$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: 318oKJkM5Z5kGEyfkD2F6QfNgt8ZE9qWN3UzEpkPsHY= Subject key identifier: 14:76:A5:DF:24:81:2F:CD:D1:5A:08:CB:76:F4:85:1E:55:D7:CF:2C Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 0402 Signing time: Thu 03 Jul 2025 00:50:52 +0000 Manifest this update: Thu 03 Jul 2025 00:50:51 +0000 Manifest next update: Thu 10 Jul 2025 00:50:51 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: rYND+42zHJSU95MmfvxvCmv61NBObvO6/pOMB2PmCvo=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: YsWk/M3tlCQqb5avIWlSapMoZjsImuHwJehmfE0kgKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Jul 3 00:50:51 2025 GMT Not After : Jul 10 00:50:51 2025 GMT Subject: CN=6865d3eb-eaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:38:54:de:04:c5:ca:5f:5a:ed:e9:c4:f1: 11:97:2f:1f:eb:17:11:0c:a8:8c:ef:d5:3c:e2:40: 23:33:63:4e:2a:b0:e1:25:f7:9e:a5:4d:99:e6:15: 91:31:17:53:d3:8b:ed:61:ca:9c:08:43:59:1f:e7: 69:79:bc:78:7b:63:3d:ce:6e:1a:53:00:b5:d0:da: 85:cf:2e:86:74:b6:6f:f7:f9:f5:fb:b5:a8:ab:b5: 2c:92:4f:58:95:72:ff:76:b1:6e:76:1e:79:b9:0d: 20:c4:a1:a8:98:43:8a:dd:0e:c2:30:c5:2e:38:fb: a6:75:9c:c2:49:f3:06:c8:6b:87:3d:a2:dc:56:44: 68:f9:da:d7:e8:79:71:fc:e8:b9:1f:45:bf:d1:e4: 00:9c:a0:73:f5:52:04:ee:5a:07:bc:0d:0b:48:f5: f5:5c:6e:43:95:7e:22:84:38:95:f4:a3:2d:da:02: 58:2c:75:77:e7:5b:ea:78:31:eb:b5:85:33:00:54: 73:c6:c6:d9:ad:c1:a4:a5:fc:fc:40:23:0d:ac:0b: 1f:67:e4:75:4b:2a:be:71:f2:05:a0:b1:f8:58:44: 36:62:b3:a4:14:c7:7b:fb:26:c3:97:6b:b4:c3:7c: 59:d0:4e:83:56:f7:97:d7:e6:58:19:61:0c:bc:cb: 22:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:76:A5:DF:24:81:2F:CD:D1:5A:08:CB:76:F4:85:1E:55:D7:CF:2C X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:05:da:34:26:93:52:84:86:f4:b5:7d:0f:23:dc:20:49:ea: 55:9b:38:54:e5:7d:90:43:11:42:66:93:02:4c:a1:f9:96:79: 86:6a:e1:53:f4:b6:21:c8:2d:e0:aa:97:f5:bb:7f:a5:09:20: d9:18:ce:dd:e9:ba:1d:c6:c1:ed:d1:95:bc:12:9b:48:25:15: 4b:b1:a1:b1:d3:bb:6f:6c:5c:12:5d:92:b2:af:c4:e2:a2:62: e6:ed:da:49:da:99:ee:d9:0b:af:3d:c6:9f:67:85:b8:f2:c0: 0f:d1:d2:0f:1c:cf:71:e9:1c:2a:9e:cb:40:40:3e:87:01:16: 5b:6a:8c:01:e0:b8:6c:9c:8b:da:48:ed:31:d8:79:17:7b:db: bf:2a:00:65:19:1f:de:8a:0f:95:8a:71:16:64:08:00:9f:cd: 7f:6a:c7:f1:ad:ee:82:4d:72:59:79:10:12:d2:cc:ec:16:14: e0:5c:3a:96:a8:b4:33:1e:15:76:91:a5:1f:d6:bc:35:cd:3f: dc:c9:de:52:54:e2:cc:12:8d:10:7a:8c:8f:4b:aa:6b:32:01: f9:97:e8:b0:4f:ed:e7:d8:10:e1:55:ce:90:48:09:54:48:cf: 58:95:0a:3a:0c:3d:64:cd:5d:4c:b7:bd:9d:d2:06:de:c9:8f: fc:53:1e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUwNzAzMDA1MDUxWhcNMjUwNzEwMDA1MDUxWjAYMRYwFAYD VQQDEw02ODY1ZDNlYi1lYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRw4VN4ExcpfWu3pxPERly8f6xcRDKiM79U84kAjM2NOKrDhJfeepU2Z5hWR MRdT04vtYcqcCENZH+dpebx4e2M9zm4aUwC10NqFzy6GdLZv9/n1+7Woq7Uskk9Y lXL/drFudh55uQ0gxKGomEOK3Q7CMMUuOPumdZzCSfMGyGuHPaLcVkRo+drX6Hlx /Oi5H0W/0eQAnKBz9VIE7loHvA0LSPX1XG5DlX4ihDiV9KMt2gJYLHV351vqeDHr tYUzAFRzxsbZrcGkpfz8QCMNrAsfZ+R1Syq+cfIFoLH4WEQ2YrOkFMd7+ybDl2u0 w3xZ0E6DVveX1+ZYGWEMvMsiowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR2pd8k gS/N0VoIy3b0hR5V188sMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBABdo0JpNShIb0tX0PI9wgSepVmzhU5X2QQxFCZpMCTKH5lnmGauFT 9LYhyC3gqpf1u3+lCSDZGM7d6bodxsHt0ZW8EptIJRVLsaGx07tvbFwSXZKyr8Ti omLm7dpJ2pnu2QuvPcafZ4W48sAP0dIPHM9x6RwqnstAQD6HARZbaowB4LhsnIva SO0x2HkXe9u/KgBlGR/eig+VinEWZAgAn81/asfxre6CTXJZeRAS0szsFhTgXDqW qLQzHhV2kaUf1rw1zT/cyd5SVOLMEo0QeoyPS6prMgH5l+iwT+3n2BDhVc6QSAlU SM9YlQo6DD1kzV1Mt72d0gbeyY/8Ux7j -----END CERTIFICATE-----Generated at Thu Jul 3 03:45:54 2025 by rpki-client