$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: 4NyH4/lOQOv2TNV+CAjuIa6MYpMPUhpoCz9H2TB9SD8= Subject key identifier: AD:9E:91:21:07:5E:11:42:1A:BB:EE:97:FF:B9:E9:03:43:C4:33:48 Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0AD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0ACF Signing time: Fri 04 Jul 2025 19:47:31 +0000 Manifest this update: Fri 04 Jul 2025 19:47:31 +0000 Manifest next update: Fri 11 Jul 2025 19:47:31 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: 4+BgqigphHyY5wwSQzdPQX9/c/mrsQRcpGEGviDgNNY=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2775 (0xad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Jul 4 19:47:31 2025 GMT Not After : Jul 11 19:47:31 2025 GMT Subject: CN=68682fd3-b545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:60:e8:3f:b6:2b:20:d5:07:c7:bc:09:0e: 2d:6c:03:c4:c9:a4:0e:4f:ab:1a:f9:01:87:10:9a: b7:83:36:84:2c:23:cc:56:81:c5:26:06:c8:aa:f0: 33:c4:ea:b5:b0:e5:23:05:8d:ab:2e:a0:14:db:e3: 60:ab:4f:57:df:3a:fd:26:14:e2:49:c6:81:5f:6c: 9a:66:b3:67:a1:b1:bc:8a:48:9d:02:21:0c:6a:c3: f2:c9:6f:c7:dc:3b:ba:89:a6:3b:f7:8a:71:39:9a: 6a:05:7a:89:c8:7d:d6:ea:e3:85:58:b9:28:3c:19: de:61:5e:5d:ab:70:97:f1:bc:43:b8:96:06:d9:f5: c9:b1:c3:e9:f1:de:07:d9:64:0f:d0:31:1d:56:55: d3:e8:a5:af:6e:9d:91:57:88:fc:00:f8:65:d2:ac: 68:8d:5a:38:6a:ff:da:cf:c9:d9:be:93:fa:71:18: eb:5b:7b:4d:34:2f:94:ce:16:03:6e:d7:61:cb:3e: 60:52:4a:1e:a8:97:d3:f0:95:e5:a5:6b:bb:c7:57: 5f:42:9e:91:11:fe:2f:52:91:dc:28:3e:ec:84:72: d6:d0:ae:9a:98:10:3e:3e:52:1e:b5:a8:4e:7a:7b: 50:54:d3:c1:89:2e:e0:e0:6c:b9:53:a8:a7:2a:7f: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:91:21:07:5E:11:42:1A:BB:EE:97:FF:B9:E9:03:43:C4:33:48 X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:08:88:cd:63:50:e2:db:dd:e6:41:04:6c:f6:fc:8f:cf: d4:0c:9f:82:4d:13:94:5b:9a:aa:65:54:92:78:af:7a:a3:70: 2e:62:bd:1c:17:20:27:2b:50:32:2d:10:05:a8:0d:1f:43:a5: ff:cc:22:60:66:dc:1c:7c:ff:e8:a6:29:35:67:4b:31:15:eb: 11:25:bf:85:b0:2f:32:87:23:1c:e2:98:3f:cc:f9:6a:f2:11: fe:30:5e:96:a0:13:22:0f:f5:ae:6d:78:a8:83:a9:13:73:4f: 17:69:8b:f2:09:3a:74:1f:02:39:7c:d7:7e:28:3f:01:af:6d: f1:bc:06:9e:48:2f:7b:40:c8:6b:80:e7:47:6e:e3:72:a9:a0: 56:0f:3a:66:9f:d4:70:d8:37:e1:7a:1f:2a:d9:20:ee:df:a9: a2:da:52:9f:57:1a:8b:17:94:09:c1:46:b6:1a:46:86:fc:7a: 61:c4:16:4b:f7:41:6d:9d:9f:0f:c6:22:75:e7:22:e4:08:29: bd:75:7f:fc:ea:3c:44:59:76:59:d0:9e:6d:b3:94:c2:c1:39: a8:9c:63:50:74:dc:62:ff:0f:f5:96:78:2d:9b:f4:8a:6e:33: 1a:b6:23:6e:23:e6:84:be:0a:c8:62:9b:b7:2e:7f:7c:e9:fa: e2:1e:fb:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwNzA0MTk0NzMxWhcNMjUwNzExMTk0NzMxWjAYMRYwFAYD VQQDEw02ODY4MmZkMy1iNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SBg6D+2KyDVB8e8CQ4tbAPEyaQOT6sa+QGHEJq3gzaELCPMVoHFJgbIqvAz xOq1sOUjBY2rLqAU2+Ngq09X3zr9JhTiScaBX2yaZrNnobG8ikidAiEMasPyyW/H 3Du6iaY794pxOZpqBXqJyH3W6uOFWLkoPBneYV5dq3CX8bxDuJYG2fXJscPp8d4H 2WQP0DEdVlXT6KWvbp2RV4j8APhl0qxojVo4av/az8nZvpP6cRjrW3tNNC+UzhYD btdhyz5gUkoeqJfT8JXlpWu7x1dfQp6REf4vUpHcKD7shHLW0K6amBA+PlIetahO entQVNPBiS7g4Gy5U6inKn/agwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2ekSEH XhFCGrvul/+56QNDxDNIMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ngiIzWNQ4tvd5kEEbPb8j8/UDJ+CTROUW5qqZVSSeK96o3AuYr0c FyAnK1AyLRAFqA0fQ6X/zCJgZtwcfP/opik1Z0sxFesRJb+FsC8yhyMc4pg/zPlq 8hH+MF6WoBMiD/WubXiog6kTc08XaYvyCTp0HwI5fNd+KD8Br23xvAaeSC97QMhr gOdHbuNyqaBWDzpmn9Rw2Dfheh8q2SDu36mi2lKfVxqLF5QJwUa2GkaG/HphxBZL 90FtnZ8PxiJ15yLkCCm9dX/86jxEWXZZ0J5ts5TCwTmonGNQdNxi/w/1lngtm/SK bjMatiNuI+aEvgrIYpu3Ln986friHvun -----END CERTIFICATE-----Generated at Sat Jul 5 11:43:13 2025 by rpki-client