$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: il8+IsjPVcOrafrfS2gVtafq76SZP3rIu2p00OFwZqI= Subject key identifier: 6C:4E:31:6A:1F:BB:7A:99:78:09:3F:62:22:F0:7B:08:4A:09:7D:1C Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 06C8 Signing time: Wed 02 Jul 2025 22:23:21 +0000 Manifest this update: Wed 02 Jul 2025 22:23:20 +0000 Manifest next update: Wed 09 Jul 2025 22:23:20 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: KJZYUdKZ4EelDewk65/hjBtRETrmICGB2Yr7S0zNtwY=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Jul 2 22:23:20 2025 GMT Not After : Jul 9 22:23:20 2025 GMT Subject: CN=6865b158-321b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:0a:ed:54:0f:55:77:22:d9:97:23:fd:05: 0a:4a:9d:b1:99:ad:82:13:62:c5:43:e0:61:db:d9: 52:00:2c:5c:d3:8d:ea:1d:a8:ae:d9:82:1f:fe:d6: c6:1a:02:ca:ea:82:6a:f6:03:9c:e3:18:4b:b4:4f: 48:a5:cb:0c:ed:51:2b:18:1b:dc:8a:1c:c9:c5:f8: f9:92:cc:2a:88:9f:77:63:eb:2f:57:e9:1c:85:e2: 8c:ed:61:3f:e5:ed:c1:7e:0e:8c:63:f6:8d:d3:8f: f2:d9:90:4e:5a:2d:c1:b2:90:9a:24:40:2f:75:85: ab:f0:eb:f8:d1:83:fe:42:2e:94:e6:e8:f0:d2:9f: 80:6e:cc:2f:15:8c:11:be:f8:aa:94:c2:6b:93:88: a4:c5:44:f8:82:08:c8:8c:2b:49:14:0c:29:b9:9d: 45:98:05:62:7d:14:77:e3:49:2d:b9:51:88:eb:48: 10:a1:c1:2e:e8:ca:2b:4f:8b:71:5b:07:25:84:d6: fd:e0:4f:b2:c9:fc:51:06:8c:fd:99:b2:d3:29:db: 3d:0c:e0:70:fb:4d:b6:86:de:c1:cc:15:cf:8a:69: ab:65:ca:38:c3:fa:fd:a3:a8:08:8b:27:14:20:3c: e2:20:b9:df:38:d6:ac:ea:6a:3e:22:d9:5e:76:5b: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:31:6A:1F:BB:7A:99:78:09:3F:62:22:F0:7B:08:4A:09:7D:1C X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:74:31:54:36:02:f4:88:b1:86:32:03:8a:d4:03:f5:4f:9e: d3:36:24:44:16:ef:70:5d:3b:2a:e8:09:f0:97:0f:ce:e0:54: 06:12:46:a3:ce:26:93:9b:02:da:ae:cd:88:eb:7a:77:77:1d: f5:38:a4:91:d1:79:e3:d7:db:d7:dc:b1:fd:66:46:20:a2:03: 9e:c8:71:33:7b:0e:b4:f3:7e:05:b4:f7:f8:04:7e:14:a8:22: d9:21:7a:61:c2:e3:32:5c:ec:08:7e:33:18:39:c7:a0:a8:8c: 9c:23:95:4b:02:d9:31:e2:dd:68:f0:18:8c:3e:d6:73:6a:2f: ba:7c:05:69:ac:00:e7:45:d9:25:63:cc:a6:5a:f9:07:21:73: 98:ad:2d:84:dd:8f:65:0b:15:21:3c:52:3e:81:a5:1e:04:14: 76:96:87:86:ee:43:8d:51:e3:33:1f:6c:1c:f5:dc:e1:39:28: b1:0f:f2:2b:84:bb:44:3c:07:77:5f:89:8e:ed:01:41:02:76: ed:94:ea:9e:68:4f:c4:1d:ed:96:a0:c1:9e:c0:16:79:b8:bd: 95:bc:aa:da:49:48:ad:54:6c:90:58:e0:02:4c:7c:b2:82:83: 28:85:43:be:09:5e:db:af:c9:bd:58:23:fd:10:66:90:2e:0d: e4:31:2e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUwNzAyMjIyMzIwWhcNMjUwNzA5MjIyMzIwWjAYMRYwFAYD VQQDEw02ODY1YjE1OC0zMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LsK7VQPVXci2Zcj/QUKSp2xma2CE2LFQ+Bh29lSACxc043qHaiu2YIf/tbG GgLK6oJq9gOc4xhLtE9IpcsM7VErGBvcihzJxfj5kswqiJ93Y+svV+kcheKM7WE/ 5e3Bfg6MY/aN04/y2ZBOWi3BspCaJEAvdYWr8Ov40YP+Qi6U5ujw0p+AbswvFYwR vviqlMJrk4ikxUT4ggjIjCtJFAwpuZ1FmAVifRR340ktuVGI60gQocEu6MorT4tx WwclhNb94E+yyfxRBoz9mbLTKds9DOBw+022ht7BzBXPimmrZco4w/r9o6gIiycU IDziILnfONas6mo+Itledlv+vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxOMWof u3qZeAk/YiLwewhKCX0cMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCndDFUNgL0iLGGMgOK1AP1T57TNiREFu9wXTsq6Anwlw/O4FQGEkaj ziaTmwLars2I63p3dx31OKSR0Xnj19vX3LH9ZkYgogOeyHEzew60834FtPf4BH4U qCLZIXphwuMyXOwIfjMYOcegqIycI5VLAtkx4t1o8BiMPtZzai+6fAVprADnRdkl Y8ymWvkHIXOYrS2E3Y9lCxUhPFI+gaUeBBR2loeG7kONUeMzH2wc9dzhOSixD/Ir hLtEPAd3X4mO7QFBAnbtlOqeaE/EHe2WoMGewBZ5uL2VvKraSUitVGyQWOACTHyy goMohUO+CV7br8m9WCP9EGaQLg3kMS6b -----END CERTIFICATE-----Generated at Thu Jul 3 01:19:41 2025 by rpki-client