$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: tiB0nUXzkYfPP+rHrJ5S7EnPEZTAiX/ohuoWJ3gdW1s= Subject key identifier: 40:2E:71:AE:C4:BD:99:74:FC:6A:CA:4C:94:B1:59:E0:45:55:5D:1C Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 3496 Signing time: Wed 02 Jul 2025 14:41:16 +0000 Manifest this update: Wed 02 Jul 2025 14:41:16 +0000 Manifest next update: Wed 09 Jul 2025 14:41:16 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: d4D5mV805U2SBWteKblScWP0Q8tTr1O//fs2yMMnevs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Jul 2 14:41:16 2025 GMT Not After : Jul 9 14:41:16 2025 GMT Subject: CN=6865450c-e063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:fe:63:d1:64:9a:05:96:7a:49:a2:a5:a7: d4:dc:49:24:70:21:01:30:4c:e6:35:83:60:b3:59: 3c:7c:5a:be:d2:81:06:9d:89:a1:43:32:bb:50:d1: 4a:27:a6:28:69:db:f0:c8:b0:c8:dd:87:7e:8b:37: 72:da:6e:51:0a:e5:99:d6:3c:d3:fa:a9:21:d3:44: 42:ae:7f:ca:a1:1b:92:a9:88:b4:23:d7:f5:0a:e0: 6d:cc:a2:8f:d6:26:d3:34:99:0a:21:ec:67:f5:3b: ae:c3:75:bb:2d:1a:b7:cc:32:36:f0:12:5e:45:08: 78:a0:cc:b5:ec:3d:7e:b4:3b:65:84:4b:d8:47:07: 81:20:42:03:34:7c:54:5f:1b:0d:5e:b1:6d:e4:df: 63:e2:eb:ad:8a:df:e9:be:d5:7f:07:1f:6d:ea:9d: f7:dc:33:a6:df:e8:c4:80:ee:7d:1e:3b:e4:11:f9: 36:33:bc:54:8d:48:ca:9a:db:38:35:0c:38:f7:05: 6e:dd:09:7c:7f:3e:2e:79:e2:2d:ee:23:66:60:79: 41:b2:5a:80:63:93:e5:01:65:91:29:23:44:b6:bf: 61:6e:b0:9a:87:82:61:2d:a9:65:17:48:a3:d0:98: cf:fd:29:44:8a:bb:1b:e6:99:54:47:e2:20:a1:2f: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2E:71:AE:C4:BD:99:74:FC:6A:CA:4C:94:B1:59:E0:45:55:5D:1C X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9c:f3:52:6b:ef:93:9a:5b:a7:43:e8:16:bc:41:2c:0d:d0: ef:47:cd:7a:fc:ca:f7:5a:49:b7:55:17:5e:a0:51:9f:af:2c: 17:77:c5:81:b2:27:4a:ad:0f:03:cb:ee:2d:e5:d9:30:32:39: da:70:3a:a3:61:78:ac:80:56:30:35:2c:63:5b:b5:2f:57:d6: 6e:c7:99:34:7c:db:89:e1:e4:b0:6e:29:73:b3:d3:f4:ef:8e: 0d:82:0d:33:af:2b:d3:52:cd:f2:32:ef:47:ff:64:ce:4f:32: 00:a9:df:aa:3a:91:d9:10:fa:67:be:30:b7:f3:22:d6:17:33: d6:8e:0e:63:0b:45:53:9f:9a:9f:4f:60:bd:1e:e8:cd:41:6c: 11:15:ca:95:38:ff:19:fe:11:74:ea:cb:19:79:84:72:5d:fe: c8:61:71:1a:4b:e4:aa:45:52:9e:17:1c:33:e6:83:07:cf:e1: 25:c2:27:44:a7:8d:96:b0:82:d4:90:98:0e:f5:d0:94:5d:fe: 0c:16:cc:ab:c8:01:db:87:6e:41:d6:e2:b9:d5:ac:58:da:35: af:95:5f:2f:6d:3d:b6:76:bc:b1:7c:b9:48:47:0f:f1:fb:91: 72:fd:66:61:47:d0:13:93:1d:0d:28:6b:00:73:3e:b5:60:e3: de:16:e6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwNzAyMTQ0MTE2WhcNMjUwNzA5MTQ0MTE2WjAYMRYwFAYD VQQDEw02ODY1NDUwYy1lMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9D+Y9FkmgWWekmipafU3EkkcCEBMEzmNYNgs1k8fFq+0oEGnYmhQzK7UNFK J6YoadvwyLDI3Yd+izdy2m5RCuWZ1jzT+qkh00RCrn/KoRuSqYi0I9f1CuBtzKKP 1ibTNJkKIexn9Tuuw3W7LRq3zDI28BJeRQh4oMy17D1+tDtlhEvYRweBIEIDNHxU XxsNXrFt5N9j4uutit/pvtV/Bx9t6p333DOm3+jEgO59HjvkEfk2M7xUjUjKmts4 NQw49wVu3Ql8fz4ueeIt7iNmYHlBslqAY5PlAWWRKSNEtr9hbrCah4JhLallF0ij 0JjP/SlEirsb5plUR+IgoS/ffwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAuca7E vZl0/GrKTJSxWeBFVV0cMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApnPNSa++TmlunQ+gWvEEsDdDvR816/Mr3Wkm3VRdeoFGfrywXd8WB sidKrQ8Dy+4t5dkwMjnacDqjYXisgFYwNSxjW7UvV9Zux5k0fNuJ4eSwbilzs9P0 744Ngg0zryvTUs3yMu9H/2TOTzIAqd+qOpHZEPpnvjC38yLWFzPWjg5jC0VTn5qf T2C9HujNQWwRFcqVOP8Z/hF06ssZeYRyXf7IYXEaS+SqRVKeFxwz5oMHz+ElwidE p42WsILUkJgO9dCUXf4MFsyryAHbh25B1uK51axY2jWvlV8vbT22dryxfLlIRw/x +5Fy/WZhR9ATkx0NKGsAcz61YOPeFuaa -----END CERTIFICATE-----Generated at Thu Jul 3 00:51:15 2025 by rpki-client