$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: cU2vmtcrOJF0s1vcPt2uD/ljE5BIF7WXWJRGcmLjeok= Subject key identifier: 2F:AD:15:76:EE:0A:AA:BD:64:B6:56:64:E4:7E:C3:25:06:6C:11:76 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 015E Signing time: Thu 03 Jul 2025 04:06:52 +0000 Manifest this update: Thu 03 Jul 2025 04:06:51 +0000 Manifest next update: Thu 10 Jul 2025 04:06:51 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: CPcMz4LGZXFVFuqWkApB79c5kCpRQrWoUlhxPne9edE=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Jul 3 04:06:51 2025 GMT Not After : Jul 10 04:06:51 2025 GMT Subject: CN=686601dc-ce39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:cd:d7:f9:a4:2c:0e:fe:1c:69:4a:33:90: 97:cc:61:a6:1e:fc:ec:f4:eb:df:5e:6d:b6:3a:f7: ba:bd:e4:d2:2e:c8:1c:d8:5d:47:af:a3:8b:c0:18: 40:b2:19:aa:56:df:3a:cb:03:03:2b:d4:dd:cf:79: 88:ff:1e:0d:c2:d9:7f:0d:c3:cf:83:67:36:e1:4c: 51:97:04:e4:1d:ed:cc:04:09:1b:78:01:ab:ce:c0: 6f:c3:92:ce:a8:82:8f:2e:c0:d4:46:59:98:25:06: 18:ba:01:29:f5:32:18:ec:bd:a1:17:1b:df:3d:9a: 9c:7c:99:f9:3a:fd:75:ab:79:d8:aa:7e:bb:77:e5: 26:5c:5a:35:af:ba:1d:19:b9:67:11:2c:bb:21:92: 63:00:d1:9d:15:1c:fc:94:9b:de:39:f7:67:0d:1d: f4:46:2d:21:b9:20:b1:8f:9d:e4:c1:1e:1a:de:ea: 8a:e5:5c:71:bf:21:33:b6:38:8c:06:8a:5d:3b:3f: eb:00:b2:e0:2f:4b:30:19:9c:89:5c:48:6d:56:83: 20:76:2c:06:8f:eb:1e:04:1b:da:11:b3:2d:4a:fd: 19:60:aa:a8:e1:61:b9:0f:24:a8:d2:82:60:02:4f: 42:be:45:74:19:68:f5:de:96:54:e5:a8:24:96:69: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:15:76:EE:0A:AA:BD:64:B6:56:64:E4:7E:C3:25:06:6C:11:76 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4d:dd:fe:a0:5a:8f:22:4a:a6:9f:0b:dc:69:c9:37:54:26: 1b:ae:dd:16:35:af:8b:5d:8f:a6:0d:19:b1:7e:ad:93:81:b0: f6:66:7a:00:e2:c4:7d:4c:54:15:42:d4:52:53:1e:8e:fa:e8: f9:f1:67:b6:82:64:db:08:21:fc:2f:54:a2:f6:f1:98:1b:f6: ee:b5:38:ad:43:ac:12:c3:fb:a0:8d:ed:fa:ea:3e:5f:45:22: 31:47:4c:47:bb:fa:48:31:26:77:9f:48:9f:03:3a:8a:9e:85: 17:9d:f5:68:5c:ab:d2:e5:ab:61:51:b3:37:4c:32:e8:a2:8b: ff:b7:21:c2:43:0b:d4:23:48:a6:75:2d:ef:e2:09:0f:e3:0c: ec:1b:7a:78:a6:8e:f6:a2:1c:d6:6b:c9:bd:b8:da:15:30:e0: ef:36:d3:87:40:e9:a6:fe:cc:5d:34:b5:f9:69:e1:57:36:95: cb:72:7d:f3:7d:38:d7:3a:99:d4:e5:7a:32:1d:d5:1a:ec:21: ac:c7:6b:0f:7e:2c:83:8e:35:b6:14:bb:3a:0b:94:72:96:fe: 9c:74:33:64:07:51:f4:32:41:a7:fa:3a:7f:3a:84:9a:2a:e8: 2d:49:26:e4:b2:d6:6b:6c:fc:d9:cd:37:6d:48:bb:99:a6:05: 1e:b2:0b:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUwNzAzMDQwNjUxWhcNMjUwNzEwMDQwNjUxWjAYMRYwFAYD VQQDEw02ODY2MDFkYy1jZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhDN1/mkLA7+HGlKM5CXzGGmHvzs9OvfXm22Ove6veTSLsgc2F1Hr6OLwBhA shmqVt86ywMDK9Tdz3mI/x4Nwtl/DcPPg2c24UxRlwTkHe3MBAkbeAGrzsBvw5LO qIKPLsDURlmYJQYYugEp9TIY7L2hFxvfPZqcfJn5Ov11q3nYqn67d+UmXFo1r7od GblnESy7IZJjANGdFRz8lJveOfdnDR30Ri0huSCxj53kwR4a3uqK5VxxvyEztjiM BopdOz/rALLgL0swGZyJXEhtVoMgdiwGj+seBBvaEbMtSv0ZYKqo4WG5DySo0oJg Ak9CvkV0GWj13pZU5agklmlzhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+tFXbu Cqq9ZLZWZOR+wyUGbBF2MB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgTd3+oFqPIkqmnwvcack3VCYbrt0WNa+LXY+mDRmxfq2TgbD2ZnoA 4sR9TFQVQtRSUx6O+uj58We2gmTbCCH8L1Si9vGYG/butTitQ6wSw/ugje366j5f RSIxR0xHu/pIMSZ3n0ifAzqKnoUXnfVoXKvS5athUbM3TDLooov/tyHCQwvUI0im dS3v4gkP4wzsG3p4po72ohzWa8m9uNoVMODvNtOHQOmm/sxdNLX5aeFXNpXLcn3z fTjXOpnU5XoyHdUa7CGsx2sPfiyDjjW2FLs6C5Rylv6cdDNkB1H0MkGn+jp/OoSa KugtSSbkstZrbPzZzTdtSLuZpgUesgsv -----END CERTIFICATE-----Generated at Thu Jul 3 14:12:41 2025 by rpki-client