$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: aKU7C+dggbmWuXGHyt4Q6xZZtNLcOzONL9wBcuwxLrI= Subject key identifier: C0:F0:BA:EC:D1:C3:05:9A:FB:FA:C0:F4:46:E9:F9:4A:CA:54:BC:27 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B4D Signing time: Mon 30 Jun 2025 19:17:08 +0000 Manifest this update: Mon 30 Jun 2025 19:17:08 +0000 Manifest next update: Mon 07 Jul 2025 19:17:08 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: 0O3Xns1pvvLphGiHUZMGeJQ8l0SEvXv+vWzvzU4jON8=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: Jun 30 19:17:08 2025 GMT Not After : Jul 7 19:17:08 2025 GMT Subject: CN=6862e2b4-3b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:33:26:10:df:4c:3b:01:29:cb:e4:7f:6e: 45:4b:39:be:01:b8:f9:f1:05:af:01:c2:c8:16:03: 24:b5:bd:76:96:b2:ef:33:3b:f1:e7:f6:1b:f1:ec: 46:7b:8a:de:15:92:87:6a:60:1a:f2:6e:d6:94:f3: dc:b8:a4:41:38:0d:d1:64:e7:3f:36:56:1c:94:fb: a4:f5:92:ce:fe:9d:23:37:6a:fb:1b:fe:2f:93:ef: 89:29:77:69:84:ef:de:db:95:b4:65:48:03:6d:72: 55:be:07:65:97:eb:51:bb:32:0d:97:f6:2e:a9:99: ef:df:4c:e5:7f:c6:78:bf:66:81:e2:a7:e2:83:9f: 73:d9:40:08:23:0a:04:a6:92:e4:a6:04:25:ca:4e: c7:b5:5b:46:93:3a:10:aa:53:3a:10:d9:b6:d2:76: 55:93:35:4e:6a:07:75:0a:ca:de:b6:91:c7:7a:7a: da:56:78:bc:48:00:1e:9b:e1:47:f4:8d:dd:7b:8e: ed:05:22:24:f8:c2:c4:c5:1e:32:2e:2e:55:5c:8c: 0f:df:22:9e:57:cb:57:2c:59:54:e9:4e:75:03:2a: 04:25:f5:a5:29:2b:74:70:95:da:c1:b5:56:cf:b6: 9c:b3:23:25:4b:3c:ef:6d:fa:7f:b8:77:5d:96:3e: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:BA:EC:D1:C3:05:9A:FB:FA:C0:F4:46:E9:F9:4A:CA:54:BC:27 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:70:74:2f:2e:1e:3c:14:b5:92:8e:93:e1:4a:88:f0:45:73: bd:ce:58:fa:f9:f1:5c:69:c7:fb:bb:4d:79:05:08:d4:87:d8: b3:c5:da:66:57:e8:bf:93:c2:a3:1d:ff:be:b8:02:12:b7:fe: d0:8a:be:2c:62:02:09:82:5a:93:89:c2:28:37:f6:cf:4b:d7: 0b:da:58:9b:4b:ca:7f:06:0c:f5:a9:ab:a3:a1:a5:cc:d6:98: 26:db:c9:50:fa:48:e2:b4:42:69:c6:87:39:19:c2:3c:a6:20: e2:85:32:e8:b4:8a:25:37:66:7b:24:ec:e3:bf:63:ae:98:8f: a4:87:98:6b:88:4e:c3:1a:8f:f5:39:2f:bd:fc:bc:d8:b9:19: 11:73:f7:cd:99:d5:9a:df:26:70:33:2a:56:6f:ad:c0:e8:d0: f4:b3:f0:bf:dd:be:91:a5:83:78:e9:be:b9:53:81:84:89:f5: d1:5c:39:fc:17:ac:dc:f0:8e:48:37:5e:de:26:2b:b7:55:d8: cf:83:6e:ff:6d:5d:f8:de:42:72:7f:e2:f9:80:e7:48:49:40: c0:22:55:e4:4c:59:d2:e3:19:ce:f0:5a:88:9a:e1:b6:0a:48: 15:14:e3:3e:93:15:bb:6a:01:ab:58:75:93:40:c6:a4:6a:e1: 1f:88:db:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUwNjMwMTkxNzA4WhcNMjUwNzA3MTkxNzA4WjAYMRYwFAYD VQQDEw02ODYyZTJiNC0zYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUEzJhDfTDsBKcvkf25FSzm+Abj58QWvAcLIFgMktb12lrLvMzvx5/Yb8exG e4reFZKHamAa8m7WlPPcuKRBOA3RZOc/NlYclPuk9ZLO/p0jN2r7G/4vk++JKXdp hO/e25W0ZUgDbXJVvgdll+tRuzINl/YuqZnv30zlf8Z4v2aB4qfig59z2UAIIwoE ppLkpgQlyk7HtVtGkzoQqlM6ENm20nZVkzVOagd1CsretpHHenraVni8SAAem+FH 9I3de47tBSIk+MLExR4yLi5VXIwP3yKeV8tXLFlU6U51AyoEJfWlKSt0cJXawbVW z7acsyMlSzzvbfp/uHddlj62JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDwuuzR wwWa+/rA9Ebp+UrKVLwnMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArcHQvLh48FLWSjpPhSojwRXO9zlj6+fFcacf7u015BQjUh9izxdpm V+i/k8KjHf++uAISt/7Qir4sYgIJglqTicIoN/bPS9cL2libS8p/Bgz1qaujoaXM 1pgm28lQ+kjitEJpxoc5GcI8piDihTLotIolN2Z7JOzjv2OumI+kh5hriE7DGo/1 OS+9/LzYuRkRc/fNmdWa3yZwMypWb63A6ND0s/C/3b6RpYN46b65U4GEifXRXDn8 F6zc8I5IN17eJiu3VdjPg27/bV343kJyf+L5gOdISUDAIlXkTFnS4xnO8FqImuG2 CkgVFOM+kxW7agGrWHWTQMakauEfiNvj -----END CERTIFICATE-----Generated at Tue Jul 1 20:55:14 2025 by rpki-client