$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: 0cpZxFhjKaqr7MMXkBnoKlcD3j9ntF55eWWBU1Ish0I= Subject key identifier: EB:4B:8D:6E:DE:8D:C3:FB:0F:31:98:DE:A0:F2:4E:86:1F:0E:2E:CF Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01CE Signing time: Tue 01 Jul 2025 03:17:15 +0000 Manifest this update: Tue 01 Jul 2025 03:17:15 +0000 Manifest next update: Tue 08 Jul 2025 03:17:15 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: NPp2Vv2Gwnc/QNG/tEhgUAHSQiirIjdDt4/JSgpzTJM=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Jul 1 03:17:15 2025 GMT Not After : Jul 8 03:17:15 2025 GMT Subject: CN=6863533b-746b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:2b:bc:c6:b5:46:20:fc:eb:47:78:36:f6: 41:c4:05:03:23:a2:fe:ae:36:59:61:cf:bc:78:8d: 43:82:31:c2:02:5d:72:ba:06:e6:80:4e:1e:1c:5c: 3c:38:ec:96:8b:6b:50:05:41:6a:f4:67:e5:0d:b8: 0e:48:40:56:d1:6b:d3:b9:18:ca:d8:ce:9f:87:49: c2:64:68:8f:f7:d9:92:cb:81:d0:71:1d:ba:35:57: 9a:3a:63:44:e0:db:7b:80:e0:1e:09:7c:0e:08:d1: f8:dc:4e:79:e8:d8:23:04:e3:fa:93:5c:f7:fa:63: 20:ff:d2:e5:3e:c4:cc:8f:c5:56:40:88:c5:29:d6: fd:10:8b:aa:66:ee:a0:5f:2a:ef:c2:66:e9:54:19: 5e:b6:84:aa:fa:39:49:e2:0c:7c:74:6b:f2:51:a0: f6:1d:71:13:0e:1c:4f:8b:10:67:94:3f:ad:13:99: cc:93:e3:88:bd:21:60:d4:2e:6e:f7:72:34:eb:5c: 3a:3f:45:80:54:6c:35:eb:54:d4:10:95:1a:16:a3: 5e:88:7b:df:20:8b:8a:af:19:62:5b:ae:fe:5c:2e: ed:ff:90:f7:af:ba:98:ae:95:35:62:32:8f:97:0f: 1a:c5:5b:0b:be:e0:64:8e:11:71:af:23:76:e9:10: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4B:8D:6E:DE:8D:C3:FB:0F:31:98:DE:A0:F2:4E:86:1F:0E:2E:CF X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ee:fd:bf:18:de:6f:ba:b8:e9:4b:d1:b6:8d:d1:91:e7:91: cd:4d:3a:af:9d:b4:fb:df:b0:13:e1:ca:4a:43:0d:70:74:81: 56:ac:ff:a4:ea:cc:72:d2:b0:24:8f:32:1a:9f:c2:bc:74:ad: 05:ea:77:7f:a8:f7:9f:3a:5f:b1:ac:2c:f7:dd:dc:64:35:ba: b2:e9:2e:19:dc:46:7d:72:bb:c6:7d:3c:50:0e:06:ad:25:8e: a9:a0:ea:b9:b6:b7:52:91:a1:d4:1e:63:2f:09:91:22:49:a4: 68:f4:e8:2d:2d:a1:56:62:c3:f8:43:dd:97:bc:54:96:d0:ea: 30:e2:25:21:f9:82:0a:3c:ef:ce:19:37:d8:86:18:a6:d3:ca: b3:c6:76:11:6e:4d:9b:fd:d5:b7:6a:5a:17:51:9f:3e:51:9b: 87:62:8b:fd:92:e6:6f:3a:76:6c:7a:ad:16:b9:ca:7a:56:0d: 14:ed:4a:bf:99:10:d5:67:61:cb:b1:47:38:88:d2:03:54:70: ac:2f:71:b8:b4:8a:1e:f3:c8:56:13:79:19:8a:63:9d:06:96: 13:b0:6d:84:c0:96:3d:4e:68:b4:ac:ab:40:d9:fa:a1:77:70: 74:16:5d:5b:d8:d4:85:1f:72:45:97:6a:0b:bc:60:6b:ab:10: cc:cb:78:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwNzAxMDMxNzE1WhcNMjUwNzA4MDMxNzE1WjAYMRYwFAYD VQQDEw02ODYzNTMzYi03NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz14rvMa1RiD860d4NvZBxAUDI6L+rjZZYc+8eI1DgjHCAl1yugbmgE4eHFw8 OOyWi2tQBUFq9GflDbgOSEBW0WvTuRjK2M6fh0nCZGiP99mSy4HQcR26NVeaOmNE 4Nt7gOAeCXwOCNH43E556NgjBOP6k1z3+mMg/9LlPsTMj8VWQIjFKdb9EIuqZu6g XyrvwmbpVBletoSq+jlJ4gx8dGvyUaD2HXETDhxPixBnlD+tE5nMk+OIvSFg1C5u 93I061w6P0WAVGw161TUEJUaFqNeiHvfIIuKrxliW67+XC7t/5D3r7qYrpU1YjKP lw8axVsLvuBkjhFxryN26RBHbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtLjW7e jcP7DzGY3qDyToYfDi7PMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH7v2/GN5vurjpS9G2jdGR55HNTTqvnbT737AT4cpKQw1wdIFWrP+k 6sxy0rAkjzIan8K8dK0F6nd/qPefOl+xrCz33dxkNbqy6S4Z3EZ9crvGfTxQDgat JY6poOq5trdSkaHUHmMvCZEiSaRo9OgtLaFWYsP4Q92XvFSW0Oow4iUh+YIKPO/O GTfYhhim08qzxnYRbk2b/dW3aloXUZ8+UZuHYov9kuZvOnZseq0Wucp6Vg0U7Uq/ mRDVZ2HLsUc4iNIDVHCsL3G4tIoe88hWE3kZimOdBpYTsG2EwJY9Tmi0rKtA2fqh d3B0Fl1b2NSFH3JFl2oLvGBrqxDMy3h4 -----END CERTIFICATE-----Generated at Thu Jul 3 01:08:12 2025 by rpki-client