$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: BMn8MvbHixoVD3jsvfhRcxow19YA69Qmp5Aw5kczb08= Subject key identifier: A9:FA:76:C7:11:AD:E0:4E:5B:AC:B6:89:99:3A:F9:72:13:9B:D9:27 Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 0928 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1F05 Signing time: Wed 02 Jul 2025 16:54:13 +0000 Manifest this update: Wed 02 Jul 2025 16:54:12 +0000 Manifest next update: Wed 09 Jul 2025 16:54:12 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: wNN+CuCwcvhIvQrXjLfOaRepl3G0URPWt3obrGvEr2c=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2344 (0x928) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: Jul 2 16:54:12 2025 GMT Not After : Jul 9 16:54:12 2025 GMT Subject: CN=68656435-7573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:70:66:31:31:f9:4a:5c:1d:81:ce:83:2a: 45:9f:4d:e4:25:e4:dc:a2:2f:d6:41:07:49:19:44: 4f:c7:ae:e1:cc:f1:03:74:39:f2:ae:21:b8:9a:fe: bb:b8:a3:33:12:0d:87:ca:08:e4:3a:00:bf:29:98: ed:77:0b:cd:68:90:2b:8f:81:b9:6c:bb:f8:37:b7: 5f:ae:67:09:47:bd:10:d5:ed:10:bf:33:91:a5:10: b4:ae:8b:ba:51:1b:4c:a6:76:c2:80:9a:a4:80:0f: f8:e4:a8:bd:73:97:c0:0d:42:57:45:2e:5c:a3:5b: 83:43:9f:25:40:1e:de:05:8d:71:5d:c5:61:24:83: 26:e9:d3:8f:a4:00:5c:8f:52:8f:f1:26:06:7e:bb: 64:49:92:6b:87:06:74:58:0c:0b:4c:64:ff:3b:ee: 09:92:cf:23:dc:10:ad:da:e4:c7:15:1c:1a:28:ba: e2:8f:aa:10:1b:9f:72:e7:69:cc:98:f7:2d:95:aa: f3:3e:26:3b:42:01:70:f8:de:c9:db:d7:92:ad:53: 05:22:d8:2c:4f:ad:d0:22:af:7a:3b:95:28:e9:ff: 00:5c:2f:e9:ac:ea:17:d1:52:11:35:33:b0:47:c1: 0e:4d:49:77:64:07:f1:fc:45:f4:8e:db:7b:66:0f: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:76:C7:11:AD:E0:4E:5B:AC:B6:89:99:3A:F9:72:13:9B:D9:27 X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:13:06:51:46:fc:a6:09:c6:4f:b5:8f:f6:96:89:ff:8c:70: eb:84:24:e1:1b:4d:8f:00:5b:31:f5:fa:93:76:3d:ef:98:73: a8:69:a8:9b:62:65:10:c6:d0:a1:03:8e:e6:2c:36:de:63:ed: 92:82:8e:0d:5a:d2:a3:f9:ef:dc:89:61:5f:d1:34:75:1b:98: d9:b0:af:12:3a:93:e0:e2:01:41:a4:56:48:56:d5:41:aa:db: 8f:61:e1:88:1f:0a:3c:4b:c5:a9:51:c5:cb:95:e2:09:5c:30: 69:71:cc:d8:5f:da:c5:f8:96:83:9a:40:57:d8:0b:f2:53:fd: 21:a5:f2:85:33:23:68:e0:1e:56:ae:35:2a:53:3f:8c:3b:6f: ea:6e:da:b5:52:c1:05:c9:ba:6f:ce:37:5c:13:b3:92:d1:60: aa:1a:ad:3e:09:13:ec:41:d5:d1:01:a6:cf:8e:a7:f1:9c:d1: 3d:be:53:37:f7:06:88:ee:e4:be:e3:0c:04:38:33:ae:04:27: ec:36:19:6e:a9:4a:34:bc:40:c5:24:85:72:0b:cd:f7:e3:75: 80:a1:db:5a:f4:48:b7:04:65:ab:84:e4:b3:75:76:ce:e9:49: 0c:4e:3a:13:97:48:03:dd:99:5c:34:bf:7f:41:14:8b:ff:55: 41:2a:10:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUwNzAyMTY1NDEyWhcNMjUwNzA5MTY1NDEyWjAYMRYwFAYD VQQDEw02ODY1NjQzNS03NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNBwZjEx+UpcHYHOgypFn03kJeTcoi/WQQdJGURPx67hzPEDdDnyriG4mv67 uKMzEg2HygjkOgC/KZjtdwvNaJArj4G5bLv4N7dfrmcJR70Q1e0QvzORpRC0rou6 URtMpnbCgJqkgA/45Ki9c5fADUJXRS5co1uDQ58lQB7eBY1xXcVhJIMm6dOPpABc j1KP8SYGfrtkSZJrhwZ0WAwLTGT/O+4Jks8j3BCt2uTHFRwaKLrij6oQG59y52nM mPctlarzPiY7QgFw+N7J29eSrVMFItgsT63QIq96O5Uo6f8AXC/prOoX0VIRNTOw R8EOTUl3ZAfx/EX0jtt7Zg//dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn6dscR reBOW6y2iZk6+XITm9knMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4EwZRRvymCcZPtY/2lon/jHDrhCThG02PAFsx9fqTdj3vmHOoaaib YmUQxtChA47mLDbeY+2Sgo4NWtKj+e/ciWFf0TR1G5jZsK8SOpPg4gFBpFZIVtVB qtuPYeGIHwo8S8WpUcXLleIJXDBpcczYX9rF+JaDmkBX2AvyU/0hpfKFMyNo4B5W rjUqUz+MO2/qbtq1UsEFybpvzjdcE7OS0WCqGq0+CRPsQdXRAabPjqfxnNE9vlM3 9waI7uS+4wwEODOuBCfsNhluqUo0vEDFJIVyC83343WAodta9Ei3BGWrhOSzdXbO 6UkMTjoTl0gD3ZlcNL9/QRSL/1VBKhDG -----END CERTIFICATE-----Generated at Thu Jul 3 17:27:12 2025 by rpki-client