$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: D0ciATkx9PHvqQD49ySJCe3Nm6ihWYt2TmrPrhiWNL8= Subject key identifier: 08:C9:32:11:CF:51:42:19:74:87:A0:09:56:BA:E7:53:43:7C:11:AB Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BD5 Signing time: Mon 30 Jun 2025 19:00:31 +0000 Manifest this update: Mon 30 Jun 2025 19:00:31 +0000 Manifest next update: Mon 07 Jul 2025 19:00:31 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: 330EZQy8dzo2QlAkKfaEs7lSnjX0kej2F0wIyjk7HX0=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Jun 30 19:00:31 2025 GMT Not After : Jul 7 19:00:31 2025 GMT Subject: CN=6862decf-2839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:22:d9:91:d0:75:bc:82:2f:1d:1b:34:fb: d8:a1:31:f8:71:91:00:38:a7:fa:8b:78:2d:83:30: 31:c2:db:3f:20:c0:cd:a3:52:71:eb:46:0d:cc:49: 92:6a:ad:ab:b4:08:50:f1:6f:03:cf:a8:b0:46:26: 3e:1f:a1:ca:5f:f8:1f:c7:84:18:79:e0:fd:86:3e: e7:ee:8a:cd:12:18:97:dd:d7:1e:e6:3e:90:dd:64: ba:b5:0b:a6:94:21:20:0e:00:71:8a:11:d1:09:1b: f2:a9:d9:3b:ff:9e:b3:ed:c3:32:dd:7c:6d:c0:9a: 63:af:f3:ac:68:9f:3f:8e:28:b0:f1:21:3c:d1:33: 0e:67:59:9c:ce:53:76:76:c0:a1:cb:1a:ef:c8:da: 8c:fe:15:61:13:38:d8:ef:51:93:77:ff:32:00:78: 9d:a7:d9:99:85:3f:db:fc:55:4d:1b:f4:9b:aa:da: e2:69:07:0e:58:87:56:1b:2d:30:2c:e5:1c:8f:69: 12:79:c6:14:19:7e:87:29:66:6f:93:e1:ff:18:3e: af:a7:91:83:78:27:5a:91:3e:04:ee:61:46:c8:1f: 45:2d:00:55:8b:d2:8e:9d:d5:3e:a8:f2:e5:a4:49: a6:37:59:e2:4c:2d:34:4b:23:1f:2e:6a:3b:d0:41: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C9:32:11:CF:51:42:19:74:87:A0:09:56:BA:E7:53:43:7C:11:AB X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:73:9f:c5:90:b3:03:64:c5:b8:a2:c0:6e:e3:ce:7d:8c:49: f6:84:f2:bf:77:e2:5a:85:4a:fd:3c:a7:01:16:26:cd:df:05: 66:d8:30:42:b2:63:2d:be:b4:2f:6a:de:4d:bf:b8:38:84:78: 3c:93:36:53:ed:24:5d:03:79:ee:7e:71:01:dc:28:d2:c2:ea: da:d7:1c:d6:93:bf:a5:fc:82:77:e2:9f:01:f1:e7:0d:98:af: c2:02:59:ae:ac:ca:1b:68:6b:81:45:2c:66:22:fb:a6:a0:5b: 62:16:ef:50:3a:23:1a:57:4c:3f:94:83:8f:42:f7:75:e2:6e: 57:49:a6:2c:ba:7b:b2:18:85:7b:29:a2:d8:f8:a9:b4:fd:7d: ed:81:9e:57:61:9c:ad:ef:3e:cd:53:a7:b8:80:6b:ef:24:64: 7c:70:f0:66:5f:a7:c9:e8:17:4b:e7:7e:7a:29:4c:ab:ce:bf: c3:3c:17:2c:a1:39:b7:eb:4e:6b:d2:d8:b5:30:f6:17:55:e1: 65:31:23:bc:94:79:2a:a5:e9:00:4e:ab:8c:9d:ef:4a:20:0d: 3e:38:b0:68:c4:d5:5f:a5:a5:2c:d5:80:08:5b:b0:9f:d5:4d: b5:eb:f4:da:5e:02:33:a5:01:e6:4f:2a:5b:b4:06:f6:ac:b2: 72:c9:02:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwNjMwMTkwMDMxWhcNMjUwNzA3MTkwMDMxWjAYMRYwFAYD VQQDEw02ODYyZGVjZi0yODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4x0i2ZHQdbyCLx0bNPvYoTH4cZEAOKf6i3gtgzAxwts/IMDNo1Jx60YNzEmS aq2rtAhQ8W8Dz6iwRiY+H6HKX/gfx4QYeeD9hj7n7orNEhiX3dce5j6Q3WS6tQum lCEgDgBxihHRCRvyqdk7/56z7cMy3XxtwJpjr/OsaJ8/jiiw8SE80TMOZ1mczlN2 dsChyxrvyNqM/hVhEzjY71GTd/8yAHidp9mZhT/b/FVNG/SbqtriaQcOWIdWGy0w LOUcj2kSecYUGX6HKWZvk+H/GD6vp5GDeCdakT4E7mFGyB9FLQBVi9KOndU+qPLl pEmmN1niTC00SyMfLmo70EH9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjJMhHP UUIZdIegCVa651NDfBGrMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAac5/FkLMDZMW4osBu4859jEn2hPK/d+JahUr9PKcBFibN3wVm2DBC smMtvrQvat5Nv7g4hHg8kzZT7SRdA3nufnEB3CjSwura1xzWk7+l/IJ34p8B8ecN mK/CAlmurMobaGuBRSxmIvumoFtiFu9QOiMaV0w/lIOPQvd14m5XSaYsunuyGIV7 KaLY+Km0/X3tgZ5XYZyt7z7NU6e4gGvvJGR8cPBmX6fJ6BdL5356KUyrzr/DPBcs oTm3605r0ti1MPYXVeFlMSO8lHkqpekATquMne9KIA0+OLBoxNVfpaUs1YAIW7Cf 1U216/TaXgIzpQHmTypbtAb2rLJyyQLH -----END CERTIFICATE-----Generated at Tue Jul 1 12:31:02 2025 by rpki-client