$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: aAS5Wi8DWx1td4JlzmHaaftBdpBpwGZbz9v73P0YOhA= Subject key identifier: 28:B8:C0:3A:B9:DA:28:7D:F2:26:CA:2C:48:FF:F1:25:83:82:19:F3 Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 068A Signing time: Wed 02 Jul 2025 22:33:29 +0000 Manifest this update: Wed 02 Jul 2025 22:33:28 +0000 Manifest next update: Wed 09 Jul 2025 22:33:28 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: U0no5+4BbpnRkyEv7nb8xHUq+2qv0a7mrYcYKvHNvCM=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: CJrC42fEHsl4a4F29xS9BQgj5clgqDLXG0TYmKNYKAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4, serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: Jul 2 22:33:28 2025 GMT Not After : Jul 9 22:33:28 2025 GMT Subject: CN=6865b3b8-8fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:3f:81:bb:22:2c:1f:3c:98:e4:4d:3e:e7: 75:32:a7:87:ba:13:0a:8d:ee:8d:7b:57:ce:18:36: b2:80:e1:3e:16:c8:b6:cd:71:8c:7b:ed:81:e9:c6: 4d:6c:c8:a4:37:4e:ac:9c:04:25:9f:10:e5:66:2e: 63:d2:af:fc:87:0c:a9:7b:49:3f:5e:ce:c7:17:3e: 37:b0:f2:27:ce:d3:c8:96:bd:d6:f7:eb:58:9a:3c: 2f:b1:ad:b7:62:cc:f2:2d:83:21:25:98:4b:b8:37: 7e:c2:9a:35:9a:dc:19:6b:53:0f:14:06:2e:51:ac: 21:a8:2b:64:f6:7b:c0:54:ce:f2:b8:5d:5a:70:e7: a8:75:4e:d1:92:e8:ca:06:b7:a4:3f:ec:98:cf:a8: 0f:c2:cf:96:3a:90:11:0c:5c:67:37:d8:37:64:49: 52:b6:19:3d:d8:92:0f:8c:43:54:54:4b:fe:39:0b: 19:dd:38:8c:fc:7d:a0:50:2c:90:16:b5:21:d1:37: e9:0c:21:77:17:c8:2a:ba:93:1e:72:b8:ac:b4:25: fa:38:b3:72:76:c9:fc:9e:1c:6f:c3:b7:1f:79:f8: d7:fd:22:5f:fd:3d:91:d1:af:12:ac:3b:80:5d:58: 51:ef:da:78:04:1e:97:81:f2:64:9a:5a:6c:50:22: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B8:C0:3A:B9:DA:28:7D:F2:26:CA:2C:48:FF:F1:25:83:82:19:F3 X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:46:73:e3:fb:51:29:cd:91:5e:08:eb:4d:8e:14:2a:9d:fd: 44:31:6d:c9:2e:7e:ce:fb:cb:b5:0e:6c:5d:c8:70:ee:e0:3e: bb:b9:27:1b:05:90:71:d0:28:37:7d:e7:78:3e:8e:02:d0:23: b4:0a:8e:33:8f:1c:fd:9f:ee:65:8b:1a:42:09:37:67:53:a8: bd:e9:ea:8a:3a:2d:02:f5:50:0c:6e:e8:12:4e:3e:9d:b2:c7: 0c:9b:31:f1:8d:d0:93:ab:40:61:58:9c:97:b6:b1:ea:b7:fc: 99:9b:26:de:d6:94:97:12:ca:1b:1c:8f:f5:d3:e1:e0:42:c1: 9c:2d:28:c1:8f:16:fe:28:cd:ea:96:01:e1:ea:3f:2c:11:00: c1:55:44:fb:1b:bb:a3:96:05:d7:2c:fc:94:ed:8c:69:69:ef: 03:f9:96:ff:95:85:d4:b3:ac:43:4d:5f:e4:dc:30:c3:22:6c: 6d:21:40:a7:8c:6e:69:bd:bc:34:9d:bf:c7:3f:89:58:30:fa: 53:c4:ff:af:7e:de:d7:5e:c0:17:e3:5e:36:d9:60:80:1e:d4: 79:f5:c6:90:7f:e6:29:d8:0e:b6:a7:01:0c:70:88:e1:7b:5e: 24:a5:1e:1e:d8:13:eb:28:9e:05:67:83:14:6b:5c:54:21:95: ef:32:7c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjUwNzAyMjIzMzI4WhcNMjUwNzA5MjIzMzI4WjAYMRYwFAYD VQQDEw02ODY1YjNiOC04ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEg/gbsiLB88mORNPud1MqeHuhMKje6Ne1fOGDaygOE+Fsi2zXGMe+2B6cZN bMikN06snAQlnxDlZi5j0q/8hwype0k/Xs7HFz43sPInztPIlr3W9+tYmjwvsa23 YszyLYMhJZhLuDd+wpo1mtwZa1MPFAYuUawhqCtk9nvAVM7yuF1acOeodU7RkujK BrekP+yYz6gPws+WOpARDFxnN9g3ZElSthk92JIPjENUVEv+OQsZ3TiM/H2gUCyQ FrUh0TfpDCF3F8gqupMecristCX6OLNydsn8nhxvw7cfefjX/SJf/T2R0a8SrDuA XVhR79p4BB6XgfJkmlpsUCJoawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi4wDq5 2ih98ibKLEj/8SWDghnzMB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCRnPj+1EpzZFeCOtNjhQqnf1EMW3JLn7O+8u1DmxdyHDu4D67uScb BZBx0Cg3fed4Po4C0CO0Co4zjxz9n+5lixpCCTdnU6i96eqKOi0C9VAMbugSTj6d sscMmzHxjdCTq0BhWJyXtrHqt/yZmybe1pSXEsobHI/10+HgQsGcLSjBjxb+KM3q lgHh6j8sEQDBVUT7G7ujlgXXLPyU7Yxpae8D+Zb/lYXUs6xDTV/k3DDDImxtIUCn jG5pvbw0nb/HP4lYMPpTxP+vft7XXsAX41422WCAHtR59caQf+Yp2A62pwEMcIjh e14kpR4e2BPrKJ4FZ4MUa1xUIZXvMnwV -----END CERTIFICATE-----Generated at Fri Jul 4 07:07:10 2025 by rpki-client