$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: uST3aIatw0TNFhHxAQ1lpclL161Z/tkDyoETrcWbuQI= Subject key identifier: 4C:20:B5:7A:59:54:8E:F5:1A:BE:E2:CD:F3:69:31:BF:12:F7:CD:59 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0AE3 Signing time: Mon 30 Jun 2025 19:34:10 +0000 Manifest this update: Mon 30 Jun 2025 19:34:10 +0000 Manifest next update: Mon 07 Jul 2025 19:34:10 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: R/agJGRw1wDSytPjEXwFKZ80ueUSMGt4ecnXidBocIo=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Jun 30 19:34:10 2025 GMT Not After : Jul 7 19:34:10 2025 GMT Subject: CN=6862e6b2-75cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:df:2b:74:bd:98:fc:5d:e6:6e:c1:d2:ea: 3f:06:be:bc:cc:0e:e9:5f:7f:a9:e4:4e:84:82:0b: 83:ee:aa:45:3e:41:66:8d:16:91:33:cf:e8:46:35: 4b:80:f2:4e:d3:fc:59:7e:9f:36:48:1a:cc:c8:40: b5:2c:f3:be:71:49:a5:5d:d1:00:1e:c7:92:65:7d: ce:9a:11:d8:85:5a:2f:ba:58:2e:fd:c0:d4:a4:c2: f9:7e:b4:47:9f:2f:12:36:f2:f3:54:17:aa:f2:9c: f9:0e:5b:b4:9a:d4:09:f8:55:6b:dc:9c:c9:f6:2a: 06:95:9e:51:9c:5d:f0:fd:12:97:4d:99:3a:19:61: c0:b5:fc:97:76:5c:98:1f:d5:a1:51:b2:ba:31:36: 0b:d9:c2:fa:16:b3:fb:d0:23:0b:e0:85:96:42:7b: ab:c3:86:a4:69:d6:d5:22:f5:19:a2:e3:a5:d9:e4: 7f:b8:6e:fd:8b:59:88:35:3f:ab:4a:29:1f:d3:73: 1e:4c:86:16:44:65:5f:4d:c3:c8:6e:a4:a5:52:67: 4d:f6:53:9c:03:e6:52:62:a4:38:10:b3:06:8a:ce: 92:1b:b4:8a:a6:0c:e7:4a:9b:44:c0:ac:f2:d9:2b: 3b:20:d3:be:98:00:7b:f8:3d:94:ed:5c:ef:18:d2: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:B5:7A:59:54:8E:F5:1A:BE:E2:CD:F3:69:31:BF:12:F7:CD:59 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6d:db:2e:49:10:d8:63:d0:18:38:83:f2:b0:50:82:d2:06: 3a:47:20:4f:2c:8c:a9:d6:26:f1:e3:e3:17:6a:a3:df:48:9d: 9f:35:7c:36:46:51:74:23:e1:82:bb:1a:f7:8c:e4:66:1f:5b: 05:1a:eb:af:ed:06:9e:21:14:08:c9:43:b1:de:d2:9a:a8:62: 59:c2:f4:15:98:b0:b6:eb:e7:d8:f3:be:29:c2:e1:f8:b2:e9: 92:ee:56:98:c5:8d:a9:9a:e9:0f:13:99:f6:a2:9b:32:56:88: aa:29:e0:e6:5d:d0:05:0e:f0:f9:9c:78:f7:09:4a:d0:bd:5e: 09:91:80:e0:6a:ac:c7:a3:cc:5b:ba:a3:17:80:16:66:87:ba: a0:24:a4:5d:63:9a:cc:8a:66:69:ea:c8:ab:b6:7c:c3:15:09: 44:5d:37:e7:67:a3:80:da:62:24:ef:62:3f:1b:cc:4d:81:e4: f3:e4:3c:6a:2b:39:79:76:33:ea:0a:0f:ee:90:f4:49:b8:06: 94:53:07:02:df:4a:1d:99:38:47:6e:8a:66:09:01:60:cd:c5: 53:25:4d:e6:78:68:a4:5e:3c:50:01:54:31:f7:f0:03:d6:39: e1:66:2e:f9:8a:90:a6:cc:79:0f:b7:20:d1:c2:e3:df:b0:03: bb:01:8a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNjMwMTkzNDEwWhcNMjUwNzA3MTkzNDEwWjAYMRYwFAYD VQQDEw02ODYyZTZiMi03NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzffK3S9mPxd5m7B0uo/Br68zA7pX3+p5E6EgguD7qpFPkFmjRaRM8/oRjVL gPJO0/xZfp82SBrMyEC1LPO+cUmlXdEAHseSZX3OmhHYhVovulgu/cDUpML5frRH ny8SNvLzVBeq8pz5Dlu0mtQJ+FVr3JzJ9ioGlZ5RnF3w/RKXTZk6GWHAtfyXdlyY H9WhUbK6MTYL2cL6FrP70CML4IWWQnurw4akadbVIvUZouOl2eR/uG79i1mINT+r Sikf03MeTIYWRGVfTcPIbqSlUmdN9lOcA+ZSYqQ4ELMGis6SG7SKpgznSptEwKzy 2Ss7INO+mAB7+D2U7VzvGNKApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwgtXpZ VI71Gr7izfNpMb8S981ZMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnbdsuSRDYY9AYOIPysFCC0gY6RyBPLIyp1ibx4+MXaqPfSJ2fNXw2 RlF0I+GCuxr3jORmH1sFGuuv7QaeIRQIyUOx3tKaqGJZwvQVmLC26+fY874pwuH4 sumS7laYxY2pmukPE5n2opsyVoiqKeDmXdAFDvD5nHj3CUrQvV4JkYDgaqzHo8xb uqMXgBZmh7qgJKRdY5rMimZp6sirtnzDFQlEXTfnZ6OA2mIk72I/G8xNgeTz5Dxq Kzl5djPqCg/ukPRJuAaUUwcC30odmThHbopmCQFgzcVTJU3meGikXjxQAVQx9/AD 1jnhZi75ipCmzHkPtyDRwuPfsAO7AYoC -----END CERTIFICATE-----Generated at Wed Jul 2 16:28:26 2025 by rpki-client