$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json) Hash identifier: ahWm4vB7om4J+RjTlHaJhdIa6ZiF/26+i5whLNsS14s= Subject key identifier: 6F:A7:5F:64:35:31:72:A5:12:44:65:0B:C3:26:BB:A1:5A:0C:0A:C0 Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft Manifest number: 08CC Signing time: Mon 30 Jun 2025 22:04:03 +0000 Manifest this update: Mon 30 Jun 2025 22:04:02 +0000 Manifest next update: Mon 07 Jul 2025 22:04:02 +0000 Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: hqpReaoEEfXYeCyrNKF3zzRXprNKzjYPqyJYy/9s4l8=) 2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Validity Not Before: Jun 30 22:04:02 2025 GMT Not After : Jul 7 22:04:02 2025 GMT Subject: CN=686309d3-ad8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:b4:58:0c:ae:7d:8f:77:b4:f3:97:3b:1a: a2:89:f3:9d:e6:e4:62:e5:59:2c:bf:4a:69:7e:1b: 13:00:26:f0:27:ab:92:e3:2a:ee:60:bc:51:fb:e2: 65:31:a3:ad:a6:cc:a0:a5:81:eb:74:8c:1e:99:5d: 14:1b:bf:5e:40:e9:9a:ad:9a:99:af:e7:c9:b8:5f: 15:e3:ba:3e:84:35:0d:03:2b:03:12:cf:36:a3:65: 55:2b:c1:ff:fa:2a:5b:2c:86:dc:a3:88:ec:8e:2b: 79:26:c9:bb:c7:41:0a:f3:f2:3d:2b:f3:46:1c:56: 90:01:64:59:30:1d:ae:a3:4f:f4:dd:1b:65:7d:85: 88:60:1f:7d:d7:08:08:65:cb:18:58:76:3a:2e:ad: 6c:63:e9:1e:eb:2f:90:01:71:13:77:f5:45:17:69: 02:08:42:73:89:19:b3:59:e6:50:98:5a:1a:14:87: a5:ce:99:f9:4c:20:c8:1b:aa:0f:38:e8:94:52:2a: 21:4c:10:d0:1c:e4:7a:f1:8f:7e:20:24:ed:29:d6: 6f:18:a7:4f:b1:a9:3b:dd:d6:9f:7d:c1:f9:e5:d5: b1:66:8c:36:61:3e:3d:fb:a4:bc:52:51:9e:63:fa: d7:4c:e5:df:ee:0e:98:cb:83:6e:f2:83:99:61:a6: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A7:5F:64:35:31:72:A5:12:44:65:0B:C3:26:BB:A1:5A:0C:0A:C0 X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:12:50:2d:90:2b:d9:9c:e2:88:e1:87:02:4b:a6:17:a0:01: 90:ae:5d:8a:24:1d:50:32:c1:21:c9:16:59:06:b6:09:ec:95: e6:a0:26:5f:10:02:89:9c:a0:94:d8:50:55:03:f3:ea:9f:98: 3e:71:13:8c:f7:f5:e4:b9:ca:2e:55:4f:3b:0d:b1:34:47:61: b3:3a:00:d4:2d:59:90:e7:12:5d:16:96:15:ba:74:83:7b:a5: 9c:ee:27:e3:4c:d0:68:b6:06:6b:ae:da:fe:87:c4:d8:94:1c: a7:42:03:72:fd:59:f3:13:a8:cc:ff:02:55:dc:e6:e7:44:11: 77:97:7a:08:5d:69:16:3f:79:cb:2f:9b:f9:c7:ef:79:fb:89: 64:59:d5:e7:f1:a2:dd:4e:ac:da:cd:fb:a4:b0:4c:93:8a:64: ab:2d:bb:f5:e0:e8:bc:7f:67:7a:46:72:a5:11:69:a6:2a:6b: 4c:8e:f3:92:1c:6a:d6:a3:01:7b:ae:66:25:ec:8e:18:a3:18: 42:0c:25:41:ef:3c:e2:d1:1b:8f:e7:b0:38:e4:cd:40:b2:df: 19:c0:f9:a8:c5:e1:ec:ad:7c:8d:db:f8:6b:ae:5a:0b:ff:28: 0a:a4:0c:6c:3d:aa:3d:f1:f1:7a:66:97:6e:8e:94:ba:da:cc: 80:40:e2:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjUwNjMwMjIwNDAyWhcNMjUwNzA3MjIwNDAyWjAYMRYwFAYD VQQDEw02ODYzMDlkMy1hZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EG0WAyufY93tPOXOxqiifOd5uRi5Vksv0ppfhsTACbwJ6uS4yruYLxR++Jl MaOtpsygpYHrdIwemV0UG79eQOmarZqZr+fJuF8V47o+hDUNAysDEs82o2VVK8H/ +ipbLIbco4jsjit5Jsm7x0EK8/I9K/NGHFaQAWRZMB2uo0/03RtlfYWIYB991wgI ZcsYWHY6Lq1sY+ke6y+QAXETd/VFF2kCCEJziRmzWeZQmFoaFIelzpn5TCDIG6oP OOiUUiohTBDQHOR68Y9+ICTtKdZvGKdPsak73daffcH55dWxZow2YT49+6S8UlGe Y/rXTOXf7g6Yy4Nu8oOZYaZnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+nX2Q1 MXKlEkRlC8Mmu6FaDArAMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80 X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHElAtkCvZnOKI4YcCS6YXoAGQrl2KJB1QMsEhyRZZBrYJ7JXmoCZf EAKJnKCU2FBVA/Pqn5g+cROM9/XkucouVU87DbE0R2GzOgDULVmQ5xJdFpYVunSD e6Wc7ifjTNBotgZrrtr+h8TYlBynQgNy/VnzE6jM/wJV3ObnRBF3l3oIXWkWP3nL L5v5x+95+4lkWdXn8aLdTqzazfuksEyTimSrLbv14Oi8f2d6RnKlEWmmKmtMjvOS HGrWowF7rmYl7I4YoxhCDCVB7zzi0RuP57A45M1Ast8ZwPmoxeHsrXyN2/hrrloL /ygKpAxsPao98fF6ZpdujpS62syAQOI9 -----END CERTIFICATE-----Generated at Wed Jul 2 20:52:37 2025 by rpki-client