQcmceHSpLx7PuVh++9Qar6kmu3+ysbOZ8Qb9m6vxLB++ v0uKQpN3DpDCnaoiD1DEUjn3fGlAI+f3+KgK7JCATyF1GmptV5PHRSeycLjzc9+e wsVeKl2NM0e4M4vjcvROg9Pgb4j7Fv2aDr8ScsIvGZYSvU6b4rNnzve5Ra8N4qrk vdOk53zdFs4tPQIBj6QYmyJom2RCSgB9ei3UA9yU3xMEsKTKH4ck1urIgHZR4SlT hhQKwe674cIGyYrOWbPQiEJjBsaP2aty -----END CERTIFICATE-----Generated at Fri Jun 20 23:55:42 2025 by rpki-client