$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: 03tJYSd2o1tT7f5haG0829LuTLrq73R8Nziw5bf75Ng= Subject key identifier: 56:4D:9A:79:08:82:A7:B8:F7:BB:4A:6C:8F:BB:C0:2A:B6:37:41:D8 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0437 Signing time: Tue 01 Jul 2025 01:01:56 +0000 Manifest this update: Tue 01 Jul 2025 01:01:56 +0000 Manifest next update: Tue 08 Jul 2025 01:01:56 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: ThzuXILoO/q3WP0josqCZXoCNUy6XbwCuIiMeMZ6oAE=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Jul 1 01:01:56 2025 GMT Not After : Jul 8 01:01:56 2025 GMT Subject: CN=68633384-88bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:ee:34:1d:8b:51:74:e7:3c:66:ba:18:c5: 44:ac:fe:10:b1:8f:a2:45:10:6d:6a:65:79:9e:cd: 45:36:bf:d8:50:a3:9d:88:1e:02:ca:53:56:e8:25: e2:a0:05:01:99:9f:ea:ed:29:2a:4c:63:19:80:30: d5:1f:df:8d:8a:85:72:a1:cc:51:d6:e7:ba:89:4d: 63:55:06:ab:0c:22:9a:c3:1f:54:fc:46:80:ce:54: e1:b6:bf:75:6a:b0:be:be:f9:d0:23:89:32:cf:36: 6b:d5:49:76:05:33:dd:b0:7c:ac:42:6a:ba:e9:39: 5c:9d:8a:b9:92:f7:4d:ae:42:55:d2:c9:ec:cf:35: 67:94:3a:0e:b9:0b:b9:1d:94:35:3d:03:ad:e2:21: 70:a6:a3:22:b8:f1:2b:1c:58:2e:e5:a7:18:3a:6b: 58:e6:28:ba:2a:10:a6:4a:f8:97:65:da:40:33:c1: 69:14:27:45:8e:9b:ed:45:33:50:01:8c:f1:04:01: 81:cb:d3:7f:70:c4:ec:b2:4a:41:99:1f:80:64:3c: 4f:50:d8:28:6e:81:0d:4c:ce:34:10:40:31:40:6f: 2e:3f:8e:21:e4:50:8b:53:dc:21:c3:5e:51:26:ee: 65:eb:7f:75:80:68:1c:af:53:b1:d2:f5:27:c0:4e: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:9A:79:08:82:A7:B8:F7:BB:4A:6C:8F:BB:C0:2A:B6:37:41:D8 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:53:3b:7f:87:ee:8f:66:31:a5:ac:2b:06:4a:d6:68:d4:6e: 87:20:75:53:b5:5a:1c:77:61:0d:1f:d1:40:58:28:4e:8c:47: 89:af:36:e6:a1:e2:ba:c8:40:60:42:76:2a:a7:2a:19:98:9d: 00:fa:ec:f7:18:72:fa:32:ae:b1:27:bf:ac:f9:c4:c3:d1:aa: ba:7f:39:d0:d1:6d:64:c5:da:bc:90:e5:85:46:2c:76:96:1b: 9d:a9:95:a7:1e:43:e5:4d:41:22:0c:26:51:3a:65:81:b8:44: d7:79:9a:bb:fc:b8:71:04:07:74:f7:72:d5:e4:3e:8f:ab:98: 3d:00:a6:58:60:e2:c8:48:75:1a:34:cd:12:71:b4:24:b2:77: 19:72:47:72:e0:86:23:eb:d3:30:c0:07:8d:3e:45:4a:54:4b: ed:2d:09:86:41:7a:9b:88:93:9e:9d:b6:71:7b:96:5b:da:e8: fa:39:46:7a:28:5d:f2:87:ed:7f:9e:56:43:2d:4c:80:78:26: f8:fb:fe:c2:00:38:82:63:66:a9:83:1e:26:b4:29:e2:ba:9a: ec:ae:6d:cd:a7:bc:b6:45:00:01:7a:de:82:8b:55:8d:45:37: 1d:4f:2f:58:ae:44:f3:20:a5:74:72:bb:57:d6:78:4b:da:35: 7b:41:43:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUwNzAxMDEwMTU2WhcNMjUwNzA4MDEwMTU2WjAYMRYwFAYD VQQDEw02ODYzMzM4NC04OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoInuNB2LUXTnPGa6GMVErP4QsY+iRRBtamV5ns1FNr/YUKOdiB4CylNW6CXi oAUBmZ/q7SkqTGMZgDDVH9+NioVyocxR1ue6iU1jVQarDCKawx9U/EaAzlThtr91 arC+vvnQI4kyzzZr1Ul2BTPdsHysQmq66TlcnYq5kvdNrkJV0snszzVnlDoOuQu5 HZQ1PQOt4iFwpqMiuPErHFgu5acYOmtY5ii6KhCmSviXZdpAM8FpFCdFjpvtRTNQ AYzxBAGBy9N/cMTsskpBmR+AZDxPUNgoboENTM40EEAxQG8uP44h5FCLU9whw15R Ju5l6391gGgcr1Ox0vUnwE5SJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZNmnkI gqe497tKbI+7wCq2N0HYMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVUzt/h+6PZjGlrCsGStZo1G6HIHVTtVocd2ENH9FAWChOjEeJrzbm oeK6yEBgQnYqpyoZmJ0A+uz3GHL6Mq6xJ7+s+cTD0aq6fznQ0W1kxdq8kOWFRix2 lhudqZWnHkPlTUEiDCZROmWBuETXeZq7/LhxBAd093LV5D6Pq5g9AKZYYOLISHUa NM0ScbQksncZckdy4IYj69MwwAeNPkVKVEvtLQmGQXqbiJOenbZxe5Zb2uj6OUZ6 KF3yh+1/nlZDLUyAeCb4+/7CADiCY2apgx4mtCniuprsrm3Np7y2RQABet6Ci1WN RTcdTy9YrkTzIKV0crtX1nhL2jV7QUMH -----END CERTIFICATE-----Generated at Tue Jul 1 21:09:42 2025 by rpki-client