$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: 2zUpXyJ9ZbACTMHnKxCXZOZDXWmUDIusV4I5XNeOsls= Subject key identifier: A5:4E:BD:70:7A:5E:78:F2:8C:F1:95:06:C9:21:74:57:6F:CE:10:13 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04C1 Signing time: Tue 01 Jul 2025 00:22:08 +0000 Manifest this update: Tue 01 Jul 2025 00:22:08 +0000 Manifest next update: Tue 08 Jul 2025 00:22:08 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: Zks30cyGw4rYmabMGWwObmtxYWqY2cPL0zZO1pm78OQ=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Jul 1 00:22:08 2025 GMT Not After : Jul 8 00:22:08 2025 GMT Subject: CN=68632a30-d905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:82:9b:cb:5b:ec:db:c2:32:5c:f6:38:ac: 88:51:e7:9b:43:4f:d0:03:61:b8:eb:c5:0f:d8:ad: ad:b8:67:ed:29:66:57:e4:4a:e0:7d:61:90:5d:14: 91:02:8d:9a:94:ad:71:e3:60:a4:9a:ce:ef:36:80: 27:e6:0f:89:52:f3:1e:72:4e:b2:33:b4:ad:e0:4c: 0c:27:4e:b7:b1:80:a5:1d:81:0e:a0:cf:46:04:75: ca:13:fb:31:84:e4:27:d5:51:72:79:2b:02:82:82: 0e:99:66:f6:0e:34:df:49:b7:17:b2:ec:1a:c3:9c: 42:fd:ab:6e:35:17:31:3b:f5:9d:de:ab:18:e6:96: 01:96:c9:87:0e:20:fa:49:ce:cf:4e:fa:cc:b5:63: 2a:c8:aa:11:f5:81:70:d4:ab:44:ff:3e:9a:c6:8a: 73:87:0d:eb:5d:41:3a:95:e3:2c:c4:0e:73:6d:e1: 5a:25:45:cf:ba:af:90:39:1d:cd:c5:8d:c3:e0:0b: 4b:31:fe:8a:35:0d:69:1f:1c:03:6c:3e:35:48:9d: 70:ba:c3:db:fc:74:3b:aa:82:d7:3a:d1:7c:01:71: a0:52:40:33:91:19:57:9b:d4:6c:48:44:69:69:94: 4f:4b:15:21:f1:2f:db:79:2d:ea:ff:9b:f7:4c:42: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4E:BD:70:7A:5E:78:F2:8C:F1:95:06:C9:21:74:57:6F:CE:10:13 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e5:6d:cf:05:3c:02:61:d1:38:71:84:45:8c:46:60:4d:1e: c8:f2:a8:f2:74:ef:71:c1:8d:40:be:f8:31:51:cd:09:9e:fa: 20:0f:ea:9f:b1:cf:fb:17:cc:86:56:41:d4:de:33:11:ec:70: 9e:bb:f4:73:d7:b9:dd:2c:2a:fb:50:a2:c1:29:7f:58:41:1e: 53:13:1b:e5:b1:2c:2d:91:f4:2a:63:2f:6e:eb:02:3b:6e:1f: 4e:47:96:0f:6c:9d:78:63:4c:ec:e4:8b:ba:aa:43:d5:6b:2b: 5e:15:de:01:9d:9c:64:99:5f:3b:c9:87:db:3e:55:dd:a4:b5: ff:a1:cf:8d:df:b0:12:b4:8b:9d:0f:fc:f0:5b:9d:01:55:f5: 8a:2b:58:49:21:9e:0a:dd:f1:26:b4:86:9e:0a:8e:dc:de:b1: 11:fb:ef:7c:35:54:de:98:cf:55:d3:38:f5:3d:d0:65:a1:b5: d2:cc:11:bf:2f:21:ad:7e:64:c2:45:49:ff:74:4d:89:82:12: 70:f5:3e:42:71:b6:f5:38:1b:ba:5b:60:60:a2:6a:a4:ff:40: 8d:df:3d:b1:d8:bc:47:0d:3e:03:95:cd:58:79:eb:b0:bf:12: ee:91:53:e1:bc:ce:a8:05:d0:c1:ed:dc:aa:0c:6d:f4:7c:5b: f2:b5:76:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwNzAxMDAyMjA4WhcNMjUwNzA4MDAyMjA4WjAYMRYwFAYD VQQDEw02ODYzMmEzMC1kOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBOCm8tb7NvCMlz2OKyIUeebQ0/QA2G468UP2K2tuGftKWZX5ErgfWGQXRSR Ao2alK1x42Ckms7vNoAn5g+JUvMeck6yM7St4EwMJ063sYClHYEOoM9GBHXKE/sx hOQn1VFyeSsCgoIOmWb2DjTfSbcXsuwaw5xC/atuNRcxO/Wd3qsY5pYBlsmHDiD6 Sc7PTvrMtWMqyKoR9YFw1KtE/z6axopzhw3rXUE6leMsxA5zbeFaJUXPuq+QOR3N xY3D4AtLMf6KNQ1pHxwDbD41SJ1wusPb/HQ7qoLXOtF8AXGgUkAzkRlXm9RsSERp aZRPSxUh8S/beS3q/5v3TEJwjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVOvXB6 XnjyjPGVBskhdFdvzhATMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ5W3PBTwCYdE4cYRFjEZgTR7I8qjydO9xwY1AvvgxUc0JnvogD+qf sc/7F8yGVkHU3jMR7HCeu/Rz17ndLCr7UKLBKX9YQR5TExvlsSwtkfQqYy9u6wI7 bh9OR5YPbJ14Y0zs5Iu6qkPVayteFd4BnZxkmV87yYfbPlXdpLX/oc+N37AStIud D/zwW50BVfWKK1hJIZ4K3fEmtIaeCo7c3rER++98NVTemM9V0zj1PdBlobXSzBG/ LyGtfmTCRUn/dE2JghJw9T5Ccbb1OBu6W2Bgomqk/0CN3z2x2LxHDT4Dlc1Yeeuw vxLukVPhvM6oBdDB7dyqDG30fFvytXZO -----END CERTIFICATE-----Generated at Wed Jul 2 20:17:24 2025 by rpki-client