$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: 748IbZjQ2vuJ0sQh1bLU/n8A4Ei53SFOekQIg8MbzjI= Subject key identifier: 34:02:F4:48:62:4F:8E:24:5B:D0:97:17:FD:35:86:1A:E8:88:F1:47 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 0453 Signing time: Thu 03 Jul 2025 00:36:31 +0000 Manifest this update: Thu 03 Jul 2025 00:36:31 +0000 Manifest next update: Thu 10 Jul 2025 00:36:31 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: HG/h/nHPzh2Vxfa76fL0rXEZAjeFI9dyt2bHv1KjYv0=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Jul 3 00:36:31 2025 GMT Not After : Jul 10 00:36:31 2025 GMT Subject: CN=6865d08f-13b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:61:bf:53:43:57:d9:f0:02:24:68:ce:31: ef:6c:1a:d0:14:59:a7:7d:25:f8:77:1d:47:18:82: 10:91:63:1b:40:6e:76:b5:5c:36:b6:d5:18:3e:35: e7:01:59:c9:e4:94:ba:83:22:b3:9c:4e:c2:2f:1e: 81:80:e7:15:c4:a0:c7:57:11:a8:68:49:3a:9a:90: 78:4b:c4:fe:21:9e:3e:8c:e6:d4:3d:86:76:ec:48: 2f:7c:3b:31:14:e7:3b:63:bc:35:42:69:4f:ac:b7: 28:19:a5:ca:d6:d2:49:7f:f3:48:8f:32:7b:13:5e: 1f:b0:04:27:40:76:35:13:c9:ef:22:2c:72:f6:8d: d3:e3:87:bc:3e:b3:ad:da:6f:45:32:eb:63:4d:c1: e2:d8:b7:e6:7b:72:4e:97:f7:da:78:15:ad:8f:d0: 56:b7:44:cf:55:9c:1b:2e:bd:50:74:2d:b7:af:ea: 59:fd:02:a4:38:ac:fb:e5:ff:1a:a2:22:24:9e:9e: 06:08:44:7f:b3:0f:e6:57:80:5a:06:7f:02:e5:c5: 29:3a:9f:01:57:b1:45:e4:81:14:f6:1b:1b:59:71: 13:97:41:cd:12:b7:bd:48:bd:c2:90:57:91:40:13: 1d:f6:e5:fb:da:5a:78:ec:83:4d:4a:6c:17:50:2d: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:02:F4:48:62:4F:8E:24:5B:D0:97:17:FD:35:86:1A:E8:88:F1:47 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:84:14:91:cf:11:a1:71:d4:19:2e:9a:ed:ac:ec:fc:ae: 81:76:28:75:58:19:00:57:e4:a4:80:eb:9b:11:0c:bc:e4:1e: 8a:fd:22:23:f3:79:51:37:fa:f0:78:af:29:e2:6d:79:59:06: 12:7f:ad:ec:d8:c7:b3:8a:ae:f2:6f:cd:c8:0b:53:3f:ed:66: 33:b0:28:c6:46:18:c4:c1:71:41:22:da:6d:26:be:f5:ec:12: 6d:0d:e7:af:30:a5:5b:31:d6:00:e3:3d:74:d9:71:07:2e:b8: af:29:6e:14:35:68:74:d9:fa:79:49:be:b3:a2:48:7d:57:86: 88:cf:2d:2a:dc:7b:28:0e:42:bc:be:2f:01:98:20:4b:cb:d6: 9a:9f:d8:b8:4d:bd:62:2c:24:9c:76:c9:13:6a:dc:29:70:db: 11:1b:a6:04:90:7d:b9:43:52:6b:c8:59:d9:9b:66:89:4b:69: cb:c2:2f:8a:9f:68:23:61:f0:20:b3:8c:40:20:0d:66:7b:83: f5:c0:3f:58:14:bd:70:59:ac:6d:65:c3:df:a1:e0:16:cd:9d: 5e:5c:49:f2:a9:06:37:e0:99:b3:fa:fe:44:cf:9a:55:9a:bb: 4d:6e:df:ab:15:5c:f6:8c:69:ff:ac:bf:7f:83:5d:aa:42:96: 33:5f:21:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwNzAzMDAzNjMxWhcNMjUwNzEwMDAzNjMxWjAYMRYwFAYD VQQDEw02ODY1ZDA4Zi0xM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/Rhv1NDV9nwAiRozjHvbBrQFFmnfSX4dx1HGIIQkWMbQG52tVw2ttUYPjXn AVnJ5JS6gyKznE7CLx6BgOcVxKDHVxGoaEk6mpB4S8T+IZ4+jObUPYZ27EgvfDsx FOc7Y7w1QmlPrLcoGaXK1tJJf/NIjzJ7E14fsAQnQHY1E8nvIixy9o3T44e8PrOt 2m9FMutjTcHi2Lfme3JOl/faeBWtj9BWt0TPVZwbLr1QdC23r+pZ/QKkOKz75f8a oiIknp4GCER/sw/mV4BaBn8C5cUpOp8BV7FF5IEU9hsbWXETl0HNEre9SL3CkFeR QBMd9uX72lp47INNSmwXUC2SjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQC9Ehi T44kW9CXF/01hhroiPFHMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAEoQUkc8RoXHUGS6a7azs/K6Bdih1WBkAV+SkgOubEQy85B6K/SIj 83lRN/rweK8p4m15WQYSf63s2Meziq7yb83IC1M/7WYzsCjGRhjEwXFBItptJr71 7BJtDeevMKVbMdYA4z102XEHLrivKW4UNWh02fp5Sb6zokh9V4aIzy0q3HsoDkK8 vi8BmCBLy9aan9i4Tb1iLCScdskTatwpcNsRG6YEkH25Q1JryFnZm2aJS2nLwi+K n2gjYfAgs4xAIA1me4P1wD9YFL1wWaxtZcPfoeAWzZ1eXEnyqQY34Jmz+v5Ez5pV mrtNbt+rFVz2jGn/rL9/g12qQpYzXyE0 -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:13 2025 by rpki-client