$ rpki-client -vvf rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft File: FpJaX5SGv8PxG1GPDfhHOgKruFs.mft (raw, json) Hash identifier: gkEO2MzY38Dcb7vDEMAVE2i3sNAwSexqBKA9G+52QBk= Subject key identifier: F7:36:E5:77:F2:F4:B7:E6:79:98:63:A6:2C:AB:49:9B:DD:46:F5:E6 Authority key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B Certificate issuer: /CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft Manifest number: BE Signing time: Sun 29 Jun 2025 04:55:38 +0000 Manifest this update: Sun 29 Jun 2025 04:55:38 +0000 Manifest next update: Sun 06 Jul 2025 04:55:37 +0000 Files and hashes: 1: FpJaX5SGv8PxG1GPDfhHOgKruFs.crl (hash: PfKgGdZxSg3mqn911EA9990/yjCWtwrI76liWiGdjeE=) 2: 0F0D45D0373711EF896FCE68C4F9AE02.roa (hash: 8SD/beYd/nx0hbzhIjleBbHgR6i9e/DB5zLCO7k3URU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91282C6, serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Validity Not Before: Jun 29 04:55:38 2025 GMT Not After : Jul 6 04:55:37 2025 GMT Subject: CN=6860c74a-8d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:60:dc:2c:57:9e:bd:56:e8:8e:4c:6c:7d: b8:10:60:36:d7:d3:0b:95:94:71:23:d1:8a:53:5d: 28:a0:7d:b2:0b:3f:a8:fb:9c:82:8f:35:84:0b:00: d3:d2:01:f4:bb:3a:5c:ad:c9:1f:51:a0:70:80:d0: cd:b4:50:07:4b:82:f5:54:f2:25:1e:59:2b:a6:53: 6c:68:0e:50:31:b5:0f:e4:bb:4f:e4:ea:9f:da:0d: 82:c1:b3:9e:91:d1:57:6b:ae:c5:ae:58:45:79:ca: d8:d4:dd:27:10:92:c2:08:85:8f:be:c5:10:d8:d5: 99:d8:b8:13:f7:f6:51:f0:29:70:1d:94:43:f8:18: 6c:73:04:2c:34:90:c4:34:28:7a:a0:d1:e9:35:d6: af:8f:ca:a7:4e:7f:2e:98:71:c5:f6:7c:4f:64:45: 26:7c:e6:03:62:b8:de:28:39:0c:5f:18:d1:51:1f: 4c:6b:5b:3a:ad:94:fb:be:52:fd:f1:b5:01:e5:f2: 84:ac:93:c8:f7:35:95:0e:f3:94:f1:6e:c4:70:c5: 63:20:41:a7:07:48:93:5a:cf:4f:0f:2b:3a:7a:b6: 59:5d:81:9c:47:6d:59:ba:79:9a:0e:b5:91:05:bf: bd:03:26:d9:1a:71:39:5e:78:90:f8:8f:43:5c:02: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:E5:77:F2:F4:B7:E6:79:98:63:A6:2C:AB:49:9B:DD:46:F5:E6 X509v3 Authority Key Identifier: keyid:16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4a:59:50:75:56:a4:dc:a8:ba:6b:48:e2:b4:9f:09:7d:80: 0d:b4:6b:fe:e0:69:44:87:8a:52:45:b8:e2:4c:bc:7e:a1:de: 9e:65:a2:c2:9d:2f:24:be:11:8f:bf:df:71:e8:09:a0:a9:42: 25:40:5b:06:7b:1a:ee:70:df:aa:cd:a1:84:57:6a:47:b4:32: 2e:8d:29:25:ce:1c:8b:24:68:f2:d1:1a:e1:a2:18:ee:fa:9f: a0:76:08:7c:68:ce:b7:ac:77:b4:77:fc:ce:45:02:73:a8:b8: ae:9b:57:54:b2:71:e3:7c:ba:f5:02:c0:20:bd:10:5f:f4:2a: 65:58:e9:72:b9:62:24:bc:5c:bc:bd:63:67:99:60:7d:4c:38: a9:12:a3:7e:26:7a:15:ec:20:1d:a1:8b:ad:8a:71:5b:53:b9: 03:e1:b2:4b:48:8e:13:4d:a6:a7:7b:4d:52:6d:44:ae:b8:38: 59:0c:9f:f8:38:9e:3f:32:de:5c:d6:bb:68:5f:e5:27:75:1d: 16:35:92:4e:95:5b:9e:91:9d:b1:ad:8b:df:aa:32:4f:01:6a: 52:ad:9a:c9:6d:b0:be:a0:76:0e:f3:e9:99:20:9b:60:01:a7: ca:fe:a6:1b:e2:96:d7:6d:53:1c:01:fd:11:7e:96:19:a9:08: 54:b3:c1:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyQzYxMTAvBgNVBAUTKDE2OTI1QTVGOTQ4NkJGQzNGMTFCNTE4RjBERjg0NzNB MDJBQkI4NUIwHhcNMjUwNjI5MDQ1NTM4WhcNMjUwNzA2MDQ1NTM3WjAYMRYwFAYD VQQDEw02ODYwYzc0YS04ZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuxg3CxXnr1W6I5MbH24EGA219MLlZRxI9GKU10ooH2yCz+o+5yCjzWECwDT 0gH0uzpcrckfUaBwgNDNtFAHS4L1VPIlHlkrplNsaA5QMbUP5LtP5Oqf2g2CwbOe kdFXa67FrlhFecrY1N0nEJLCCIWPvsUQ2NWZ2LgT9/ZR8ClwHZRD+BhscwQsNJDE NCh6oNHpNdavj8qnTn8umHHF9nxPZEUmfOYDYrjeKDkMXxjRUR9Ma1s6rZT7vlL9 8bUB5fKErJPI9zWVDvOU8W7EcMVjIEGnB0iTWs9PDys6erZZXYGcR21ZunmaDrWR Bb+9AybZGnE5XniQ+I9DXAJtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc25Xfy 9LfmeZhjpiyrSZvdRvXmMB8GA1UdIwQYMBaAFBaSWl+Uhr/D8RtRjw34RzoCq7hb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODJDNi85Q0UzQUZCNjM2 NzQxMUVGQURCNTIwMUNDNEY5QUUwMi9GcEphWDVTR3Y4UHhHMUdQRGZoSE9nS3J1 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZwSmFYNVNHdjhQeEcxR1BEZmhIT2dLcnVGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODJDNi85Q0UzQUZCNjM2NzQxMUVGQURCNTIwMUNDNEY5QUUwMi9GcEphWDVTR3Y4 UHhHMUdQRGZoSE9nS3J1RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJSllQdVak3Ki6a0jitJ8JfYANtGv+4GlEh4pSRbjiTLx+od6eZaLC nS8kvhGPv99x6AmgqUIlQFsGexrucN+qzaGEV2pHtDIujSklzhyLJGjy0Rrhohju +p+gdgh8aM63rHe0d/zORQJzqLium1dUsnHjfLr1AsAgvRBf9CplWOlyuWIkvFy8 vWNnmWB9TDipEqN+JnoV7CAdoYutinFbU7kD4bJLSI4TTaane01SbUSuuDhZDJ/4 OJ4/Mt5c1rtoX+UndR0WNZJOlVuekZ2xrYvfqjJPAWpSrZrJbbC+oHYO8+mZIJtg AafK/qYb4pbXbVMcAf0RfpYZqQhUs8G/ -----END CERTIFICATE-----Generated at Sun Jun 29 16:18:34 2025 by rpki-client