$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: HYa1ncUow/xsYsXfOH4uzLO+mC5VCS68jq65VLcrcwk= Subject key identifier: E9:F1:F2:A1:C0:2D:7C:29:37:54:9C:B6:D1:55:F2:B9:86:1B:63:6E Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 3492 Signing time: Mon 30 Jun 2025 15:11:09 +0000 Manifest this update: Mon 30 Jun 2025 15:11:08 +0000 Manifest next update: Mon 07 Jul 2025 15:11:08 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: sDOwEhrWnPRTSo62XwLORnhPOPSNbQSYFiUZPERkRSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Jun 30 15:11:08 2025 GMT Not After : Jul 7 15:11:08 2025 GMT Subject: CN=6862a90d-5884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:f2:19:99:ce:16:c2:de:ec:03:43:7c:4b: 66:53:5e:35:d0:d1:70:6c:01:dd:6a:62:5a:f3:95: a8:e6:ff:63:b7:1b:dd:f1:68:63:cf:12:d2:5b:14: 44:f5:a6:db:4d:be:d6:a5:5f:1e:09:dc:23:a1:71: 24:f0:74:f3:13:fc:e5:ed:4a:fb:d1:d8:21:e4:4f: d8:19:d0:26:52:a4:9a:7e:14:b8:c6:d4:1e:fb:41: 0c:b3:43:8e:92:d4:cc:d3:5a:ef:b8:1f:78:e1:22: 62:e0:fd:ac:fc:2a:38:e5:72:8d:b0:7f:44:5d:ad: e1:ee:ee:73:3b:d2:cf:29:b5:8c:87:0a:e4:c7:9f: 34:44:77:5c:cf:52:15:a1:2e:9a:23:2e:a8:ea:e4: 01:0a:72:c9:27:fd:c6:e5:9f:bb:62:30:77:a1:a7: a9:69:cc:b6:37:3c:d4:84:6f:75:b9:72:5b:a7:d7: 60:d4:c7:bd:19:2c:ee:75:96:1b:a7:65:e4:2a:3d: 19:34:ae:f5:b5:90:f7:b7:a1:c5:f1:f9:a8:76:c7: 26:25:9c:55:e4:21:a4:7a:d9:f7:94:f7:20:c1:62: 80:13:7c:33:39:62:8f:a1:2b:e7:b7:ce:d9:9b:95: b6:b9:ba:c4:3a:db:ff:a2:9e:cc:1a:c3:99:73:b4: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F1:F2:A1:C0:2D:7C:29:37:54:9C:B6:D1:55:F2:B9:86:1B:63:6E X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:32:ea:6e:e7:33:3d:a4:87:48:92:62:22:c3:25:f2:8c:39: 66:49:34:85:3e:d9:49:09:ee:42:70:3b:3d:ac:5d:d5:c3:1c: eb:37:51:42:f6:2e:c7:1b:5e:f6:db:0c:9e:5b:c8:6a:97:80: c8:b9:db:ac:ce:02:a1:df:59:1b:72:bd:9e:86:53:21:34:c9: f8:8d:5a:08:36:65:16:1a:84:32:6f:53:0a:0c:00:39:db:27: c7:e3:3e:73:3e:62:0f:b3:b3:d5:ae:30:24:0a:0a:87:13:64: b2:84:c9:e4:e1:be:81:4f:ef:5c:3e:87:1f:4d:3e:70:1d:b9: 09:1f:d4:3c:72:74:bd:13:fe:40:aa:48:7d:62:fb:d4:c3:c7: 3d:c4:59:72:d6:de:47:82:62:ff:63:5d:50:bc:62:aa:3c:52: 31:c6:95:85:64:8e:a2:73:b8:09:85:63:50:f0:15:eb:d7:85: 2a:2d:f6:cb:65:d2:70:0b:28:f0:36:47:6a:4f:6f:65:bf:84: 5f:a3:2e:6e:9b:1b:85:9e:c6:bd:de:c8:d3:6a:2a:f0:ae:e7: 11:c6:f7:da:1e:d5:77:02:c2:da:4d:70:d4:34:50:34:ad:5c: 9f:9b:d9:23:e5:6c:66:a9:e4:86:90:9d:bc:24:7b:05:28:fa: 86:60:f5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUwNjMwMTUxMTA4WhcNMjUwNzA3MTUxMTA4WjAYMRYwFAYD VQQDEw02ODYyYTkwZC01ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFDyGZnOFsLe7ANDfEtmU1410NFwbAHdamJa85Wo5v9jtxvd8WhjzxLSWxRE 9abbTb7WpV8eCdwjoXEk8HTzE/zl7Ur70dgh5E/YGdAmUqSafhS4xtQe+0EMs0OO ktTM01rvuB944SJi4P2s/Co45XKNsH9EXa3h7u5zO9LPKbWMhwrkx580RHdcz1IV oS6aIy6o6uQBCnLJJ/3G5Z+7YjB3oaepacy2NzzUhG91uXJbp9dg1Me9GSzudZYb p2XkKj0ZNK71tZD3t6HF8fmodscmJZxV5CGketn3lPcgwWKAE3wzOWKPoSvnt87Z m5W2ubrEOtv/op7MGsOZc7TCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnx8qHA LXwpN1ScttFV8rmGG2NuMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQMupu5zM9pIdIkmIiwyXyjDlmSTSFPtlJCe5CcDs9rF3VwxzrN1FC 9i7HG1722wyeW8hql4DIuduszgKh31kbcr2ehlMhNMn4jVoINmUWGoQyb1MKDAA5 2yfH4z5zPmIPs7PVrjAkCgqHE2SyhMnk4b6BT+9cPocfTT5wHbkJH9Q8cnS9E/5A qkh9YvvUw8c9xFly1t5HgmL/Y11QvGKqPFIxxpWFZI6ic7gJhWNQ8BXr14UqLfbL ZdJwCyjwNkdqT29lv4Rfoy5umxuFnsa93sjTairwrucRxvfaHtV3AsLaTXDUNFA0 rVyfm9kj5WxmqeSGkJ28JHsFKPqGYPWT -----END CERTIFICATE-----Generated at Wed Jul 2 11:33:16 2025 by rpki-client