$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: 4AIb/g7wBo7nCqsiBF/Nqle6BaH7fqKAMoXqOiy44I8= Subject key identifier: F8:3E:4A:CE:10:5B:E4:C9:F3:34:C3:31:67:A6:48:28:A6:C0:CB:EF Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 079C Signing time: Wed 02 Jul 2025 21:37:01 +0000 Manifest this update: Wed 02 Jul 2025 21:37:00 +0000 Manifest next update: Wed 09 Jul 2025 21:37:00 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: BcoVOWJqSaiQiXb8kY3znBw92G1SelYKaT15mFvyJ4Q=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Jul 2 21:37:00 2025 GMT Not After : Jul 9 21:37:00 2025 GMT Subject: CN=6865a67d-bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fb:b4:2c:41:87:e8:10:6e:76:8d:ce:3f:df: 2c:95:35:51:38:e7:19:ad:50:c2:2f:ac:94:ad:53: 77:84:fe:ce:ea:f3:29:1b:f1:40:da:6f:ba:c0:ea: 47:93:06:0a:eb:a5:66:06:8e:35:e2:ed:2a:14:da: 66:7a:74:16:14:39:3d:5c:81:e4:83:7d:c7:ce:cb: 8f:ef:3a:c6:7d:3f:12:87:6f:e4:99:ce:db:6c:3a: 3e:22:f0:70:1c:2f:ad:7d:97:2c:3b:7b:99:9c:20: 04:c4:a9:70:e2:db:13:08:f3:ff:03:43:48:3b:b6: ea:0d:e2:5d:dd:3d:7d:22:e4:46:33:e4:e9:d5:3c: 1e:3f:a2:c5:16:6d:58:4a:01:2a:33:f7:28:7a:f8: c4:13:74:21:03:bb:b9:7b:70:82:5c:6f:d4:1f:d7: 4b:14:d2:b0:42:13:b7:e6:fd:9b:cc:c4:f7:2c:9b: 3c:b5:c1:ee:2a:6a:38:5a:11:b9:4e:93:6b:8d:0e: 09:0c:33:b8:59:5a:90:6d:7e:a1:e3:43:9e:0f:a9: 31:55:1c:72:a1:74:5c:d1:2a:61:a6:04:c8:f2:37: 36:b8:09:37:cd:9a:fe:50:2c:24:ba:ff:03:cf:80: a8:c9:3e:88:85:f6:46:49:cc:21:4b:40:48:bc:3a: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:4A:CE:10:5B:E4:C9:F3:34:C3:31:67:A6:48:28:A6:C0:CB:EF X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:aa:db:28:09:c8:61:36:a1:c9:32:72:45:43:6c:ef:12:41: 9a:8a:d4:3b:76:5f:54:f3:96:97:d7:f8:6a:2e:53:5c:21:68: 14:87:be:9a:9f:f3:ed:1b:3c:d8:b0:96:0e:ea:39:61:27:21: 86:cd:83:3b:0a:2a:c6:70:70:42:89:93:0c:08:b0:1c:0a:e8: cf:f3:f5:f5:77:b8:80:76:84:7b:66:e6:6c:77:04:16:c1:4f: b7:f4:3b:0c:da:ab:22:d3:b9:07:a4:40:db:be:5b:b9:24:ad: 06:31:ca:3d:fe:db:75:e2:1a:66:69:2c:7d:86:09:73:ce:20: f7:9a:6d:d8:7f:c3:27:59:4c:11:7b:22:00:41:a6:4e:6d:cc: 59:2d:7e:65:c6:75:da:ba:ef:c9:b5:07:04:9e:7f:b7:96:bd: 88:7e:fb:d7:a4:fd:33:2c:8a:53:52:4f:3e:24:b8:55:65:1e: ae:b6:32:18:77:49:79:78:78:36:05:8e:fa:01:76:75:9f:42: ea:d3:8b:b0:89:fd:ce:c8:37:04:e1:70:35:f0:6f:84:8e:06: 49:c6:b6:7e:b5:e7:e3:ab:99:32:8b:82:2b:b1:7d:ea:60:4c: 76:40:46:75:58:88:73:fe:e8:71:ee:1e:74:0c:7e:e9:9f:15: af:79:4c:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUwNzAyMjEzNzAwWhcNMjUwNzA5MjEzNzAwWjAYMRYwFAYD VQQDEw02ODY1YTY3ZC1iY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/u0LEGH6BBudo3OP98slTVROOcZrVDCL6yUrVN3hP7O6vMpG/FA2m+6wOpH kwYK66VmBo414u0qFNpmenQWFDk9XIHkg33HzsuP7zrGfT8Sh2/kmc7bbDo+IvBw HC+tfZcsO3uZnCAExKlw4tsTCPP/A0NIO7bqDeJd3T19IuRGM+Tp1TweP6LFFm1Y SgEqM/coevjEE3QhA7u5e3CCXG/UH9dLFNKwQhO35v2bzMT3LJs8tcHuKmo4WhG5 TpNrjQ4JDDO4WVqQbX6h40OeD6kxVRxyoXRc0SphpgTI8jc2uAk3zZr+UCwkuv8D z4CoyT6IhfZGScwhS0BIvDp4awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg+Ss4Q W+TJ8zTDMWemSCimwMvvMB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqqtsoCchhNqHJMnJFQ2zvEkGaitQ7dl9U85aX1/hqLlNcIWgUh76a n/PtGzzYsJYO6jlhJyGGzYM7CirGcHBCiZMMCLAcCujP8/X1d7iAdoR7ZuZsdwQW wU+39DsM2qsi07kHpEDbvlu5JK0GMco9/tt14hpmaSx9hglzziD3mm3Yf8MnWUwR eyIAQaZObcxZLX5lxnXauu/JtQcEnn+3lr2IfvvXpP0zLIpTUk8+JLhVZR6utjIY d0l5eHg2BY76AXZ1n0Lq04uwif3OyDcE4XA18G+EjgZJxrZ+tefjq5kyi4IrsX3q YEx2QEZ1WIhz/uhx7h50DH7pnxWveUws -----END CERTIFICATE-----Generated at Thu Jul 3 14:15:09 2025 by rpki-client