$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: bmymLJuT4sYFaHRgpWO+y6bifKDPcexIz5cTB0viaNk= Subject key identifier: 64:A2:EF:82:8E:C4:1B:94:97:79:1D:41:44:A2:B0:EF:88:0D:B7:C9 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B62 Signing time: Fri 04 Jul 2025 19:25:26 +0000 Manifest this update: Fri 04 Jul 2025 19:25:25 +0000 Manifest next update: Fri 11 Jul 2025 19:25:25 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: qq2eYq84DXiDSiVlZbGV0I9i5JdCfUW4PzczNbdqq10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Jul 4 19:25:25 2025 GMT Not After : Jul 11 19:25:25 2025 GMT Subject: CN=68682aa5-3652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:64:1b:42:48:ac:82:81:5c:62:32:96:d1: 38:71:df:bf:d9:3d:8d:a6:fb:2a:bb:76:ab:7b:de: 23:b9:41:af:51:7b:f6:bd:de:55:e0:e6:56:ad:63: fe:67:8c:e6:bc:23:47:34:d2:ab:4c:3d:12:3e:9b: 91:ff:85:bc:4f:c5:cf:69:43:01:db:1c:5c:a0:5f: 17:9e:6a:22:d5:a0:a5:d9:bb:22:3c:ad:98:4b:33: 13:e2:fb:78:d2:1e:e2:5c:b3:f7:89:6d:f0:17:29: 09:66:5c:66:55:94:58:94:dd:41:eb:db:73:7e:ca: fc:31:3a:ab:92:d8:e7:3b:d0:84:6e:56:51:2f:79: a5:57:f0:e4:c9:6c:75:17:32:64:d3:45:11:b0:73: 5e:ac:d9:5b:be:88:f8:60:93:8c:9c:11:63:00:12: a3:a8:ba:09:6e:e6:2a:06:62:e9:e0:9c:82:08:10: 7d:8a:41:25:6f:4e:9e:73:3e:6c:79:e6:f6:06:c4: a6:c9:67:6f:0c:27:30:f1:aa:27:f9:a4:66:dc:47: 89:ce:3f:e8:3f:58:bf:24:41:e4:e7:6a:4a:ee:74: 9c:44:a4:33:3e:39:94:5b:c4:96:92:2c:ac:63:e0: 29:53:a4:c2:5d:13:b7:bc:90:80:e6:87:a3:33:0b: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:EF:82:8E:C4:1B:94:97:79:1D:41:44:A2:B0:EF:88:0D:B7:C9 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:d0:95:e5:88:f2:45:01:19:8c:16:2e:5c:9b:e0:cc:38: d4:51:76:d8:86:99:19:e9:a6:d1:97:c3:6b:68:53:a1:aa:d6: 0f:97:27:81:1e:24:cb:94:74:fc:7a:1c:01:b6:9c:62:b4:dd: 39:f9:f4:a1:3f:13:e2:2f:f8:1d:a5:ec:e2:29:32:5d:4f:e4: 0f:df:46:63:2a:f8:f5:8d:42:3d:cf:b0:a8:cc:49:5f:4c:48: fa:4c:4c:3e:c7:e2:a9:38:fc:8c:d5:8b:82:c6:71:f8:7f:4c: 25:84:ce:7a:1e:5d:5b:cb:07:89:62:3c:b9:31:ca:7e:16:24: dc:66:15:55:ec:fb:7b:b2:05:0a:a9:3d:e4:7e:33:2b:50:f8: de:d1:99:1e:2b:e8:ec:db:02:98:4d:fd:5b:1f:5c:b6:85:4c: fa:da:0b:c4:52:cf:23:00:eb:60:83:07:e5:fa:15:06:36:3e: da:d5:25:e8:cf:3c:cc:63:cc:c9:40:fd:43:a8:b0:b4:db:31: 68:c4:6a:00:59:aa:2d:a7:0f:52:34:48:ab:84:8c:ef:96:17: 40:47:67:45:95:0b:df:f7:9f:fb:47:21:7e:bf:f0:73:45:d2: 5f:f8:25:09:90:3d:1a:20:27:d1:cd:04:5d:eb:48:f1:c4:d4: c5:07:fe:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwNzA0MTkyNTI1WhcNMjUwNzExMTkyNTI1WjAYMRYwFAYD VQQDEw02ODY4MmFhNS0zNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LZkG0JIrIKBXGIyltE4cd+/2T2Npvsqu3are94juUGvUXv2vd5V4OZWrWP+ Z4zmvCNHNNKrTD0SPpuR/4W8T8XPaUMB2xxcoF8Xnmoi1aCl2bsiPK2YSzMT4vt4 0h7iXLP3iW3wFykJZlxmVZRYlN1B69tzfsr8MTqrktjnO9CEblZRL3mlV/DkyWx1 FzJk00URsHNerNlbvoj4YJOMnBFjABKjqLoJbuYqBmLp4JyCCBB9ikElb06ecz5s eeb2BsSmyWdvDCcw8aon+aRm3EeJzj/oP1i/JEHk52pK7nScRKQzPjmUW8SWkiys Y+ApU6TCXRO3vJCA5oejMwtrEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSi74KO xBuUl3kdQUSisO+IDbfJMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ZdCV5YjyRQEZjBYuXJvgzDjUUXbYhpkZ6abRl8NraFOhqtYPlyeB HiTLlHT8ehwBtpxitN05+fShPxPiL/gdpeziKTJdT+QP30ZjKvj1jUI9z7CozElf TEj6TEw+x+KpOPyM1YuCxnH4f0wlhM56Hl1byweJYjy5Mcp+FiTcZhVV7Pt7sgUK qT3kfjMrUPje0ZkeK+js2wKYTf1bH1y2hUz62gvEUs8jAOtggwfl+hUGNj7a1SXo zzzMY8zJQP1DqLC02zFoxGoAWaotpw9SNEirhIzvlhdAR2dFlQvf95/7RyF+v/Bz RdJf+CUJkD0aICfRzQRd60jxxNTFB/4Y -----END CERTIFICATE-----Generated at Sat Jul 5 22:20:32 2025 by rpki-client