$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: tJmqHq7O2mO00C2LZVu2AKrEQJXLUC6gupSkLckDyho= Subject key identifier: 4A:F7:94:5F:B4:4F:ED:F6:D0:91:C3:40:2F:21:6B:B2:85:B3:97:CE Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9A50 Signing time: Mon 30 Jun 2025 15:18:50 +0000 Manifest this update: Mon 30 Jun 2025 15:18:50 +0000 Manifest next update: Mon 07 Jul 2025 15:18:50 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: /hO2FJ/Gdhq++OZcuAnlGd5mbGf9kSrvUjA9d0UOYq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Jun 30 15:18:50 2025 GMT Not After : Jul 7 15:18:50 2025 GMT Subject: CN=6862aada-5d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cf:95:8a:93:78:50:d8:b6:3b:a7:18:0a:28: 72:f6:d0:59:c0:e5:45:2e:cb:24:5a:2f:6e:95:8f: 9c:d0:3f:c9:30:86:91:40:58:d8:d8:8b:b2:a9:2a: a3:5b:a1:1b:94:42:42:41:0d:1a:52:54:17:0e:99: 63:dc:92:2e:b2:61:dd:d5:ff:15:4e:c8:54:88:e1: e2:85:20:a5:de:b4:f1:e3:c3:e1:55:c3:d1:c6:e8: b1:d1:ed:9d:84:dd:c1:84:53:91:f6:b5:27:85:8b: 73:19:59:c2:ed:ce:01:0a:4a:1c:09:17:11:4e:8a: ee:d2:ee:92:59:08:33:ee:cc:a9:e4:82:1e:5a:59: 9c:6f:e9:15:1d:45:c5:e9:82:45:7b:66:80:88:05: 97:47:95:17:50:49:54:c7:1b:fe:a8:89:17:c5:59: 01:28:c2:47:95:c9:35:18:ca:3d:f6:a5:4b:f1:f2: 0c:c7:7f:8e:39:d0:6d:50:39:aa:3b:e3:54:a8:36: 68:be:30:8f:63:f9:d5:35:14:d3:22:bd:61:e9:eb: 05:ed:e5:7d:eb:4b:5f:a9:a3:94:cd:13:4f:54:34: ec:4d:f6:d4:94:0f:3c:1d:a8:ed:58:fc:f2:46:a5: e5:5a:28:96:62:4a:17:ab:0a:3a:3a:f2:73:41:7a: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:94:5F:B4:4F:ED:F6:D0:91:C3:40:2F:21:6B:B2:85:B3:97:CE X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:77:db:3a:b8:6c:05:c1:ac:83:38:27:77:29:0d:62:62:0d: 2d:0f:8e:97:2b:31:82:b2:6e:66:18:16:29:17:66:a8:21:85: 09:01:17:a1:8d:85:6e:09:5a:78:15:3b:16:1f:fb:31:b9:23: 8e:f4:69:37:ce:ad:1e:9d:77:6f:0b:af:cb:41:2d:78:70:40: 41:f2:5f:d4:9f:e9:46:0d:4d:f1:95:5e:bb:e5:18:1d:c6:19: 45:62:cd:0c:cb:08:4a:2c:c2:4f:f5:cc:c3:7c:be:b7:b7:b5: 50:9c:49:e5:64:58:37:08:84:09:72:81:6e:79:ff:ad:36:38: f8:6a:63:09:0e:8a:84:80:6c:71:f7:01:ac:a9:c6:d3:71:3f: 82:72:f5:9a:2e:1e:41:60:ce:42:91:cc:88:02:10:24:a3:65: f0:88:d5:ea:c2:02:98:eb:c9:12:ee:18:4f:7c:97:08:06:ae: 97:31:06:be:ba:19:5f:99:79:cb:2b:be:4e:56:ea:44:12:11: 28:be:7b:49:76:a0:9b:26:d4:48:6e:a2:22:10:4e:b9:84:b6: 4c:c2:d6:be:02:92:45:9d:16:a1:98:55:cf:20:3b:8c:62:ff: be:f9:27:af:44:e5:bc:fb:23:26:19:85:70:42:24:f8:7b:e4: 23:f5:06:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUwNjMwMTUxODUwWhcNMjUwNzA3MTUxODUwWjAYMRYwFAYD VQQDEw02ODYyYWFkYS01ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s+VipN4UNi2O6cYCihy9tBZwOVFLsskWi9ulY+c0D/JMIaRQFjY2IuyqSqj W6EblEJCQQ0aUlQXDplj3JIusmHd1f8VTshUiOHihSCl3rTx48PhVcPRxuix0e2d hN3BhFOR9rUnhYtzGVnC7c4BCkocCRcRToru0u6SWQgz7syp5IIeWlmcb+kVHUXF 6YJFe2aAiAWXR5UXUElUxxv+qIkXxVkBKMJHlck1GMo99qVL8fIMx3+OOdBtUDmq O+NUqDZovjCPY/nVNRTTIr1h6esF7eV960tfqaOUzRNPVDTsTfbUlA88HajtWPzy RqXlWiiWYkoXqwo6OvJzQXrghQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr3lF+0 T+320JHDQC8ha7KFs5fOMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwd9s6uGwFwayDOCd3KQ1iYg0tD46XKzGCsm5mGBYpF2aoIYUJAReh jYVuCVp4FTsWH/sxuSOO9Gk3zq0enXdvC6/LQS14cEBB8l/Un+lGDU3xlV675Rgd xhlFYs0MywhKLMJP9czDfL63t7VQnEnlZFg3CIQJcoFuef+tNjj4amMJDoqEgGxx 9wGsqcbTcT+CcvWaLh5BYM5CkcyIAhAko2XwiNXqwgKY68kS7hhPfJcIBq6XMQa+ uhlfmXnLK75OVupEEhEovntJdqCbJtRIbqIiEE65hLZMwta+ApJFnRahmFXPIDuM Yv+++SevROW8+yMmGYVwQiT4e+Qj9QZ6 -----END CERTIFICATE-----Generated at Mon Jun 30 18:59:00 2025 by rpki-client