$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: qFmqJGXUPt47jzkVleHDjUrux3yzquOvHsmnsU/7pZ0= Subject key identifier: EE:98:E1:A6:30:64:84:0D:B7:D2:89:DA:6E:2C:CF:80:79:34:88:BC Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 012B Signing time: Sun 15 Jun 2025 03:48:57 +0000 Manifest this update: Sun 15 Jun 2025 03:48:56 +0000 Manifest next update: Sun 22 Jun 2025 03:48:56 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: IUUQ9HUksFSXrLSXy8aozu1ioH9WlVkgjBvvuieEBAc=) 2: E7021416B54B11EE86895416C4F9AE02.roa (hash: vzHahXAFIekcStIbFKvBTMDftL9nSsfmNUK1qbKIERQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: Jun 15 03:48:56 2025 GMT Not After : Jun 22 03:48:56 2025 GMT Subject: CN=684e42a9-ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:f6:18:6e:a3:ee:8d:b0:2f:89:e3:68:a3: 6a:27:d2:21:d2:d1:14:b2:c5:9e:76:33:04:30:37: c0:df:cf:c9:ec:64:f9:39:0c:c9:3a:fd:94:68:0d: f6:6f:0e:a1:da:56:5f:9b:1f:8a:de:28:36:a9:22: ad:14:da:84:2a:9b:f1:8b:ea:4b:fa:eb:c4:a3:97: ee:96:94:9a:9c:c6:93:8b:3e:eb:52:21:3f:db:83: e8:1a:d8:ae:19:38:7d:43:7d:8c:3b:e4:31:0c:d6: 04:1f:c3:33:8d:48:45:5e:0d:66:d1:25:67:66:57: b0:74:61:88:3b:a7:24:7d:5d:88:02:85:03:03:b9: 2b:c7:9c:d5:cc:00:ba:ff:02:7e:f0:60:40:54:49: 49:eb:13:4d:21:f8:a8:5c:0f:84:c8:e8:a0:5f:89: 13:f5:df:3d:a6:1d:bf:ce:7e:ea:a2:c3:71:b4:9b: 25:25:00:d4:45:46:12:c8:47:0f:da:9f:bc:02:1c: e0:62:28:9f:f9:28:84:15:40:d1:10:9f:82:0f:16: b8:d4:bf:e5:9e:af:ac:cc:c3:ee:c5:b0:fa:1e:42: a3:d5:98:a2:f1:44:f0:7d:d3:07:50:2c:0e:df:64: a1:89:4e:f3:2a:7f:b0:8d:81:ec:17:02:71:3d:06: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:98:E1:A6:30:64:84:0D:B7:D2:89:DA:6E:2C:CF:80:79:34:88:BC X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:1e:2b:02:f2:88:b8:39:e9:bd:f8:ae:20:89:9f:b8:9b: 36:3f:79:cb:40:cf:fc:36:72:bd:13:a8:0a:f3:fd:04:dd:46: fd:e6:b1:1e:1e:04:d5:0c:c5:e7:5b:a6:3d:c7:f6:5d:1e:33: 37:68:04:b3:c2:b3:43:78:cc:fc:c2:2e:9d:8f:66:26:65:f8: 8a:9a:76:a2:a6:95:df:ee:a4:f8:d2:e0:db:50:60:ae:a4:6a: 4d:bb:10:ac:8c:75:69:70:e4:06:0c:67:e4:d2:3b:2c:dc:4b: d6:49:8a:95:05:19:07:f2:fb:e1:0b:df:a8:e2:7e:3f:1c:32: ac:ab:6f:15:6e:1c:bf:fc:57:92:ea:3f:7d:4f:65:42:13:77: e5:7d:77:7f:08:7b:8e:4d:a7:2b:d7:2e:cc:af:19:cb:32:ce: d6:6e:93:45:a7:e9:9f:17:5a:60:e1:9b:c5:6e:bb:9c:65:37: 2f:8f:41:36:c8:06:c6:ff:73:ec:ee:08:db:c2:c0:0e:02:bc: eb:ea:a0:ee:9f:7b:c3:96:da:63:72:61:38:1b:33:39:c5:20: 76:9f:a9:bb:e8:35:67:6b:f1:fd:8a:25:a0:74:11:da:1e:ff: 2a:76:07:38:86:c1:b2:ff:1a:10:70:06:06:bf:28:aa:66:c7: d4:c7:0c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjUwNjE1MDM0ODU2WhcNMjUwNjIyMDM0ODU2WjAYMRYwFAYD VQQDEw02ODRlNDJhOS1lYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iL2GG6j7o2wL4njaKNqJ9Ih0tEUssWedjMEMDfA38/J7GT5OQzJOv2UaA32 bw6h2lZfmx+K3ig2qSKtFNqEKpvxi+pL+uvEo5fulpSanMaTiz7rUiE/24PoGtiu GTh9Q32MO+QxDNYEH8MzjUhFXg1m0SVnZlewdGGIO6ckfV2IAoUDA7krx5zVzAC6 /wJ+8GBAVElJ6xNNIfioXA+EyOigX4kT9d89ph2/zn7qosNxtJslJQDURUYSyEcP 2p+8AhzgYiif+SiEFUDREJ+CDxa41L/lnq+szMPuxbD6HkKj1Zii8UTwfdMHUCwO 32ShiU7zKn+wjYHsFwJxPQaZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6Y4aYw ZIQNt9KJ2m4sz4B5NIi8MB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl3B4rAvKIuDnpvfiuIImfuJs2P3nLQM/8NnK9E6gK8/0E3Ub95rEe HgTVDMXnW6Y9x/ZdHjM3aASzwrNDeMz8wi6dj2YmZfiKmnaippXf7qT40uDbUGCu pGpNuxCsjHVpcOQGDGfk0jss3EvWSYqVBRkH8vvhC9+o4n4/HDKsq28Vbhy//FeS 6j99T2VCE3flfXd/CHuOTacr1y7MrxnLMs7WbpNFp+mfF1pg4ZvFbrucZTcvj0E2 yAbG/3Ps7gjbwsAOArzr6qDun3vDltpjcmE4GzM5xSB2n6m76DVna/H9iiWgdBHa Hv8qdgc4hsGy/xoQcAYGvyiqZsfUxwzE -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:37 2025 by rpki-client