$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: DCrek0hHTDlnH2wcpKsVPHFJYasqM3zhgUkDsfr3268= Subject key identifier: A5:58:D8:5A:4B:3E:92:15:86:35:53:F1:AD:44:82:C4:0D:75:13:4A Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 019A Signing time: Tue 01 Jul 2025 03:49:43 +0000 Manifest this update: Tue 01 Jul 2025 03:49:43 +0000 Manifest next update: Tue 08 Jul 2025 03:49:42 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: xzqy5LRUM7rbYOwkrgdcGEOzUhqq5U9lDN222ZNDF9k=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Jul 1 03:49:43 2025 GMT Not After : Jul 8 03:49:42 2025 GMT Subject: CN=68635ad7-40fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:60:96:f2:53:c3:95:07:3c:9b:4c:7c:78: 96:34:49:2f:1a:8d:d7:31:9b:c1:bb:44:a9:c9:c9: d3:99:d6:5f:4e:e6:13:80:ca:79:a0:26:02:67:81: 23:18:ac:21:c8:4e:07:21:be:1b:2c:85:01:ba:30: 59:1e:78:99:15:e5:e2:e1:55:53:f0:ab:15:aa:4f: ee:e5:c4:2c:dd:2f:25:de:76:7b:95:5b:e9:5e:6c: 4e:fe:09:ae:ed:96:e5:df:0f:52:c1:bc:ae:9e:be: 08:7d:d9:4d:43:93:b1:9c:50:f4:7c:eb:49:11:08: 70:f7:96:57:01:21:d7:44:5d:5b:d8:50:8b:f1:40: 27:16:00:86:af:05:83:f0:bd:42:fd:9e:3b:d1:12: c7:b8:b0:6d:dc:e0:cd:37:79:c3:ac:3e:75:b4:f4: fc:f7:c8:35:69:2e:cc:35:ad:3a:11:d6:a2:ba:83: 77:d5:00:be:20:12:5a:a2:59:44:3e:99:d5:e5:fd: 30:2d:d5:e5:26:71:64:54:83:17:e9:8a:c3:19:75: 20:c6:90:29:79:ac:3c:56:15:95:97:c1:dd:5e:04: f4:dd:ce:37:c6:08:88:2f:97:c3:9f:69:f3:bc:24: 5e:a4:22:97:54:c9:38:a4:29:42:60:85:ad:1a:80: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:58:D8:5A:4B:3E:92:15:86:35:53:F1:AD:44:82:C4:0D:75:13:4A X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:aa:21:73:2d:70:47:cf:c5:89:a8:2b:4a:7e:88:4f:ec:be: f2:ca:8a:26:9e:6a:c5:11:e9:0d:ad:e9:8f:62:bd:dd:e7:d8: 88:7d:c6:e3:a0:ca:0e:8b:54:65:bb:13:55:82:6c:92:0b:8f: f7:cf:15:e4:34:9e:39:19:fb:48:5f:ba:84:79:99:25:d1:d1: 63:67:d8:5f:2c:c5:5e:6f:1d:1a:88:8f:96:21:24:c2:ba:dc: a7:d0:86:71:35:6e:49:98:9e:56:e6:bf:0a:b5:82:18:db:b0: 17:ac:7b:ed:fc:6b:0e:ba:dd:2a:9c:3f:fa:ba:40:2e:84:ee: b4:eb:4d:0d:73:76:ff:48:27:79:cd:a0:0b:d2:18:ca:5f:8a: 80:39:67:40:e4:8c:42:f4:29:24:ed:c3:b3:35:96:ff:5b:ab: 5a:8b:be:b3:4e:d9:0e:ee:ea:39:9e:b7:e9:79:bb:91:89:4c: ab:73:d2:10:4b:3b:e8:2a:97:e5:de:c1:de:a7:f8:aa:4c:83: 9c:42:6e:9e:aa:87:3b:43:9a:e5:fe:ab:7d:8c:dd:d4:36:85: 0c:a9:6d:1d:fa:bd:36:a9:d3:d8:d4:4f:33:7e:89:73:49:a7: 05:24:61:a2:6e:bd:73:8c:d3:16:d2:8c:c7:46:e9:20:4e:87: 5c:b5:6b:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwNzAxMDM0OTQzWhcNMjUwNzA4MDM0OTQyWjAYMRYwFAYD VQQDEw02ODYzNWFkNy00MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkZglvJTw5UHPJtMfHiWNEkvGo3XMZvBu0SpycnTmdZfTuYTgMp5oCYCZ4Ej GKwhyE4HIb4bLIUBujBZHniZFeXi4VVT8KsVqk/u5cQs3S8l3nZ7lVvpXmxO/gmu 7Zbl3w9Swbyunr4IfdlNQ5OxnFD0fOtJEQhw95ZXASHXRF1b2FCL8UAnFgCGrwWD 8L1C/Z470RLHuLBt3ODNN3nDrD51tPT898g1aS7MNa06EdaiuoN31QC+IBJaollE PpnV5f0wLdXlJnFkVIMX6YrDGXUgxpApeaw8VhWVl8HdXgT03c43xgiIL5fDn2nz vCRepCKXVMk4pClCYIWtGoBjNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVY2FpL PpIVhjVT8a1EgsQNdRNKMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqiFzLXBHz8WJqCtKfohP7L7yyoomnmrFEekNremPYr3d59iIfcbj oMoOi1RluxNVgmySC4/3zxXkNJ45GftIX7qEeZkl0dFjZ9hfLMVebx0aiI+WISTC utyn0IZxNW5JmJ5W5r8KtYIY27AXrHvt/GsOut0qnD/6ukAuhO60600Nc3b/SCd5 zaAL0hjKX4qAOWdA5IxC9Ckk7cOzNZb/W6tai76zTtkO7uo5nrfpebuRiUyrc9IQ SzvoKpfl3sHep/iqTIOcQm6eqoc7Q5rl/qt9jN3UNoUMqW0d+r02qdPY1E8zfolz SacFJGGibr1zjNMW0ozHRukgTodctWsL -----END CERTIFICATE-----Generated at Tue Jul 1 13:20:29 2025 by rpki-client