$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: pKIKsMtkbjkOYJq+VDgx2CBI+MUDx3Bd4YUZakVse9o= Subject key identifier: 65:0E:B1:09:60:F6:9C:54:7E:65:B4:0C:A2:5B:F7:0C:C0:5D:F8:E3 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9A38 Signing time: Sat 14 Jun 2025 15:15:29 +0000 Manifest this update: Sat 14 Jun 2025 15:15:29 +0000 Manifest next update: Sat 21 Jun 2025 15:15:29 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: F4gnhlpJ5KMqlhQrPzyPMY2DcIBHlI0EohB3wDBb6zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Jun 14 15:15:29 2025 GMT Not After : Jun 21 15:15:29 2025 GMT Subject: CN=684d9211-573a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:27:e1:46:a6:e9:12:79:8d:67:17:e3:e5:df: 9f:e7:8a:d2:94:e5:25:95:72:f9:91:2e:67:c0:5b: 85:c7:78:11:2e:68:a4:a2:03:53:a4:bc:25:88:24: 90:a8:0f:bc:83:c9:f3:94:8b:08:76:94:0b:b8:71: aa:a8:54:15:d5:20:48:d6:bf:66:79:85:42:5f:d1: ae:70:3b:2f:62:5f:fa:d3:22:b0:b8:69:6a:71:73: b4:b5:3e:13:9d:1a:71:06:c3:4b:1a:b9:61:81:a1: 36:ec:1b:b7:c8:81:fa:db:4f:b6:f1:9a:fc:57:90: 9b:c4:f9:6a:e7:e5:b6:76:2e:6a:18:8a:df:48:a7: 59:f1:76:b8:f1:5b:ee:03:db:d9:ff:63:a2:d8:e7: ca:2a:d7:80:7a:7f:4b:68:e0:b6:2e:0d:fb:f8:93: bd:b4:6f:5e:94:9d:5d:0b:a6:39:7b:1f:99:f6:1f: 73:c2:8d:30:cc:ba:5b:15:4c:d3:af:ac:cb:a1:76: d2:37:e1:62:5c:a1:c3:c5:a1:bc:7b:ca:10:05:8c: a6:3d:ee:e8:f3:7a:77:19:bb:8c:6f:cf:53:72:01: b7:7f:5d:d3:3c:fe:45:c0:32:5b:e0:a5:d0:96:c5: 00:7b:67:d1:77:ae:f2:52:df:e6:02:03:e1:95:bf: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:B1:09:60:F6:9C:54:7E:65:B4:0C:A2:5B:F7:0C:C0:5D:F8:E3 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:19:96:6b:22:cf:c9:88:54:aa:8b:6d:7c:33:e7:e6:6a: 1d:89:71:af:df:49:15:9b:b8:53:d9:66:d7:8f:72:ed:86:9a: be:1d:c6:66:e0:40:68:8a:9e:0c:98:1e:74:ee:bb:b5:be:9e: d0:52:7f:2c:84:5d:1c:c6:9f:5d:64:ea:33:c2:d7:cb:34:f0: 0c:be:15:4c:48:e3:73:15:81:68:48:d1:93:49:88:95:91:e3: 1f:f5:15:bb:5b:5d:34:e9:c0:52:7a:b5:6e:5b:d4:ef:0a:e2: 35:01:28:ad:31:3f:b9:9b:5c:a2:e5:3f:fa:04:e6:4c:bd:e5: 6b:a2:eb:6c:74:e2:43:c9:76:29:9e:20:30:ac:71:9b:57:7c: bd:e2:26:cd:72:56:0e:2a:59:2a:d1:7b:45:a2:23:9e:1f:93: 5c:60:e9:46:78:e4:bd:18:08:37:d3:27:b5:9f:f5:57:07:9f: aa:96:18:1d:64:18:2b:a7:fa:71:a4:4b:39:a7:70:bb:58:d2: da:66:81:bb:63:e1:6a:1d:18:8b:0f:cc:13:76:cf:21:33:12: 40:d7:57:e5:84:47:b1:d5:ba:52:c3:8f:9f:41:05:a4:20:7f: eb:04:b0:f3:e3:c2:58:a8:8a:da:32:07:4e:c7:cb:9d:26:77: bb:80:6a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUwNjE0MTUxNTI5WhcNMjUwNjIxMTUxNTI5WjAYMRYwFAYD VQQDEw02ODRkOTIxMS01NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CfhRqbpEnmNZxfj5d+f54rSlOUllXL5kS5nwFuFx3gRLmikogNTpLwliCSQ qA+8g8nzlIsIdpQLuHGqqFQV1SBI1r9meYVCX9GucDsvYl/60yKwuGlqcXO0tT4T nRpxBsNLGrlhgaE27Bu3yIH620+28Zr8V5CbxPlq5+W2di5qGIrfSKdZ8Xa48Vvu A9vZ/2Oi2OfKKteAen9LaOC2Lg37+JO9tG9elJ1dC6Y5ex+Z9h9zwo0wzLpbFUzT r6zLoXbSN+FiXKHDxaG8e8oQBYymPe7o83p3GbuMb89TcgG3f13TPP5FwDJb4KXQ lsUAe2fRd67yUt/mAgPhlb+1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUOsQlg 9pxUfmW0DKJb9wzAXfjjMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUDhmWayLPyYhUqottfDPn5modiXGv30kVm7hT2WbXj3Lthpq+HcZm 4EBoip4MmB507ru1vp7QUn8shF0cxp9dZOozwtfLNPAMvhVMSONzFYFoSNGTSYiV keMf9RW7W1006cBSerVuW9TvCuI1ASitMT+5m1yi5T/6BOZMveVroutsdOJDyXYp niAwrHGbV3y94ibNclYOKlkq0XtFoiOeH5NcYOlGeOS9GAg30ye1n/VXB5+qlhgd ZBgrp/pxpEs5p3C7WNLaZoG7Y+FqHRiLD8wTds8hMxJA11flhEex1bpSw4+fQQWk IH/rBLDz48JYqIraMgdOx8udJne7gGoV -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:32 2025 by rpki-client