$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json) Hash identifier: NJFv2H0StJK5YRSOWg48YMUGCc6FaH0cDmIazpZs3qM= Subject key identifier: 55:64:DE:65:98:6B:49:0D:F4:77:34:E3:3F:9C:70:A5:9C:78:4C:8B Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft Manifest number: 43 Signing time: Thu 03 Jul 2025 07:41:28 +0000 Manifest this update: Thu 03 Jul 2025 07:41:27 +0000 Manifest next update: Thu 10 Jul 2025 07:41:27 +0000 Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: np+OMtpj9o/CadnByd7NZQSzPbiJUECEfjCe4UrPiyo=) 2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: Jul 3 07:41:27 2025 GMT Not After : Jul 10 07:41:27 2025 GMT Subject: CN=68663428-40e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:76:96:8b:1b:25:ba:0c:2f:9c:43:2a:1a: 53:6c:9a:17:85:ce:dd:04:62:d2:84:39:7d:0b:ec: 24:d5:a2:22:2f:03:32:b3:f2:9b:ca:29:35:30:7f: b1:b1:b7:d5:d0:ac:4b:52:52:12:a4:e6:3f:ef:ea: 01:cc:5a:6f:72:de:19:a0:a2:4d:8f:df:3f:8b:93: 1a:72:b0:9c:4f:c4:e8:e6:f7:5e:99:7e:4e:00:e6: 29:52:f5:8c:b4:0f:e2:88:13:1b:22:0d:59:97:f4: 45:31:d7:8b:41:ff:c6:b2:f8:86:85:e5:e0:58:26: 6c:77:f4:cd:fb:6b:27:06:31:68:3e:78:fc:57:d3: e3:9a:17:a7:3c:b1:0f:c7:aa:7a:c7:ce:92:64:ea: ef:d3:16:13:f1:f4:ce:72:90:e0:14:6f:fd:c0:e7: b1:cb:79:63:e0:9a:f7:c5:89:6d:7b:7a:37:10:de: 98:bc:55:74:f0:44:e3:e9:93:6d:b7:03:04:62:bf: 33:cf:2c:33:f6:4c:d1:c8:b5:cd:4c:60:48:d4:27: 0c:0e:33:3e:25:e6:0e:47:be:32:b7:ec:2e:02:9b: 7d:95:4c:4f:7f:9c:ca:56:f3:7d:98:56:30:2a:85: eb:dc:69:47:83:78:f5:7d:61:da:64:0c:8e:13:fb: 9d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:64:DE:65:98:6B:49:0D:F4:77:34:E3:3F:9C:70:A5:9C:78:4C:8B X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:6b:1f:38:04:ac:20:06:48:fa:57:9a:ae:9e:61:c5:2b: 37:3f:f7:95:43:a3:e4:a7:f0:20:5f:6f:29:a3:28:09:18:56: 1b:2d:33:10:39:e1:bf:d2:81:de:cc:e9:12:bc:e5:85:a1:a6: e0:76:82:a6:02:e1:f0:8b:c0:67:53:e4:78:fa:2d:ba:64:5b: 0d:ba:63:4b:9a:a1:ab:04:a7:e9:c2:ba:55:fe:ff:e9:c5:98: 68:ce:05:86:26:37:3a:90:20:14:6b:31:6a:33:b7:b7:3d:54: 4a:5e:4e:78:21:bd:03:a1:a6:0f:d0:cb:37:1e:a8:20:40:dd: d6:59:bc:13:19:51:ef:2e:a9:30:7c:df:1a:c3:09:65:92:66: 5e:28:ea:30:bc:05:ab:b0:19:b1:b1:50:d8:7e:81:89:f8:10: 4c:07:10:1f:3c:be:32:84:31:14:0e:78:6f:5e:88:86:38:91: d7:a6:ec:26:4b:0f:30:09:47:10:0d:71:83:6c:68:f0:8c:d8: 64:3e:6e:16:87:bb:90:a9:96:dd:31:d0:f0:37:fa:4c:81:25: be:e6:20:9b:9d:4a:49:d5:de:5e:04:4b:de:49:71:94:f0:63: fb:9d:bb:20:e4:57:10:e7:06:79:62:57:34:ad:07:ec:7f:ae: e9:d5:82:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjAxRTExMC8GA1UEBRMoN0RCRjgzQUU1MjgyQzg0RUIwRUZGNTVENUMxQzY3ODAx Q0I2NDVDNDAeFw0yNTA3MDMwNzQxMjdaFw0yNTA3MTAwNzQxMjdaMBgxFjAUBgNV BAMTDTY4NjYzNDI4LTQwZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyXHaWixslugwvnEMqGlNsmheFzt0EYtKEOX0L7CTVoiIvAzKz8pvKKTUwf7Gx t9XQrEtSUhKk5j/v6gHMWm9y3hmgok2P3z+LkxpysJxPxOjm916Zfk4A5ilS9Yy0 D+KIExsiDVmX9EUx14tB/8ay+IaF5eBYJmx39M37aycGMWg+ePxX0+OaF6c8sQ/H qnrHzpJk6u/TFhPx9M5ykOAUb/3A57HLeWPgmvfFiW17ejcQ3pi8VXTwROPpk223 AwRivzPPLDP2TNHItc1MYEjUJwwOMz4l5g5HvjK37C4Cm32VTE9/nMpW832YVjAq hevcaUeDePV9YdpkDI4T+51BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVWTeZZhr SQ30dzTjP5xwpZx4TIswHwYDVR0jBBgwFoAUfb+DrlKCyE6w7/VdXBxngBy2RcQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2MDFFL0ZGNDg3NUJFRjU2 MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmItRHJsS0N5RTZ3N19WZFhCeG5nQnkyUmNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 MDFFL0ZGNDg3NUJFRjU2MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2 dzdfVmRYQnhuZ0J5MlJjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMiax84BKwgBkj6V5qunmHFKzc/95VDo+Sn8CBfbymjKAkYVhstMxA5 4b/Sgd7M6RK85YWhpuB2gqYC4fCLwGdT5Hj6LbpkWw26Y0uaoasEp+nCulX+/+nF mGjOBYYmNzqQIBRrMWozt7c9VEpeTnghvQOhpg/QyzceqCBA3dZZvBMZUe8uqTB8 3xrDCWWSZl4o6jC8BauwGbGxUNh+gYn4EEwHEB88vjKEMRQOeG9eiIY4kdem7CZL DzAJRxANcYNsaPCM2GQ+bhaHu5Cplt0x0PA3+kyBJb7mIJudSknV3l4ES95JcZTw Y/uduyDkVxDnBnliVzStB+x/runVgjg= -----END CERTIFICATE-----Generated at Thu Jul 3 20:44:48 2025 by rpki-client