$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: 9pUsLipKh21HfL/4LwTiY80m0oiWzeeNR40sAMlL96A= Subject key identifier: 3D:17:27:38:E2:C3:98:49:E7:0E:36:C1:E3:F2:6F:77:E0:B8:F9:57 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0399 Signing time: Tue 17 Jun 2025 00:24:35 +0000 Manifest this update: Tue 17 Jun 2025 00:24:35 +0000 Manifest next update: Tue 24 Jun 2025 00:24:35 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: mSjevicKPDdwL8JI+/4REB3KEVfzDSi1rg48JlhtA4k=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Jun 17 00:24:35 2025 GMT Not After : Jun 24 00:24:35 2025 GMT Subject: CN=6850b5c3-414b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:52:34:fe:08:4a:a9:4a:9a:5a:d4:99:4a: 36:69:ec:16:e3:73:f1:9d:ac:6e:fe:2e:0c:49:e4: 26:65:80:1c:fa:35:fa:11:89:1a:18:80:44:3a:3b: 6e:23:7d:93:2c:13:19:1a:37:ce:3e:fe:0a:65:30: 13:74:62:2e:7b:d3:3e:5f:6a:2d:96:6e:6e:f7:6a: aa:19:be:34:d0:9e:13:5a:fe:bd:8b:ce:a3:b0:38: 05:49:3d:af:ac:9a:e1:4c:60:d1:0f:e5:4e:79:c6: 62:f6:65:56:c2:9e:8f:49:a7:65:4b:37:e5:6f:51: 22:1a:cc:b5:32:30:d1:19:70:bc:54:16:e4:46:55: 69:0a:6d:e8:52:2e:d6:51:d3:ea:e8:30:51:bf:b5: 41:19:ed:e1:c8:c2:b9:48:fe:9f:62:8e:80:07:26: 24:17:4a:26:ba:25:e5:6d:f5:47:ca:e7:14:a4:54: de:c1:d3:ab:52:de:e4:f9:66:c9:e7:01:f8:37:f6: d6:d3:4d:19:79:1e:02:1d:59:f4:2d:70:0d:c1:13: 61:24:b6:6f:58:45:97:7e:66:be:b9:fd:b6:e5:11: 53:f9:2d:10:13:fc:51:10:b5:60:31:9e:f1:b0:12: 1e:12:ea:5f:9d:8a:3d:25:71:40:ca:51:41:c0:11: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:27:38:E2:C3:98:49:E7:0E:36:C1:E3:F2:6F:77:E0:B8:F9:57 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0b:a2:30:90:87:d1:78:64:e3:17:53:68:65:d8:b7:65:13: ca:0e:d7:f4:87:86:ea:34:4e:77:bc:50:05:3c:f0:dd:c9:f6: 81:da:2f:ed:8e:5d:00:36:19:34:12:50:a7:ab:e9:24:99:c8: 82:e4:c1:d9:13:99:b5:d6:c3:95:6d:48:15:de:f5:83:bc:b8: b1:df:2a:e7:a4:7c:13:79:87:87:dd:cd:97:2f:9e:8e:f5:42: 4a:47:7b:f4:29:d0:e4:e4:10:31:f9:ef:1d:21:32:55:73:aa: 5d:f8:b5:05:c3:c8:2f:d1:f5:05:36:dd:76:57:e4:cc:c2:c7: fe:4f:7f:97:5a:14:62:27:b3:a7:ef:8e:ca:c9:09:00:68:77: 14:23:1e:d4:04:7f:78:44:4a:49:85:99:a5:3b:63:28:ad:0d: e5:e6:0c:27:3c:2b:03:5f:6b:80:9c:9f:76:f5:86:b0:c0:0d: 9f:27:bb:ce:3b:b4:9c:07:9c:eb:bb:c4:e3:b6:80:c5:7d:6a: 46:94:fd:78:e8:15:30:51:a8:57:7c:62:62:92:5b:5a:8d:2e: c5:aa:9a:47:10:76:de:bf:7a:b8:3e:86:64:b1:27:8d:10:a9: db:4c:06:b5:7c:cb:20:6c:6b:58:c2:2a:b1:f8:53:46:f4:e9: f3:c0:8b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjUwNjE3MDAyNDM1WhcNMjUwNjI0MDAyNDM1WjAYMRYwFAYD VQQDEw02ODUwYjVjMy00MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwhSNP4ISqlKmlrUmUo2aewW43Pxnaxu/i4MSeQmZYAc+jX6EYkaGIBEOjtu I32TLBMZGjfOPv4KZTATdGIue9M+X2otlm5u92qqGb400J4TWv69i86jsDgFST2v rJrhTGDRD+VOecZi9mVWwp6PSadlSzflb1EiGsy1MjDRGXC8VBbkRlVpCm3oUi7W UdPq6DBRv7VBGe3hyMK5SP6fYo6AByYkF0omuiXlbfVHyucUpFTewdOrUt7k+WbJ 5wH4N/bW000ZeR4CHVn0LXANwRNhJLZvWEWXfma+uf225RFT+S0QE/xRELVgMZ7x sBIeEupfnYo9JXFAylFBwBE1QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0XJzji w5hJ5w42wePyb3fguPlXMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXC6IwkIfReGTjF1NoZdi3ZRPKDtf0h4bqNE53vFAFPPDdyfaB2i/t jl0ANhk0ElCnq+kkmciC5MHZE5m11sOVbUgV3vWDvLix3yrnpHwTeYeH3c2XL56O 9UJKR3v0KdDk5BAx+e8dITJVc6pd+LUFw8gv0fUFNt12V+TMwsf+T3+XWhRiJ7On 747KyQkAaHcUIx7UBH94REpJhZmlO2MorQ3l5gwnPCsDX2uAnJ929YawwA2fJ7vO O7ScB5zru8TjtoDFfWpGlP146BUwUahXfGJikltajS7FqppHEHbev3q4PoZksSeN EKnbTAa1fMsgbGtYwiqx+FNG9OnzwIt2 -----END CERTIFICATE-----Generated at Thu Jun 19 00:33:34 2025 by rpki-client