$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: 8z/0xjyGfc3i0Q4fhEYQD/bQ7J8I3i3zdo8w/Vq8ubc= Subject key identifier: CF:3E:CD:4D:79:02:17:25:1A:35:CA:1E:3F:F3:54:8C:AB:A0:97:A3 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0C66 Signing time: Wed 02 Jul 2025 18:52:24 +0000 Manifest this update: Wed 02 Jul 2025 18:52:24 +0000 Manifest next update: Wed 09 Jul 2025 18:52:24 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: DUngmUPOU8fpwfbK7bAIP4QEJxSTEGS1cu6HSZUAZLs=) 2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: /d3uj8OGj8i2eQo/4qG/XmqOKUxOa6VLTQJOMFvek38=) 3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=) 4: 08A0FFEA511A11F0BDB3AF65C4F9AE02.roa (hash: 5zeDRYT+veCZo1QxNJOyqL/lEy08PtB3k3JE9hg5cHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Jul 2 18:52:24 2025 GMT Not After : Jul 9 18:52:24 2025 GMT Subject: CN=68657fe8-3f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:4a:28:95:65:91:42:a6:10:eb:5f:80:aa:4c: cd:84:8e:8f:f5:1e:bb:13:18:db:bd:c3:2b:74:52: 7c:88:6e:55:a2:28:c1:11:c6:f6:f7:32:ec:8a:3a: f1:59:4c:79:5d:8d:80:1c:96:5c:97:f4:3e:3a:cb: ae:2f:ef:73:56:73:52:12:98:1d:0b:96:5f:84:1c: 11:8b:a3:1e:55:d1:81:e5:d2:1f:9f:d5:d6:b4:3f: 1e:fa:33:b7:24:61:a3:a8:ba:bb:f8:6f:8a:f3:6b: 0d:c6:24:0d:4f:db:b3:ac:b1:a5:bc:86:d0:5d:56: 61:4c:d4:c2:74:2b:e0:8d:83:17:c2:aa:6f:5a:c7: 44:ca:07:d6:e4:21:3b:35:92:1f:8b:38:dc:cc:79: 48:2a:fd:f2:74:bf:c6:e9:3e:64:0c:39:fa:cb:67: bf:08:4f:77:72:6b:cc:2e:58:33:20:e4:50:ed:d2: 54:5b:1d:4e:22:ca:93:f0:81:64:8c:49:cb:41:ed: 91:8b:85:e8:49:a0:80:af:37:a3:a7:58:6c:1d:59: f2:cb:9b:b5:9b:4a:c8:15:88:b2:6b:87:24:40:03: 27:68:d3:91:de:0c:9c:e5:81:7d:77:19:d5:c9:4e: c1:cf:27:4a:e3:7d:8a:b6:a4:f8:74:e9:c5:23:76: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:CD:4D:79:02:17:25:1A:35:CA:1E:3F:F3:54:8C:AB:A0:97:A3 X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b4:cc:26:13:2e:8c:3d:22:e3:77:f5:dd:2e:0d:5a:ed:73: e9:5b:3b:38:87:fd:5d:a3:6d:25:d8:a2:0b:97:df:cb:99:99: d8:10:87:7f:65:d2:34:26:67:f2:a3:22:de:f1:e0:fe:05:ff: e8:b9:6d:00:05:c1:06:3c:05:16:15:26:c8:73:e1:f7:26:34: 71:5f:6d:b2:de:d3:8d:4f:64:9a:44:ec:55:76:23:f0:0d:b3: 62:ac:2f:8e:bd:78:c4:cf:ed:76:bc:23:00:03:73:bb:5d:5c: 8e:a0:98:3b:d0:5a:15:2f:c5:a7:91:60:48:d6:b5:a7:6b:f7: c1:35:2a:ca:eb:bd:fa:4f:62:55:76:97:0f:f4:04:b0:79:2f: 5e:06:4b:f8:48:cf:1d:ee:20:a7:97:c8:9b:df:79:a0:75:b1: 90:61:ed:6b:42:e1:0d:fd:f1:a1:dd:42:75:95:54:4a:dd:5f: 4e:63:d5:7e:dd:0c:a2:62:5a:a1:b4:37:1e:4c:ef:09:02:cc: e6:ca:cf:39:74:be:65:3a:57:87:bc:ef:66:af:71:6c:0e:b8: 1e:1f:f5:1c:b6:23:a0:2e:b9:bf:b8:23:4a:6b:31:88:c8:db: 4d:4b:15:ff:f8:82:47:f2:c7:4c:0f:96:c4:ad:9e:22:99:92: c8:3e:71:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUwNzAyMTg1MjI0WhcNMjUwNzA5MTg1MjI0WjAYMRYwFAYD VQQDEw02ODY1N2ZlOC0zZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/EoolWWRQqYQ61+AqkzNhI6P9R67ExjbvcMrdFJ8iG5VoijBEcb29zLsijrx WUx5XY2AHJZcl/Q+OsuuL+9zVnNSEpgdC5ZfhBwRi6MeVdGB5dIfn9XWtD8e+jO3 JGGjqLq7+G+K82sNxiQNT9uzrLGlvIbQXVZhTNTCdCvgjYMXwqpvWsdEygfW5CE7 NZIfizjczHlIKv3ydL/G6T5kDDn6y2e/CE93cmvMLlgzIORQ7dJUWx1OIsqT8IFk jEnLQe2Ri4XoSaCArzejp1hsHVnyy5u1m0rIFYiya4ckQAMnaNOR3gyc5YF9dxnV yU7BzydK432KtqT4dOnFI3brSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8+zU15 AhclGjXKHj/zVIyroJejMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5tMwmEy6MPSLjd/XdLg1a7XPpWzs4h/1do20l2KILl9/LmZnYEId/ ZdI0JmfyoyLe8eD+Bf/ouW0ABcEGPAUWFSbIc+H3JjRxX22y3tONT2SaROxVdiPw DbNirC+OvXjEz+12vCMAA3O7XVyOoJg70FoVL8WnkWBI1rWna/fBNSrK6736T2JV dpcP9ASweS9eBkv4SM8d7iCnl8ib33mgdbGQYe1rQuEN/fGh3UJ1lVRK3V9OY9V+ 3QyiYlqhtDceTO8JAszmys85dL5lOleHvO9mr3FsDrgeH/UctiOgLrm/uCNKazGI yNtNSxX/+IJH8sdMD5bErZ4imZLIPnH3 -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:21 2025 by rpki-client