$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: AgTTnxbXZG7zvzJ5VK2/w9PsoQs7633ctkLabTtMRwo= Subject key identifier: C6:04:14:72:0D:74:56:F3:D0:0E:F2:57:CF:04:E8:DF:49:20:3B:CB Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 0144 Signing time: Tue 01 Jul 2025 04:48:37 +0000 Manifest this update: Tue 01 Jul 2025 04:48:36 +0000 Manifest next update: Tue 08 Jul 2025 04:48:36 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: i+6QHCvm0JyoDIJzEyF6PsJuU7I/xgMqGMAeghsAWw8=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Jul 1 04:48:36 2025 GMT Not After : Jul 8 04:48:36 2025 GMT Subject: CN=686368a4-efcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:9e:f5:10:77:a1:bb:58:fd:fd:36:28:a5: a7:22:ef:ab:01:e5:f3:b2:d8:85:be:44:d4:03:23: 3e:c2:35:f9:4e:88:40:66:ca:bf:85:1c:c8:8f:4a: 38:59:63:c8:d0:e2:ac:03:32:43:73:b2:b1:fe:e7: db:0e:a4:7f:9f:b2:fb:dd:65:33:22:a6:99:0a:62: 5a:72:b9:ca:b7:70:4c:0d:6a:11:30:3c:48:86:04: 98:22:b4:02:cc:9a:a8:3c:db:7b:e9:d8:8f:61:fc: 7d:87:16:aa:7b:fb:ec:cf:78:f7:8d:23:43:69:04: 57:62:e9:2f:e8:50:05:1e:72:51:2e:7c:de:34:0f: a4:5f:b5:05:16:e1:1b:d0:91:a0:6c:a6:6e:3a:9f: df:d0:b9:5c:dc:6f:6e:04:36:e4:18:0d:f9:b9:30: 91:a4:08:2d:ef:52:6c:84:ca:14:2c:f1:8f:db:d7: 1a:64:fa:76:96:01:dc:e8:0a:37:6b:64:c3:c0:c4: cd:b8:e8:cf:59:12:43:ad:93:63:89:01:5d:30:f4: 7b:30:6b:e0:62:88:4d:a1:2a:6e:07:ee:3e:9c:65: a6:ff:44:7a:af:a6:af:41:28:96:5e:31:9f:c3:6d: 2c:1a:f9:d4:72:95:38:91:71:a5:6e:e2:fb:5b:c4: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:04:14:72:0D:74:56:F3:D0:0E:F2:57:CF:04:E8:DF:49:20:3B:CB X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9f:01:91:30:7f:07:3a:29:31:c9:10:a1:b0:60:2a:f1:91: b9:c8:3c:33:f9:3b:05:b9:af:91:d8:da:90:39:ef:83:63:9b: 8e:11:10:c2:2b:33:89:dd:dc:ff:86:ec:ef:c6:47:7d:7a:e5: 71:aa:75:a4:9a:da:16:b4:20:bf:fd:cb:eb:9f:68:2d:60:80: 4f:50:25:bd:c8:cb:33:96:25:89:33:67:cd:4a:62:80:23:d9: 73:bf:44:bc:bb:ee:eb:e7:08:b7:06:b0:c5:83:6e:e0:39:af: 87:1a:f1:d0:03:a0:2d:00:44:96:df:6b:0c:29:1e:29:39:7f: e6:db:28:8e:fc:8c:e5:da:82:43:31:46:e7:50:61:3e:dc:ad: 64:a4:cd:63:d8:d4:c3:cb:aa:e0:92:c1:22:eb:c1:4a:e6:07: 94:55:85:e2:41:e6:f8:b4:e3:e3:2c:9b:3c:65:1f:b7:a8:6e: 82:22:b3:30:1c:f2:95:ef:b0:b1:d6:53:03:85:fe:36:32:d3: f3:90:ae:c4:47:2d:da:f0:f7:21:34:43:ac:49:30:60:b3:70: b5:d9:6f:0e:eb:5b:b7:7a:53:a2:4e:bf:ca:12:59:d3:83:0a: 12:40:e6:63:f4:c1:ce:ec:d9:c1:3a:7d:6c:53:00:95:f8:55: e8:ec:29:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwNzAxMDQ0ODM2WhcNMjUwNzA4MDQ0ODM2WjAYMRYwFAYD VQQDEw02ODYzNjhhNC1lZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d+e9RB3obtY/f02KKWnIu+rAeXzstiFvkTUAyM+wjX5TohAZsq/hRzIj0o4 WWPI0OKsAzJDc7Kx/ufbDqR/n7L73WUzIqaZCmJacrnKt3BMDWoRMDxIhgSYIrQC zJqoPNt76diPYfx9hxaqe/vsz3j3jSNDaQRXYukv6FAFHnJRLnzeNA+kX7UFFuEb 0JGgbKZuOp/f0Llc3G9uBDbkGA35uTCRpAgt71JshMoULPGP29caZPp2lgHc6Ao3 a2TDwMTNuOjPWRJDrZNjiQFdMPR7MGvgYohNoSpuB+4+nGWm/0R6r6avQSiWXjGf w20sGvnUcpU4kXGlbuL7W8Tt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYEFHIN dFbz0A7yV88E6N9JIDvLMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQnwGRMH8HOikxyRChsGAq8ZG5yDwz+TsFua+R2NqQOe+DY5uOERDC KzOJ3dz/huzvxkd9euVxqnWkmtoWtCC//cvrn2gtYIBPUCW9yMszliWJM2fNSmKA I9lzv0S8u+7r5wi3BrDFg27gOa+HGvHQA6AtAESW32sMKR4pOX/m2yiO/Izl2oJD MUbnUGE+3K1kpM1j2NTDy6rgksEi68FK5geUVYXiQeb4tOPjLJs8ZR+3qG6CIrMw HPKV77Cx1lMDhf42MtPzkK7ERy3a8PchNEOsSTBgs3C12W8O61u3elOiTr/KElnT gwoSQOZj9MHO7NnBOn1sUwCV+FXo7Clv -----END CERTIFICATE-----Generated at Thu Jul 3 00:50:45 2025 by rpki-client