$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: HmVPx/17yeeSm5UBOwblVcPyOr0I9Nvew9pOH7BKS3o= Subject key identifier: 8C:4F:C3:5C:28:72:BA:43:47:47:C1:CC:1D:3F:F9:CF:C7:23:39:68 Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 068A Signing time: Mon 30 Jun 2025 22:34:38 +0000 Manifest this update: Mon 30 Jun 2025 22:34:37 +0000 Manifest next update: Mon 07 Jul 2025 22:34:37 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: KzU7S/p/OOcw7JiRX/k4S34LyO7/2SmJ/CcqlGkZ3xo=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Jun 30 22:34:37 2025 GMT Not After : Jul 7 22:34:37 2025 GMT Subject: CN=686310fe-9b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:71:8b:8e:37:f4:07:11:a2:1e:06:10:07: bf:44:b6:cb:25:3d:51:19:14:c3:c1:5a:bf:cf:56: 37:ab:d5:f3:e1:bf:93:72:dc:fa:cc:c9:82:3c:f9: 33:c3:26:72:f2:30:8a:76:62:cd:69:dc:4f:30:de: ac:56:bc:55:16:fa:0e:06:49:3f:c9:f3:36:4c:c4: 9a:ad:de:1b:2b:bc:90:7a:a3:e9:a5:ee:86:99:86: f1:98:21:4f:a4:ce:23:d3:f3:11:4e:5a:76:17:5e: b8:81:3c:b7:29:cd:28:8b:71:32:11:d8:5d:75:e1: a1:e6:1f:d5:4a:23:d6:83:6a:a4:5a:b0:c5:14:61: 6d:9e:d7:78:72:3e:ec:70:19:0d:cb:46:e9:e3:b5: 03:1d:d5:1b:31:79:b8:bd:d6:91:d2:14:8c:1e:ad: b3:a4:12:e2:fb:c9:11:72:d6:27:b3:2b:06:2d:48: cf:f9:3b:d7:58:05:7d:10:af:bc:0d:67:b7:8f:c3: c4:87:4a:38:2e:b4:f4:5c:51:84:fc:b5:47:9c:04: 45:d9:f3:61:27:22:60:42:96:58:81:a0:dd:75:e8: d5:c2:c8:0d:b8:0d:aa:ea:ec:43:36:b8:f7:e9:6c: 10:6b:83:c8:d3:ff:15:d0:90:79:43:ca:40:be:78: 36:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:C3:5C:28:72:BA:43:47:47:C1:CC:1D:3F:F9:CF:C7:23:39:68 X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ff:7a:11:04:9d:80:9a:87:2d:58:6d:81:8d:60:ba:a2:11: 6f:25:b2:8a:c1:41:da:a5:dc:65:6a:4d:06:dd:3a:82:ab:07: f9:6f:fa:70:eb:4e:e1:0a:1d:80:5e:db:49:00:cc:00:6a:71: d6:61:34:ad:64:de:74:32:63:5e:3e:b7:3f:73:84:2e:e9:af: 73:e2:fb:00:c2:84:28:b3:27:9b:f2:75:43:2c:46:5e:b8:70: 81:50:02:83:d8:00:7b:92:a0:28:01:50:47:4b:a6:a0:4d:7d: fe:6e:35:1b:80:c6:f1:0c:c8:b2:26:75:5e:a3:9c:0c:91:1b: 21:a6:ca:46:be:f2:ae:3e:ed:13:38:8f:7f:81:41:ef:82:a6: fb:51:39:b6:eb:24:5e:d7:9d:5c:f2:16:f8:35:e0:6b:29:31: 54:8f:f1:f8:c5:00:ed:12:5e:cb:c3:57:3b:36:64:1c:2f:6a: 33:77:c1:92:da:ea:a4:a1:d5:e3:5b:e7:26:f6:f3:51:af:bc: 60:cc:f7:e6:8c:7f:23:63:58:ec:10:43:3a:6d:30:db:c7:5b: a4:fd:68:3a:2b:fa:36:8c:7d:0e:ce:a0:c7:14:72:35:f4:43: 5d:c2:01:8e:ff:1a:95:a2:af:c7:bb:a8:f6:41:12:12:85:d0: bf:5e:cb:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNjMwMjIzNDM3WhcNMjUwNzA3MjIzNDM3WjAYMRYwFAYD VQQDEw02ODYzMTBmZS05Yjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7lxi4439AcRoh4GEAe/RLbLJT1RGRTDwVq/z1Y3q9Xz4b+Tctz6zMmCPPkz wyZy8jCKdmLNadxPMN6sVrxVFvoOBkk/yfM2TMSard4bK7yQeqPppe6GmYbxmCFP pM4j0/MRTlp2F164gTy3Kc0oi3EyEdhddeGh5h/VSiPWg2qkWrDFFGFtntd4cj7s cBkNy0bp47UDHdUbMXm4vdaR0hSMHq2zpBLi+8kRctYnsysGLUjP+TvXWAV9EK+8 DWe3j8PEh0o4LrT0XFGE/LVHnARF2fNhJyJgQpZYgaDddejVwsgNuA2q6uxDNrj3 6WwQa4PI0/8V0JB5Q8pAvng2MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxPw1wo crpDR0fBzB0/+c/HIzloMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu/3oRBJ2AmoctWG2BjWC6ohFvJbKKwUHapdxlak0G3TqCqwf5b/pw 607hCh2AXttJAMwAanHWYTStZN50MmNePrc/c4Qu6a9z4vsAwoQosyeb8nVDLEZe uHCBUAKD2AB7kqAoAVBHS6agTX3+bjUbgMbxDMiyJnVeo5wMkRshpspGvvKuPu0T OI9/gUHvgqb7UTm26yRe151c8hb4NeBrKTFUj/H4xQDtEl7Lw1c7NmQcL2ozd8GS 2uqkodXjW+cm9vNRr7xgzPfmjH8jY1jsEEM6bTDbx1uk/Wg6K/o2jH0OzqDHFHI1 9ENdwgGO/xqVoq/Hu6j2QRIShdC/XsuA -----END CERTIFICATE-----Generated at Wed Jul 2 12:10:15 2025 by rpki-client