$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: zinhRYXO3a/aYomnrusQ9ribsijj8Vp7yugvyj+cZ/U= Subject key identifier: 1D:92:43:9A:49:9B:C9:38:E3:D3:9E:F0:D9:63:74:99:13:A5:D5:AF Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04BA Signing time: Mon 16 Jun 2025 23:30:20 +0000 Manifest this update: Mon 16 Jun 2025 23:30:19 +0000 Manifest next update: Mon 23 Jun 2025 23:30:19 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: R/oDZMESeMjRmYUoQYb8LttuCCLKSxXX1z+5N7dxuhg=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Jun 16 23:30:19 2025 GMT Not After : Jun 23 23:30:19 2025 GMT Subject: CN=6850a90c-60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:4d:55:d6:a2:fd:3d:6e:9d:9b:98:62:93: c7:b3:89:a9:de:51:81:92:ff:ea:15:53:59:6c:32: 06:1d:7c:31:77:da:d4:b9:c6:f0:54:0d:d2:15:a9: 95:da:9d:d3:f0:5f:90:86:af:6c:76:c5:55:8d:fc: cb:69:e5:1c:61:b8:8d:4d:fa:13:93:2d:67:97:d2: e1:65:2f:53:5a:ed:87:7e:5f:b4:3b:ee:02:26:c7: 57:9e:82:b6:47:f3:f9:74:c6:29:ab:5d:5b:ef:df: d4:b0:76:8b:b5:07:e9:35:d3:67:4e:14:76:eb:4f: 4a:1e:5e:16:52:e7:52:a9:d0:d5:35:d3:d7:0b:51: 7c:47:cc:e8:f5:de:65:07:a4:c7:fc:9e:76:9e:c7: 25:b2:b3:05:a6:b1:d4:da:3a:d3:44:75:cd:75:18: 84:3c:ee:c1:12:4d:65:d7:40:be:78:ed:13:23:15: 8c:a3:66:44:66:2c:0e:1a:94:1f:3e:cc:2e:cf:09: 81:ad:94:a6:e3:0d:e5:35:d3:b0:e0:9b:9b:e0:27: 30:29:27:47:18:ac:ee:bd:98:58:1c:4e:97:68:ca: 23:2d:e8:6f:58:e3:3a:8b:9e:d4:80:f6:70:6e:8c: f6:32:48:47:2f:a1:ab:d2:15:73:25:9f:62:34:b1: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:43:9A:49:9B:C9:38:E3:D3:9E:F0:D9:63:74:99:13:A5:D5:AF X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a2:b6:3c:54:35:6a:5d:d3:7f:82:bc:bf:d1:c4:40:d8:91: 6f:e2:d9:79:d1:4d:ea:df:1e:90:18:fd:2b:61:c1:88:47:3d: 78:2f:36:64:1d:4d:7c:05:eb:44:61:62:47:60:c8:0f:db:69: 75:ec:95:cc:e4:3a:67:24:1e:15:4e:be:34:cc:3c:ac:d1:42: a1:ec:e6:d1:8d:78:c4:fb:28:5b:b5:9b:72:e6:e8:d8:02:ad: 13:6c:8f:bc:6c:8f:70:c4:70:2a:52:cd:20:da:42:c8:6e:ac: 8e:0c:9c:8a:3e:80:2d:83:9c:78:62:6d:f2:84:3a:fd:14:bd: b1:3d:c7:54:68:94:c4:f3:1e:ae:70:bc:81:a1:57:79:59:ad: 04:3b:0a:87:76:70:73:96:5f:03:68:71:a0:6a:5e:d0:1c:24: 25:6e:03:e5:7e:e2:41:b5:9b:2d:7f:4a:b7:91:82:20:2b:7f: 73:db:4f:ce:ec:8d:ad:02:04:bf:f3:2a:63:9f:0e:d3:83:be: c7:f0:17:92:37:d0:18:ae:e2:a7:1b:0b:b1:b7:3f:6e:6b:7a: dc:4d:d3:bb:a5:63:71:86:f8:55:a3:bd:43:d8:46:62:f9:a5: fc:53:de:c4:cf:5d:b3:e7:e0:75:ca:1f:f6:2c:63:aa:00:19: 9c:3d:42:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwNjE2MjMzMDE5WhcNMjUwNjIzMjMzMDE5WjAYMRYwFAYD VQQDEw02ODUwYTkwYy02MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm9NVdai/T1unZuYYpPHs4mp3lGBkv/qFVNZbDIGHXwxd9rUucbwVA3SFamV 2p3T8F+Qhq9sdsVVjfzLaeUcYbiNTfoTky1nl9LhZS9TWu2Hfl+0O+4CJsdXnoK2 R/P5dMYpq11b79/UsHaLtQfpNdNnThR2609KHl4WUudSqdDVNdPXC1F8R8zo9d5l B6TH/J52nsclsrMFprHU2jrTRHXNdRiEPO7BEk1l10C+eO0TIxWMo2ZEZiwOGpQf PswuzwmBrZSm4w3lNdOw4Jub4CcwKSdHGKzuvZhYHE6XaMojLehvWOM6i57UgPZw boz2MkhHL6Gr0hVzJZ9iNLEPWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2SQ5pJ m8k449Oe8NljdJkTpdWvMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxorY8VDVqXdN/gry/0cRA2JFv4tl50U3q3x6QGP0rYcGIRz14LzZk HU18BetEYWJHYMgP22l17JXM5DpnJB4VTr40zDys0UKh7ObRjXjE+yhbtZty5ujY Aq0TbI+8bI9wxHAqUs0g2kLIbqyODJyKPoAtg5x4Ym3yhDr9FL2xPcdUaJTE8x6u cLyBoVd5Wa0EOwqHdnBzll8DaHGgal7QHCQlbgPlfuJBtZstf0q3kYIgK39z20/O 7I2tAgS/8ypjnw7Tg77H8BeSN9AYruKnGwuxtz9ua3rcTdO7pWNxhvhVo71D2EZi +aX8U97Ez12z5+B1yh/2LGOqABmcPULp -----END CERTIFICATE-----Generated at Wed Jun 18 16:36:43 2025 by rpki-client