$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json) Hash identifier: y+hG5AQnJ1TYcz9ZWqFlapXNAf1DjwnurLUPnbL2WF8= Subject key identifier: 48:2F:A3:5A:A8:27:96:9C:81:22:5C:84:F3:0D:04:30:35:57:F0:DC Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft Manifest number: 3495 Signing time: Wed 02 Jul 2025 15:11:15 +0000 Manifest this update: Wed 02 Jul 2025 15:11:14 +0000 Manifest next update: Wed 09 Jul 2025 15:11:14 +0000 Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: QKmUGsnanuOmqNFUU2ygd+GuMElSpPgjcW6QRsoLiCw=) 2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Validity Not Before: Jul 2 15:11:14 2025 GMT Not After : Jul 9 15:11:14 2025 GMT Subject: CN=68654c13-fced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:da:0a:21:52:ff:1f:81:6c:a6:5e:ee:64: 1d:ab:a6:e7:c3:e3:35:a0:f3:cc:0b:ce:bb:e2:ad: 74:a2:2d:83:56:0f:a7:7c:6a:c1:82:14:b8:97:8c: 10:47:3a:cd:10:f4:16:7b:60:08:4f:77:52:01:84: fe:44:41:b5:5e:31:f3:0f:3c:11:75:a4:6f:78:d7: 8c:4a:4d:38:8f:f2:ef:47:12:f0:a0:a6:2a:02:b5: df:56:8c:af:ad:5b:a1:54:34:57:db:bb:27:94:19: 80:a0:24:c6:f5:a2:49:15:e3:b6:7c:53:4c:fd:7b: 14:a1:a8:77:2a:8f:26:59:64:97:80:bd:ad:cd:a1: bf:17:c4:dc:ca:0e:94:26:cb:ac:ce:d6:de:27:ff: 61:0e:a5:15:fc:47:09:b2:26:07:ff:52:c4:c6:73: 87:e6:6e:cf:6e:e9:c7:35:f6:0f:df:ce:55:89:84: 29:e5:97:c8:98:40:6b:bd:4d:1f:bb:65:6e:23:56: 41:79:c0:10:53:d8:85:62:d0:61:22:b4:8f:ac:88: 91:8b:c9:e5:3c:a2:c7:b4:1d:37:26:6b:26:a6:05: 97:df:0c:ec:bc:ea:e5:ae:1f:e6:a0:66:ed:21:49: 5e:38:c7:75:42:64:c1:0f:e8:8c:0d:48:36:fa:63: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:A3:5A:A8:27:96:9C:81:22:5C:84:F3:0D:04:30:35:57:F0:DC X509v3 Authority Key Identifier: keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:cb:3f:a0:0f:47:db:a8:ec:ba:fb:9e:8a:db:ca:f7:8e: 55:d2:9b:7c:25:33:6d:1f:6c:b0:ca:fa:84:2f:70:87:60:cb: 11:b1:d7:e0:24:a2:81:33:b0:32:1f:39:60:4c:06:98:52:c6: 72:0a:89:99:de:99:fe:dc:5c:d4:6a:60:fa:b7:99:21:9d:9a: e9:55:d4:9c:76:0a:a1:69:e1:8d:3e:bb:26:65:6f:3a:48:31: 07:5d:91:9d:64:ec:05:31:85:ce:56:44:50:77:3f:55:d5:0c: 07:36:9f:be:2a:a6:44:80:77:21:96:6f:31:ef:0a:23:6c:1f: d5:fd:0b:1b:0b:d4:6f:a9:26:0e:a7:6d:84:65:fb:a4:29:8b: 2f:63:c8:0a:71:1a:11:af:f7:07:0f:54:8b:70:d4:f8:39:9f: fb:6e:48:2e:b6:de:f0:f3:84:76:f7:d8:e3:5f:d9:21:98:88: 52:af:fb:e6:02:38:2d:27:76:2e:ad:af:7a:e7:ca:3a:ac:99: ea:28:9a:d1:9b:8b:09:3b:09:5f:4a:fa:95:2b:54:99:92:b9: c9:82:ab:2b:6b:e1:7e:6d:b1:62:33:57:bb:8f:17:5b:8a:e7: ed:85:3d:c9:23:7e:5f:29:c8:ab:c3:82:a9:4d:be:54:c1:a5: 42:1b:e9:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0 Mzg2Mjk3QkYwHhcNMjUwNzAyMTUxMTE0WhcNMjUwNzA5MTUxMTE0WjAYMRYwFAYD VQQDEw02ODY1NGMxMy1mY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2PaCiFS/x+BbKZe7mQdq6bnw+M1oPPMC8674q10oi2DVg+nfGrBghS4l4wQ RzrNEPQWe2AIT3dSAYT+REG1XjHzDzwRdaRveNeMSk04j/LvRxLwoKYqArXfVoyv rVuhVDRX27snlBmAoCTG9aJJFeO2fFNM/XsUoah3Ko8mWWSXgL2tzaG/F8Tcyg6U JsusztbeJ/9hDqUV/EcJsiYH/1LExnOH5m7PbunHNfYP385ViYQp5ZfImEBrvU0f u2VuI1ZBecAQU9iFYtBhIrSPrIiRi8nlPKLHtB03JmsmpgWX3wzsvOrlrh/moGbt IUleOMd1QmTBD+iMDUg2+mOhaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgvo1qo J5acgSJchPMNBDA1V/DcMB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3 ck00aWdSblAtQU5EaGlsNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/fMs/oA9H26jsuvueitvK945V0pt8JTNtH2ywyvqEL3CHYMsRsdfg JKKBM7AyHzlgTAaYUsZyComZ3pn+3FzUamD6t5khnZrpVdScdgqhaeGNPrsmZW86 SDEHXZGdZOwFMYXOVkRQdz9V1QwHNp++KqZEgHchlm8x7wojbB/V/QsbC9RvqSYO p22EZfukKYsvY8gKcRoRr/cHD1SLcNT4OZ/7bkgutt7w84R299jjX9khmIhSr/vm AjgtJ3Yura9658o6rJnqKJrRm4sJOwlfSvqVK1SZkrnJgqsra+F+bbFiM1e7jxdb iufthT3JI35fKcirw4KpTb5UwaVCG+nY -----END CERTIFICATE-----Generated at Thu Jul 3 06:59:54 2025 by rpki-client