$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: n6pFGH/DT0UqN10t3Kows2mPwIHc7eLEx2DDoyIfPzo= Subject key identifier: B6:CB:7D:6A:E2:A0:8E:03:60:0B:91:F5:A5:0B:62:69:7F:A7:F9:3E Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F43 Signing time: Wed 02 Jul 2025 17:48:36 +0000 Manifest this update: Wed 02 Jul 2025 17:48:35 +0000 Manifest next update: Wed 09 Jul 2025 17:48:35 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: lJ5oyxkyOaXUIjLhqlfYYZPiMUP4ghgRWLyRD4J0JRU=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3914 (0xf4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Jul 2 17:48:35 2025 GMT Not After : Jul 9 17:48:35 2025 GMT Subject: CN=686570f4-616e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:5b:00:76:e9:a0:90:97:06:a6:e9:a4:e3: 1b:f9:fb:f7:cb:bf:27:2e:1a:be:85:16:12:85:06: 12:bf:ab:68:69:2f:6a:90:a3:12:ab:a9:71:84:cf: e0:1e:0d:6f:20:46:3a:d8:5a:61:19:f5:6d:ea:d2: f9:28:b8:bb:64:0e:36:5b:5d:49:36:53:95:f9:ea: b7:c1:a0:40:1d:c5:2a:85:d1:49:fa:ee:c3:4d:d6: 34:60:1f:9f:9d:a5:5a:c4:20:a5:4f:a1:95:f6:07: 29:5a:9f:96:d4:10:56:96:8d:58:97:92:33:c0:25: a8:e2:98:c3:66:5d:9c:f8:65:9e:a9:56:1d:ef:ea: 81:33:24:f3:54:0f:fa:53:c8:1f:8a:ad:a0:ea:b6: 18:7c:a9:12:3f:d2:a1:aa:b0:ff:ed:42:74:0a:e5: f3:14:33:33:e9:c3:55:a2:b7:c4:24:86:ca:68:1d: e6:db:5a:e9:84:85:bb:3d:22:31:04:38:0f:ee:f6: 98:d4:fa:83:a4:ac:c2:cc:a8:ff:b4:3d:97:e0:9d: aa:0c:b7:24:04:d3:42:0c:ed:9f:c6:82:8a:31:df: b7:ec:92:de:1e:4c:c8:f1:7f:e7:41:99:9c:1a:d7: 28:f3:04:fb:d4:61:59:f7:31:b3:87:b5:f6:aa:49: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CB:7D:6A:E2:A0:8E:03:60:0B:91:F5:A5:0B:62:69:7F:A7:F9:3E X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5f:f0:1e:9a:f4:85:09:5a:66:da:a6:05:2d:99:6c:26:f9: 15:40:a8:4d:2d:ba:f4:5c:74:f6:69:b9:0a:af:4e:93:55:4a: 9c:48:2b:5f:b2:09:87:20:6c:3d:24:5e:cb:ce:03:79:b4:0b: bb:01:28:2b:25:6f:79:dc:7b:01:97:85:b8:c4:b6:26:17:c4: f9:92:53:15:02:a3:89:20:2d:f5:36:64:43:a9:f3:9f:e4:9e: b7:83:c9:84:f4:17:50:6b:8a:0c:28:43:7c:78:54:24:83:e4: 1a:1a:25:a6:8a:79:b8:15:4e:e4:7b:b2:67:27:67:36:f7:2b: d2:6b:d2:88:3e:ed:80:83:cc:aa:95:b4:9e:66:0c:09:d9:f2: ba:57:0a:9e:1f:db:2d:43:8f:a8:c4:38:0b:30:0f:86:d3:f4: eb:c3:96:3a:b3:cd:56:44:bf:c9:1d:fa:86:4a:92:b7:02:a0: 82:7a:2a:fd:69:8d:b5:9d:6c:79:7a:22:ad:d0:2e:22:51:f3: aa:d2:c1:66:8a:8a:4a:5b:90:02:72:c8:d3:43:a3:ce:6b:b8: 4b:c3:d9:e3:a6:8a:b9:8c:cb:24:09:c0:da:c4:40:0a:a6:5a: f3:50:d0:0b:46:e6:ac:21:4c:e8:52:e9:39:f2:a9:2b:75:cf: c5:95:45:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNzAyMTc0ODM1WhcNMjUwNzA5MTc0ODM1WjAYMRYwFAYD VQQDEw02ODY1NzBmNC02MTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mlbAHbpoJCXBqbppOMb+fv3y78nLhq+hRYShQYSv6toaS9qkKMSq6lxhM/g Hg1vIEY62FphGfVt6tL5KLi7ZA42W11JNlOV+eq3waBAHcUqhdFJ+u7DTdY0YB+f naVaxCClT6GV9gcpWp+W1BBWlo1Yl5IzwCWo4pjDZl2c+GWeqVYd7+qBMyTzVA/6 U8gfiq2g6rYYfKkSP9KhqrD/7UJ0CuXzFDMz6cNVorfEJIbKaB3m21rphIW7PSIx BDgP7vaY1PqDpKzCzKj/tD2X4J2qDLckBNNCDO2fxoKKMd+37JLeHkzI8X/nQZmc Gtco8wT71GFZ9zGzh7X2qkkTuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbLfWri oI4DYAuR9aULYml/p/k+MB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEX/AemvSFCVpm2qYFLZlsJvkVQKhNLbr0XHT2abkKr06TVUqcSCtf sgmHIGw9JF7LzgN5tAu7ASgrJW953HsBl4W4xLYmF8T5klMVAqOJIC31NmRDqfOf 5J63g8mE9BdQa4oMKEN8eFQkg+QaGiWminm4FU7ke7JnJ2c29yvSa9KIPu2Ag8yq lbSeZgwJ2fK6VwqeH9stQ4+oxDgLMA+G0/Trw5Y6s81WRL/JHfqGSpK3AqCCeir9 aY21nWx5eiKt0C4iUfOq0sFmiopKW5ACcsjTQ6POa7hLw9njpoq5jMskCcDaxEAK plrzUNALRuasIUzoUuk58qkrdc/FlUWR -----END CERTIFICATE-----Generated at Fri Jul 4 13:34:13 2025 by rpki-client