$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: /bevuqbUX/RI2/y3nHoQuNb+OjlZPJ2KcfpuNsqsd80= Subject key identifier: 0B:8F:5B:BA:E8:48:C4:70:86:4B:E2:A5:50:51:CB:B0:8C:48:0A:87 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: F6 Signing time: Tue 01 Jul 2025 05:43:25 +0000 Manifest this update: Tue 01 Jul 2025 05:43:25 +0000 Manifest next update: Tue 08 Jul 2025 05:43:25 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: G9XdRopO2A4m3kIBTmemVJ1EzIytjdfnGLCA0SPNnAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Jul 1 05:43:25 2025 GMT Not After : Jul 8 05:43:25 2025 GMT Subject: CN=6863757d-4e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:ad:f6:d3:41:5b:14:47:d3:83:1a:4b:82: d2:3a:e7:f1:26:0c:d7:30:25:27:9d:fa:59:57:aa: 99:6b:a3:13:d5:24:d7:1b:ff:cf:eb:6d:dd:61:53: 5e:1e:8d:f3:a2:aa:c6:0e:4d:65:71:15:13:5f:06: 83:13:e0:76:37:88:59:ce:d3:aa:91:53:c0:1c:bf: f1:45:c8:39:d4:da:1f:59:37:7c:17:80:0d:b2:ef: ec:83:4b:09:c2:42:bd:a1:e5:0b:f5:15:63:d7:69: 7e:44:dd:1e:f1:8e:62:6d:e2:98:a6:66:5e:83:a1: 31:20:56:eb:57:2a:be:dd:96:26:6e:84:fd:31:9f: d9:72:52:a8:a9:4f:90:75:88:98:11:3c:fd:c9:47: 43:f9:0c:8a:5f:75:56:8d:2d:6d:ff:fd:aa:79:05: 5e:bf:90:ba:f3:7f:9f:f5:34:9b:f1:15:ac:18:3b: 70:d2:86:13:12:ca:b8:55:32:66:74:7c:f2:e9:a3: 52:95:7f:40:1b:d6:a2:aa:0a:9f:72:87:11:3a:9f: ba:d9:f7:5d:5d:9c:29:79:22:5a:01:13:3b:8f:7f: 43:c3:88:83:9b:31:e6:9e:bd:75:c7:ac:44:c4:80: 47:1b:c7:8d:f2:bb:9f:be:dc:f7:d2:35:2b:d6:77: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:5B:BA:E8:48:C4:70:86:4B:E2:A5:50:51:CB:B0:8C:48:0A:87 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b1:c6:a1:48:38:e3:03:a5:37:93:5c:71:b0:8f:03:dd:c7: f8:84:c3:b5:42:b2:e5:6a:fe:df:78:59:cb:a2:fa:7d:9a:54: a8:12:3e:83:03:cb:c3:74:b9:e1:aa:ff:9c:f4:ae:16:57:99: e7:a7:bd:3a:d9:3b:36:29:f3:ed:f6:8c:7c:25:15:a3:a1:1e: db:8a:18:d9:e4:a9:d4:03:02:64:78:25:8a:a7:8d:b8:35:c6: d6:77:1c:cc:e8:bf:40:e6:28:07:98:32:f0:4f:dd:c4:c2:ef: ac:80:1d:c7:66:c1:31:1b:bf:d1:3d:d3:3a:8d:cc:23:f0:54: ae:8a:9e:3c:eb:ef:17:e7:3e:3d:3f:d0:03:5a:f4:84:f1:23: 1c:d3:27:da:2b:d7:26:8d:fe:b8:1a:ec:64:86:f6:a8:1a:7b: d7:91:f5:cb:b9:11:66:69:22:2a:5d:05:83:71:e0:13:5a:95: 97:e2:f1:6d:1f:04:c6:d6:a9:46:84:12:68:37:dc:69:18:1c: 69:11:33:bc:60:95:77:e0:1b:ab:d5:0f:f3:59:14:54:95:61: 12:17:f3:41:31:2b:d2:40:1c:9e:8b:84:64:58:c7:16:dc:d3: c2:03:61:35:32:f2:a4:2b:0d:f6:28:89:c7:f9:c7:cf:3b:0f: d6:09:c5:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUwNzAxMDU0MzI1WhcNMjUwNzA4MDU0MzI1WjAYMRYwFAYD VQQDEw02ODYzNzU3ZC00ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eOt9tNBWxRH04MaS4LSOufxJgzXMCUnnfpZV6qZa6MT1STXG//P623dYVNe Ho3zoqrGDk1lcRUTXwaDE+B2N4hZztOqkVPAHL/xRcg51NofWTd8F4ANsu/sg0sJ wkK9oeUL9RVj12l+RN0e8Y5ibeKYpmZeg6ExIFbrVyq+3ZYmboT9MZ/ZclKoqU+Q dYiYETz9yUdD+QyKX3VWjS1t//2qeQVev5C683+f9TSb8RWsGDtw0oYTEsq4VTJm dHzy6aNSlX9AG9aiqgqfcocROp+62fddXZwpeSJaARM7j39Dw4iDmzHmnr11x6xE xIBHG8eN8rufvtz30jUr1ndeKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuPW7ro SMRwhkvipVBRy7CMSAqHMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQscahSDjjA6U3k1xxsI8D3cf4hMO1QrLlav7feFnLovp9mlSoEj6D A8vDdLnhqv+c9K4WV5nnp7062Ts2KfPt9ox8JRWjoR7bihjZ5KnUAwJkeCWKp424 NcbWdxzM6L9A5igHmDLwT93Ewu+sgB3HZsExG7/RPdM6jcwj8FSuip486+8X5z49 P9ADWvSE8SMc0yfaK9cmjf64GuxkhvaoGnvXkfXLuRFmaSIqXQWDceATWpWX4vFt HwTG1qlGhBJoN9xpGBxpETO8YJV34Bur1Q/zWRRUlWESF/NBMSvSQByei4RkWMcW 3NPCA2E1MvKkKw32KInH+cfPOw/WCcUj -----END CERTIFICATE-----Generated at Thu Jul 3 03:47:29 2025 by rpki-client