$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: WLjoMS2g8iS42sZXqdDYhhd4zoezuua9XkAD3Jcv7tw= Subject key identifier: E8:99:BE:BD:7F:B4:DA:4C:56:33:D3:42:DD:92:30:4F:C8:13:1B:B6 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 284C Signing time: Mon 30 Jun 2025 15:40:13 +0000 Manifest this update: Mon 30 Jun 2025 15:40:12 +0000 Manifest next update: Mon 07 Jul 2025 15:40:12 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: 3hreBbtauUyCDNnb6uMv2g//nj4j9BDef4jnGZ8FDwA=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=) 5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 6: 9E60B12451BF11F08496463FC4F9AE02.roa (hash: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=) 7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10435 (0x28c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jun 30 15:40:12 2025 GMT Not After : Jul 7 15:40:12 2025 GMT Subject: CN=6862afdc-e247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:cb:f0:cb:74:9a:25:37:7f:b2:87:65:4c: 0d:58:bf:2d:8f:30:cb:19:2f:63:1d:91:5e:a9:dd: 78:a0:d1:d8:58:e2:e2:17:e6:21:67:cc:15:7c:97: 07:bc:33:45:22:52:f0:a3:62:95:6b:06:e5:16:ac: 2f:46:d3:e9:75:7a:95:ae:73:b6:a7:66:c7:51:f5: 55:10:e3:41:7f:59:50:eb:86:96:17:8a:fb:ed:c6: 47:6d:fa:34:48:b4:6d:d6:bf:a8:a4:17:e5:f2:86: ed:62:1a:b8:c3:5a:2a:03:ba:28:fa:ee:ab:7b:bd: af:b5:60:ad:35:3d:3d:c9:bc:39:d3:11:f3:0d:76: 1b:a9:62:f5:c4:b4:5b:d6:2c:14:e8:8e:5c:92:59: a3:f0:f8:d3:b9:64:90:9d:5f:44:13:a4:f0:3b:96: 03:26:d2:30:21:4c:83:1c:a0:46:fd:02:01:ef:40: a0:0b:23:36:6e:f6:48:a4:b8:e9:20:f8:d0:74:b7: e8:e8:69:fb:9b:24:47:13:f7:80:30:1b:a8:82:ee: eb:52:31:a8:f4:de:2d:f0:6d:8d:ab:6d:f7:28:34: e2:3f:65:af:e8:1e:c4:c4:fe:a3:86:ca:2d:45:d5: cd:39:17:dc:e2:29:29:ca:43:5d:6b:65:80:0f:c9: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:99:BE:BD:7F:B4:DA:4C:56:33:D3:42:DD:92:30:4F:C8:13:1B:B6 X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:00:fa:12:67:25:5f:30:cb:a7:c3:4d:03:2a:30:3b:9b:ae: 59:f8:11:e9:13:26:39:08:23:bd:c8:2c:5c:ba:fa:d6:aa:bd: 23:91:16:22:7f:3c:0f:b3:c1:23:c7:f9:73:f0:61:34:6f:4a: 0f:b8:3d:db:48:88:ee:b7:d9:1d:7e:54:d1:f9:73:45:90:ac: 34:63:8f:ed:b9:52:70:d6:77:e7:1c:0b:79:6d:f8:9a:e3:88: e6:75:16:fd:62:ae:fa:b9:87:5e:af:74:0e:4a:82:0c:9e:42: 02:5c:79:38:8b:3c:99:a8:b1:5c:b9:9e:bc:f7:a7:07:6e:42: 2d:8c:62:d4:11:17:22:39:73:2d:99:7c:c0:66:eb:18:5a:a1: 30:70:c0:5c:cc:2d:79:cc:14:81:75:f4:8e:7c:63:d4:3f:7d: 6c:82:98:28:d6:bd:92:a0:9e:44:af:96:8b:a9:36:ec:0d:de: 32:23:f4:66:71:62:22:00:f7:c4:dd:f7:fc:4a:82:dd:c3:bd: c7:26:51:8d:3f:72:ab:ed:00:45:0f:3f:85:e9:af:8a:bf:ea: c4:04:0d:31:5d:74:ef:35:08:c5:3e:2a:1b:6a:c7:68:59:f4: a7:48:aa:89:38:ca:c9:11:62:a1:4a:da:0d:5a:e3:57:bb:98: 1a:5f:13:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNjMwMTU0MDEyWhcNMjUwNzA3MTU0MDEyWjAYMRYwFAYD VQQDEw02ODYyYWZkYy1lMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQTL8Mt0miU3f7KHZUwNWL8tjzDLGS9jHZFeqd14oNHYWOLiF+YhZ8wVfJcH vDNFIlLwo2KVawblFqwvRtPpdXqVrnO2p2bHUfVVEONBf1lQ64aWF4r77cZHbfo0 SLRt1r+opBfl8obtYhq4w1oqA7oo+u6re72vtWCtNT09ybw50xHzDXYbqWL1xLRb 1iwU6I5cklmj8PjTuWSQnV9EE6TwO5YDJtIwIUyDHKBG/QIB70CgCyM2bvZIpLjp IPjQdLfo6Gn7myRHE/eAMBuogu7rUjGo9N4t8G2Nq233KDTiP2Wv6B7ExP6jhsot RdXNORfc4ikpykNda2WAD8ndpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiZvr1/ tNpMVjPTQt2SME/IExu2MB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5APoSZyVfMMunw00DKjA7m65Z+BHpEyY5CCO9yCxcuvrWqr0jkRYi fzwPs8Ejx/lz8GE0b0oPuD3bSIjut9kdflTR+XNFkKw0Y4/tuVJw1nfnHAt5bfia 44jmdRb9Yq76uYder3QOSoIMnkICXHk4izyZqLFcuZ6896cHbkItjGLUERciOXMt mXzAZusYWqEwcMBczC15zBSBdfSOfGPUP31sgpgo1r2SoJ5Er5aLqTbsDd4yI/Rm cWIiAPfE3ff8SoLdw73HJlGNP3Kr7QBFDz+F6a+Kv+rEBA0xXXTvNQjFPiobasdo WfSnSKqJOMrJEWKhStoNWuNXu5gaXxPJ -----END CERTIFICATE-----Generated at Tue Jul 1 13:33:59 2025 by rpki-client