$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: ib4tAOpIJUFHg+sKiPUhxlhsOMmn3U6tEhqqLTcwbso= Subject key identifier: E7:A1:C9:5B:30:3B:D0:60:89:AB:FA:66:F7:58:B7:1C:4E:DB:C3:6B Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 02BB Signing time: Thu 03 Jul 2025 01:48:51 +0000 Manifest this update: Thu 03 Jul 2025 01:48:50 +0000 Manifest next update: Thu 10 Jul 2025 01:48:50 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: 2hCaqX4xJDj+p9IVaXsXgvTXGDIVWrgN0/+ajkvDgxE=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 81tZME9FAwzO2UIk/WDugs2sSYBMwRpnwSHq/X3xc/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: Jul 3 01:48:50 2025 GMT Not After : Jul 10 01:48:50 2025 GMT Subject: CN=6865e182-9897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:bf:88:68:93:85:90:e8:73:ef:cf:0e:f2: d1:04:01:ea:91:3b:8e:08:c9:74:77:37:6a:0e:88: 25:88:b4:03:20:d3:b3:f1:8d:25:91:d1:1e:9d:6c: 7c:79:5f:bb:2f:ee:3d:3a:34:9c:85:c9:76:6b:b8: 3b:ef:53:05:5b:a3:17:df:0b:b2:52:32:e7:82:19: 33:4c:53:2c:13:bf:57:86:be:26:01:ba:a0:45:39: f3:bb:96:df:b4:93:2a:13:4a:c5:7f:81:b2:85:8c: 17:30:44:eb:e9:57:37:60:db:fa:01:99:f2:fd:6f: f3:44:63:80:f0:ef:21:65:a0:57:85:ce:71:a3:38: 1f:1e:ad:f0:61:1c:fd:7c:dc:83:a9:53:5e:b8:8e: e0:70:25:4d:f7:f1:05:a1:1b:1d:21:92:92:db:c9: 06:64:ae:1e:c7:f3:69:78:7b:17:3a:db:1b:50:b1: ed:af:59:1c:85:4d:42:2f:e6:23:be:1c:e5:f6:18: 35:c3:01:25:44:e0:67:ea:49:4a:ef:c0:5e:b7:23: 41:91:3c:54:e1:d6:41:4c:fd:7d:fc:9f:f4:c7:e8: e6:66:b8:40:a3:d3:b4:62:a0:96:c5:51:d0:08:39: 90:6f:0e:a0:1b:11:28:6a:c4:35:25:51:43:16:8c: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:C9:5B:30:3B:D0:60:89:AB:FA:66:F7:58:B7:1C:4E:DB:C3:6B X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:20:38:5b:7f:1c:9b:9f:11:14:2e:00:05:59:7b:ae:d2: f4:a0:37:05:0d:d7:4b:a7:64:0b:9e:f3:cf:5d:63:dd:49:c8: ab:62:4b:98:a3:bb:7f:d3:1b:42:c1:2f:f3:3f:c0:7e:85:2f: db:7b:e2:42:18:97:93:42:cd:76:7f:89:c8:1d:40:17:8e:a7: 46:a2:31:26:3c:e9:54:d0:a7:e6:17:7d:5a:62:bc:fb:15:0f: 46:26:57:c2:91:41:5e:17:34:21:5c:93:0e:68:aa:bb:b3:18: 12:f3:a6:d9:2e:4e:26:3c:81:0d:e3:ac:71:dd:79:27:a2:eb: 00:67:f4:80:53:01:c4:5e:d4:9a:72:7f:06:aa:86:de:ca:8a: 15:c5:57:2f:55:64:5c:a5:a8:14:64:44:7a:be:8f:73:84:e1: d7:36:31:8d:05:d9:d5:26:12:2f:18:51:ca:da:60:89:6f:0e: 72:17:80:ef:a5:b3:7a:4b:91:12:ae:2c:d6:8e:3e:07:76:f8: 48:7f:09:eb:42:b1:82:5e:89:b8:84:cc:b5:0c:19:54:f0:06: 34:d2:35:9a:13:79:1e:cf:6b:b0:0e:5d:bb:4d:d9:24:f0:3f: f8:14:35:f9:b7:34:97:8c:dc:d4:2b:66:99:dc:73:3c:65:d3: b5:5e:d9:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjUwNzAzMDE0ODUwWhcNMjUwNzEwMDE0ODUwWjAYMRYwFAYD VQQDEw02ODY1ZTE4Mi05ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WG/iGiThZDoc+/PDvLRBAHqkTuOCMl0dzdqDogliLQDINOz8Y0lkdEenWx8 eV+7L+49OjSchcl2a7g771MFW6MX3wuyUjLnghkzTFMsE79Xhr4mAbqgRTnzu5bf tJMqE0rFf4GyhYwXMETr6Vc3YNv6AZny/W/zRGOA8O8hZaBXhc5xozgfHq3wYRz9 fNyDqVNeuI7gcCVN9/EFoRsdIZKS28kGZK4ex/NpeHsXOtsbULHtr1kchU1CL+Yj vhzl9hg1wwElROBn6klK78BetyNBkTxU4dZBTP19/J/0x+jmZrhAo9O0YqCWxVHQ CDmQbw6gGxEoasQ1JVFDFox5twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOehyVsw O9Bgiav6ZvdYtxxO28NrMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASgyA4W38cm58RFC4ABVl7rtL0oDcFDddLp2QLnvPPXWPdScirYkuY o7t/0xtCwS/zP8B+hS/be+JCGJeTQs12f4nIHUAXjqdGojEmPOlU0KfmF31aYrz7 FQ9GJlfCkUFeFzQhXJMOaKq7sxgS86bZLk4mPIEN46xx3XknousAZ/SAUwHEXtSa cn8GqobeyooVxVcvVWRcpagUZER6vo9zhOHXNjGNBdnVJhIvGFHK2mCJbw5yF4Dv pbN6S5ESrizWjj4HdvhIfwnrQrGCXom4hMy1DBlU8AY00jWaE3kez2uwDl27Tdkk 8D/4FDX5tzSXjNzUK2aZ3HM8ZdO1Xtn5 -----END CERTIFICATE-----Generated at Thu Jul 3 12:25:35 2025 by rpki-client