$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: Z/7NmOF7rNZsbuanGOR4HXD163+hFFx7Kn2yuApop+8= Subject key identifier: 87:E7:B0:11:B4:D8:A1:58:E2:DE:85:66:F3:DF:1A:8A:E9:2B:AA:24 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1172 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 116B Signing time: Wed 02 Jul 2025 17:25:59 +0000 Manifest this update: Wed 02 Jul 2025 17:25:58 +0000 Manifest next update: Wed 09 Jul 2025 17:25:58 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: U+1crKDh+ENen4KkBv6EbkYY5X5R5QrDpc1HAqy2US8=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4466 (0x1172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jul 2 17:25:58 2025 GMT Not After : Jul 9 17:25:58 2025 GMT Subject: CN=68656ba7-c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:49:98:9f:ea:c5:9d:89:08:a3:5a:69:42: aa:7b:b6:7c:30:e3:37:01:95:8b:c1:96:14:ae:0e: 61:7a:fe:31:75:5b:5c:7c:78:fa:37:6a:c1:1c:d9: a0:8a:d0:6e:41:b6:fd:0b:d1:a4:e5:07:2f:89:b9: a4:a2:2d:38:39:76:0e:93:a1:a8:cf:9d:be:e5:02: 38:44:61:c7:bb:9a:e4:15:c9:6e:58:47:ad:6e:15: 23:5f:55:e1:1d:44:79:6a:52:67:b2:dc:3f:19:ff: 08:08:b9:c2:b8:bb:80:ba:08:67:03:eb:9a:bd:d0: ae:00:fe:5c:7b:0a:f7:de:d4:62:1c:e1:f5:18:33: 13:09:42:df:39:bd:03:f0:2c:bc:e0:69:4c:2d:23: d9:12:dc:5c:ff:e8:0d:95:76:f4:d2:dd:7b:35:bf: c4:d6:03:5b:7d:42:43:6a:ab:e8:30:b5:00:f2:81: 74:d0:24:70:72:75:d4:3a:44:23:69:ed:bf:f8:f2: d8:d8:3d:74:d5:34:26:07:7d:17:5e:3f:80:31:96: e8:4d:01:37:9b:22:fd:38:30:6f:b7:5a:b0:dc:5f: 40:02:5e:f1:38:f3:74:03:54:d0:45:37:9c:eb:25: 8e:57:cb:2f:b7:5e:3e:cc:2f:e9:17:a7:c4:f8:31: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E7:B0:11:B4:D8:A1:58:E2:DE:85:66:F3:DF:1A:8A:E9:2B:AA:24 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:79:eb:fe:68:03:89:30:76:94:ee:2f:04:e4:c8:ff:41:d7: ba:b1:4f:06:7e:1a:75:79:8f:60:81:71:c0:7c:11:09:be:2b: 6f:d8:5b:7e:20:c3:fa:4b:95:9c:e6:74:fe:c2:ac:7e:4c:91: 06:bf:8f:12:40:bc:d8:0f:01:47:2b:75:19:82:14:9a:48:ec: 35:f9:c9:0d:45:9a:a0:a5:0b:4c:79:e6:78:28:b0:a0:9a:2d: 8b:c5:dd:42:17:d2:a7:6b:c3:5a:d7:a7:3f:7f:05:dc:46:94: 5d:a6:56:b4:d5:4e:cf:e9:33:ce:95:70:8a:6c:f8:f4:f7:47: 6c:1d:3c:94:d8:a0:8d:1f:fe:f8:2a:b8:b8:a3:cb:52:09:6f: 25:dd:d0:ac:3c:60:ae:45:73:5e:66:e9:01:f9:aa:de:8b:5f: a9:9f:d4:84:bf:e0:6b:9d:21:79:dd:fa:37:0b:b9:53:fb:24: 31:cf:8e:fc:70:bc:fe:00:5e:14:2e:d6:83:f9:57:61:ab:8a: aa:0a:dd:3e:3b:de:ca:00:0d:0b:10:57:8a:b5:7b:c6:17:b7: 3b:db:ce:13:c0:ab:bb:8f:32:c8:2e:9d:9e:45:ea:61:15:46: 8b:0b:79:65:69:d5:67:c2:a6:9c:b8:a3:44:46:98:15:70:82: 11:f5:4d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwNzAyMTcyNTU4WhcNMjUwNzA5MTcyNTU4WjAYMRYwFAYD VQQDEw02ODY1NmJhNy1jNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DxJmJ/qxZ2JCKNaaUKqe7Z8MOM3AZWLwZYUrg5hev4xdVtcfHj6N2rBHNmg itBuQbb9C9Gk5Qcvibmkoi04OXYOk6Goz52+5QI4RGHHu5rkFcluWEetbhUjX1Xh HUR5alJnstw/Gf8ICLnCuLuAughnA+uavdCuAP5cewr33tRiHOH1GDMTCULfOb0D 8Cy84GlMLSPZEtxc/+gNlXb00t17Nb/E1gNbfUJDaqvoMLUA8oF00CRwcnXUOkQj ae2/+PLY2D101TQmB30XXj+AMZboTQE3myL9ODBvt1qw3F9AAl7xOPN0A1TQRTec 6yWOV8svt14+zC/pF6fE+DHWGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfnsBG0 2KFY4t6FZvPfGorpK6okMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCneev+aAOJMHaU7i8E5Mj/Qde6sU8Gfhp1eY9ggXHAfBEJvitv2Ft+ IMP6S5Wc5nT+wqx+TJEGv48SQLzYDwFHK3UZghSaSOw1+ckNRZqgpQtMeeZ4KLCg mi2Lxd1CF9Kna8Na16c/fwXcRpRdpla01U7P6TPOlXCKbPj090dsHTyU2KCNH/74 Kri4o8tSCW8l3dCsPGCuRXNeZukB+arei1+pn9SEv+BrnSF53fo3C7lT+yQxz478 cLz+AF4ULtaD+Vdhq4qqCt0+O97KAA0LEFeKtXvGF7c7284TwKu7jzLILp2eReph FUaLC3lladVnwqacuKNERpgVcIIR9U2I -----END CERTIFICATE-----Generated at Fri Jul 4 11:14:12 2025 by rpki-client