$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: ePzA/BX2CZ9lRCMEYU+kDl6AzTCii8z6ZSn0fx3cgI8= Subject key identifier: 86:D5:92:7F:70:63:B1:60:F2:66:A5:93:99:02:2C:43:67:F7:E8:E0 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 0155 Signing time: Sun 15 Jun 2025 03:18:57 +0000 Manifest this update: Sun 15 Jun 2025 03:18:56 +0000 Manifest next update: Sun 22 Jun 2025 03:18:56 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: 56hy0Zi3bL3uItndD+plRKd6vvOe8cGARnevgtROca0=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Jun 15 03:18:56 2025 GMT Not After : Jun 22 03:18:56 2025 GMT Subject: CN=684e3ba1-cb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:64:f8:70:ed:f3:39:2c:dc:f5:e7:11:b8: 79:5b:22:b4:f9:fa:ec:39:19:32:f9:a9:f4:22:c1: 54:fa:0b:27:5e:97:21:b6:b0:18:fe:b9:30:70:61: 47:a4:10:4f:2c:e1:6d:64:df:de:f4:99:c0:3e:e5: 9d:e4:ac:22:86:9f:ab:21:3d:21:95:7f:c1:87:3d: 44:89:be:18:5d:dc:26:f2:68:19:c9:2a:3d:b9:cd: 9f:e7:a4:5f:64:7e:8f:cc:90:49:34:49:f3:64:7e: e2:e4:8c:ab:0e:13:2a:a5:9b:72:c2:4f:e6:df:29: 5d:67:19:f0:86:bb:ef:8f:a0:fb:05:f2:40:8c:69: 47:b5:10:7a:a6:6d:59:05:55:e4:79:5e:77:8c:0a: 45:0d:2f:df:5b:9d:44:dd:bf:09:e5:67:1b:5a:0b: 73:59:9e:92:36:0f:6f:1f:fa:47:b1:82:f9:ad:95: 99:77:1b:56:52:9d:96:ad:95:37:59:6f:51:1b:01: b0:b6:dc:17:60:3a:1c:20:67:0f:b0:25:2a:2f:23: cb:3b:09:97:97:12:b9:71:0d:52:3f:ff:29:cc:12: d5:41:66:f2:1f:a5:ab:d4:cb:12:48:bf:d9:7c:8e: aa:9f:3a:dc:c3:ca:5a:a6:64:2d:da:18:b0:10:b7: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:92:7F:70:63:B1:60:F2:66:A5:93:99:02:2C:43:67:F7:E8:E0 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:02:d8:a6:4e:52:fd:32:88:e0:ca:50:98:8e:92:2c:05:95: db:5c:d3:e0:08:93:46:a0:ea:65:ee:ef:23:25:ad:a6:c6:5c: 40:12:8c:2b:0f:9e:9a:98:c5:a9:de:ff:14:a9:75:c5:9d:45: 9d:2d:0d:11:eb:0b:cb:22:5a:6f:e7:d4:16:46:52:3a:c0:97: 43:7e:cc:4f:32:39:44:c7:8a:27:af:32:c2:16:71:f7:92:83: a6:37:8b:e6:a8:f2:e0:bf:6c:ed:4c:1f:0a:36:b8:fc:e8:01: 2c:d7:78:60:5d:5c:42:61:a2:1f:2f:55:27:1c:d8:bd:9d:2b: 5f:68:70:ee:26:3e:6f:f1:2e:57:65:64:e8:28:10:89:92:fb: bf:05:29:86:62:40:86:9c:a0:52:5f:9e:eb:3a:1f:5b:e2:d2: e4:b1:1c:33:d1:35:d5:d3:57:bd:ae:d4:03:d2:8e:57:7a:a3: 7d:0d:73:2f:6b:b7:e6:57:f2:de:29:96:32:e5:98:ae:af:88: a8:c7:ec:25:b3:0b:60:3b:58:da:8f:e4:11:0d:f0:19:03:f4: 53:b0:a0:37:01:d4:2f:42:c4:0e:38:5e:b9:b1:9d:fc:73:24: 70:07:67:47:f0:05:ec:5d:60:5d:9e:f4:c5:fb:dd:c4:d6:d1: fa:3a:18:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUwNjE1MDMxODU2WhcNMjUwNjIyMDMxODU2WjAYMRYwFAYD VQQDEw02ODRlM2JhMS1jYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlr5k+HDt8zks3PXnEbh5WyK0+frsORky+an0IsFU+gsnXpchtrAY/rkwcGFH pBBPLOFtZN/e9JnAPuWd5Kwihp+rIT0hlX/Bhz1Eib4YXdwm8mgZySo9uc2f56Rf ZH6PzJBJNEnzZH7i5IyrDhMqpZtywk/m3yldZxnwhrvvj6D7BfJAjGlHtRB6pm1Z BVXkeV53jApFDS/fW51E3b8J5WcbWgtzWZ6SNg9vH/pHsYL5rZWZdxtWUp2WrZU3 WW9RGwGwttwXYDocIGcPsCUqLyPLOwmXlxK5cQ1SP/8pzBLVQWbyH6Wr1MsSSL/Z fI6qnzrcw8papmQt2hiwELcovQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbVkn9w Y7Fg8malk5kCLENn9+jgMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1AtimTlL9MojgylCYjpIsBZXbXNPgCJNGoOpl7u8jJa2mxlxAEowr D56amMWp3v8UqXXFnUWdLQ0R6wvLIlpv59QWRlI6wJdDfsxPMjlEx4onrzLCFnH3 koOmN4vmqPLgv2ztTB8KNrj86AEs13hgXVxCYaIfL1UnHNi9nStfaHDuJj5v8S5X ZWToKBCJkvu/BSmGYkCGnKBSX57rOh9b4tLksRwz0TXV01e9rtQD0o5XeqN9DXMv a7fmV/LeKZYy5Ziur4iox+wlswtgO1jaj+QRDfAZA/RTsKA3AdQvQsQOOF65sZ38 cyRwB2dH8AXsXWBdnvTF+93E1tH6OhgX -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:05 2025 by rpki-client