$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: UbZsKGCSpp5RX8R7IW7/2Xckx/jv5oUABHPidWzGJcI= Subject key identifier: 33:D9:20:5F:B1:F8:39:84:B6:80:E2:2C:C0:39:AA:2E:D5:81:09:18 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 01CE Signing time: Thu 03 Jul 2025 02:56:08 +0000 Manifest this update: Thu 03 Jul 2025 02:56:08 +0000 Manifest next update: Thu 10 Jul 2025 02:56:08 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: Zlkld5xIjAnEQgGnOLw6wW/mTcr8cmmGuXj23Ufi9aY=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Jul 3 02:56:08 2025 GMT Not After : Jul 10 02:56:08 2025 GMT Subject: CN=6865f148-65fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:4b:08:2d:f2:f5:5d:aa:2a:0a:ab:e0:cc: e8:9b:3a:04:f6:dc:c1:5c:18:c8:9d:c0:84:a1:ca: d9:68:d6:a6:25:c3:2d:96:e9:54:2e:19:73:eb:61: 7e:73:7f:28:50:b5:d4:0c:ae:7a:b2:db:d7:4a:98: 2c:79:1b:9f:cf:2e:15:1e:1c:32:56:d4:99:41:ca: bb:e3:7a:ac:b4:27:8a:16:ec:12:85:4d:a6:15:5b: 42:e2:d3:ba:8f:ec:69:64:a1:09:e1:77:67:04:57: 1a:ea:55:db:93:fd:f0:7e:d3:41:ae:c6:ba:d7:71: b0:44:cb:4b:37:b1:56:1d:22:9a:78:25:ee:9e:db: ac:8a:dd:06:ee:32:ba:4b:a6:84:37:45:d0:ca:82: fb:6c:c1:fb:76:db:7f:71:a5:da:02:ae:eb:dc:d1: 47:d8:e3:99:74:e5:ef:de:68:c0:f1:1a:1f:fd:4d: f3:b2:dd:3f:c6:ba:1d:2c:ea:10:2b:de:0f:22:d0: e5:dd:99:c4:2a:ed:22:a8:11:2a:4c:d0:08:be:97: 2b:6f:6d:19:47:d9:0b:e1:93:70:3b:be:b5:b5:51: 0c:e2:fc:eb:42:6e:65:4a:6d:b0:95:d2:2d:f3:1c: dc:c1:dc:fa:8e:bf:0b:89:43:3c:ba:fd:13:2d:6d: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:20:5F:B1:F8:39:84:B6:80:E2:2C:C0:39:AA:2E:D5:81:09:18 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:63:03:b3:f2:75:d7:d4:16:7d:a6:ee:4c:94:da:82:cb:85: 1a:d6:f9:c3:6c:72:8b:e6:be:33:b2:a7:5d:10:93:3f:ac:21: f7:94:25:08:b7:70:cd:cc:0b:a2:fa:38:ff:3c:5f:1a:99:15: a1:2e:02:2e:98:3b:aa:98:43:6e:5e:e2:fe:57:f9:d6:88:b6: 6d:b8:8d:ec:97:bd:a3:bd:57:18:c6:50:f5:64:39:1b:83:8a: 07:2e:f4:fa:9e:09:a7:2a:80:5d:07:2e:e5:fa:53:8a:6e:07: 4a:43:71:b9:17:68:19:ad:58:19:74:a5:87:2c:c2:6c:2c:5f: 2a:b4:64:00:0f:df:0f:85:c2:1f:09:fd:85:cb:8c:cd:0c:b0: ac:e3:31:a2:ac:23:93:f4:8c:46:79:89:02:1d:b6:a3:34:5d: 70:d2:00:a8:4b:70:1f:4d:8f:ed:f5:46:09:f9:21:3e:19:4e: 16:27:36:66:fc:1e:de:49:4a:cf:85:4c:ee:68:06:02:11:e1: c9:ae:b3:5c:63:88:8a:42:ba:3b:0f:e9:ee:f0:91:29:2b:78: a6:b1:4a:52:64:15:3b:f4:64:db:42:e0:08:34:95:16:70:16: 6a:41:fe:70:4b:bb:4f:23:4f:70:0a:f3:1e:80:4e:58:a8:19: bf:b0:53:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUwNzAzMDI1NjA4WhcNMjUwNzEwMDI1NjA4WjAYMRYwFAYD VQQDEw02ODY1ZjE0OC02NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq1LCC3y9V2qKgqr4MzomzoE9tzBXBjIncCEocrZaNamJcMtlulULhlz62F+ c38oULXUDK56stvXSpgseRufzy4VHhwyVtSZQcq743qstCeKFuwShU2mFVtC4tO6 j+xpZKEJ4XdnBFca6lXbk/3wftNBrsa613GwRMtLN7FWHSKaeCXuntusit0G7jK6 S6aEN0XQyoL7bMH7dtt/caXaAq7r3NFH2OOZdOXv3mjA8Rof/U3zst0/xrodLOoQ K94PItDl3ZnEKu0iqBEqTNAIvpcrb20ZR9kL4ZNwO761tVEM4vzrQm5lSm2wldIt 8xzcwdz6jr8LiUM8uv0TLW0o9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPZIF+x +DmEtoDiLMA5qi7VgQkYMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2YwOz8nXX1BZ9pu5MlNqCy4Ua1vnDbHKL5r4zsqddEJM/rCH3lCUI t3DNzAui+jj/PF8amRWhLgIumDuqmENuXuL+V/nWiLZtuI3sl72jvVcYxlD1ZDkb g4oHLvT6ngmnKoBdBy7l+lOKbgdKQ3G5F2gZrVgZdKWHLMJsLF8qtGQAD98PhcIf Cf2Fy4zNDLCs4zGirCOT9IxGeYkCHbajNF1w0gCoS3AfTY/t9UYJ+SE+GU4WJzZm /B7eSUrPhUzuaAYCEeHJrrNcY4iKQro7D+nu8JEpK3imsUpSZBU79GTbQuAINJUW cBZqQf5wS7tPI09wCvMegE5YqBm/sFNn -----END CERTIFICATE-----Generated at Thu Jul 3 07:37:15 2025 by rpki-client