$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: TDGdjQ7Bnv/wOmAnbquCmtrs/HSyJ8phFxJfNf9liaY= Subject key identifier: C8:D3:7B:0C:C6:70:DF:B9:E0:33:10:15:87:F0:32:08:A3:31:38:30 Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 07A1 Signing time: Mon 30 Jun 2025 21:31:06 +0000 Manifest this update: Mon 30 Jun 2025 21:31:06 +0000 Manifest next update: Mon 07 Jul 2025 21:31:06 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: nHowLHsTVsL5WZs/VRjo4HzT1UxGPbA++gbnKN8vFhs=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Jun 30 21:31:06 2025 GMT Not After : Jul 7 21:31:06 2025 GMT Subject: CN=6863021a-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:e7:90:e8:e9:86:3b:57:93:46:6e:2c:5f: df:9c:59:5c:1e:83:ed:62:ec:a3:3a:22:60:ba:96: 95:fa:f6:ad:ee:3a:54:3e:7b:80:b2:1b:0f:be:a8: c2:73:93:57:eb:8e:7a:59:81:3b:12:15:e9:eb:ad: 99:94:5c:fa:8c:90:71:6e:df:6b:ec:fb:4b:98:1a: 5c:d9:fd:06:b7:4f:f9:22:b5:3c:7d:ea:e2:0b:01: 42:5d:3d:b9:50:a5:ac:a2:61:6a:ec:e7:cb:8d:86: 05:bf:3c:19:17:43:a8:de:30:c0:71:b1:25:b8:f6: 3d:55:d5:b2:49:47:43:3e:25:47:69:a5:27:5b:bc: 43:2d:bd:d3:66:6d:78:a2:c1:ef:89:b5:6e:15:ad: 5c:73:b8:5a:2d:f7:9b:19:f5:11:b1:ed:fa:78:e8: ae:6c:cb:3b:ca:c7:e7:e4:3a:ef:a9:36:12:8e:9c: c0:2b:6d:f7:18:ae:7d:ce:17:12:f1:a3:47:df:8f: 85:ec:e3:22:30:10:bd:1b:07:ed:62:35:64:be:d3: da:c3:15:07:32:41:3f:2a:90:18:1e:8f:4f:1e:bf: be:e7:e3:f1:53:a1:b9:e6:f0:7c:c4:ce:45:0e:45: a2:d0:4b:28:38:f0:74:34:c6:74:d2:c5:aa:25:3e: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:7B:0C:C6:70:DF:B9:E0:33:10:15:87:F0:32:08:A3:31:38:30 X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e0:8d:a3:03:c9:92:7c:0b:f2:49:e8:f3:cb:d7:32:d3:ab: 25:c1:93:01:35:f7:0d:d7:51:08:66:aa:bd:92:e1:b3:02:55: 88:5a:c3:b8:b7:53:54:a8:e0:57:e6:6b:8b:d4:1f:b8:9f:cc: ed:27:2e:7e:58:a8:55:f8:c1:77:30:c1:2c:af:80:fc:ca:c2: 91:31:49:c2:05:8e:21:92:78:a3:14:d5:b2:27:98:45:b6:c3: 2d:92:11:f0:07:c5:61:66:f3:9f:3b:7f:cd:49:85:23:f8:9b: cb:84:21:b6:d8:72:6d:6f:db:3c:96:9b:33:05:2c:41:17:66: 92:16:f8:b5:4b:8b:19:19:d9:4a:48:22:43:be:b1:9f:f9:3b: c4:b0:25:4c:a7:f9:8f:6c:cc:3e:9d:51:97:5b:e7:08:1d:c4: cf:3b:e7:31:29:3c:ca:0f:5a:4a:1f:d1:f1:2a:ca:27:69:94: 53:2a:1c:ee:d6:89:d4:b2:a4:a3:91:ec:64:d8:2d:9b:83:c6: 34:af:79:2c:81:d8:30:6d:62:88:c7:9d:27:8c:4e:9d:fe:e4: 76:c5:31:2b:5a:71:b5:35:bf:f4:b4:f9:e2:a9:57:db:af:ba: 72:0c:20:cd:b3:7c:c4:ea:12:f5:06:2e:71:c2:23:0a:c4:f7: 8b:f4:aa:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUwNjMwMjEzMTA2WhcNMjUwNzA3MjEzMTA2WjAYMRYwFAYD VQQDEw02ODYzMDIxYS00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPXnkOjphjtXk0ZuLF/fnFlcHoPtYuyjOiJgupaV+vat7jpUPnuAshsPvqjC c5NX6456WYE7EhXp662ZlFz6jJBxbt9r7PtLmBpc2f0Gt0/5IrU8feriCwFCXT25 UKWsomFq7OfLjYYFvzwZF0Oo3jDAcbEluPY9VdWySUdDPiVHaaUnW7xDLb3TZm14 osHvibVuFa1cc7haLfebGfURse36eOiubMs7ysfn5DrvqTYSjpzAK233GK59zhcS 8aNH34+F7OMiMBC9GwftYjVkvtPawxUHMkE/KpAYHo9PHr++5+PxU6G55vB8xM5F DkWi0EsoOPB0NMZ00sWqJT5aHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjTewzG cN+54DMQFYfwMgijMTgwMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4I2jA8mSfAvySejzy9cy06slwZMBNfcN11EIZqq9kuGzAlWIWsO4 t1NUqOBX5muL1B+4n8ztJy5+WKhV+MF3MMEsr4D8ysKRMUnCBY4hknijFNWyJ5hF tsMtkhHwB8VhZvOfO3/NSYUj+JvLhCG22HJtb9s8lpszBSxBF2aSFvi1S4sZGdlK SCJDvrGf+TvEsCVMp/mPbMw+nVGXW+cIHcTPO+cxKTzKD1pKH9HxKsonaZRTKhzu 1onUsqSjkexk2C2bg8Y0r3ksgdgwbWKIx50njE6d/uR2xTErWnG1Nb/0tPniqVfb r7pyDCDNs3zE6hL1Bi5xwiMKxPeL9Kqk -----END CERTIFICATE-----Generated at Tue Jul 1 20:52:17 2025 by rpki-client