$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: c5rfGYWHyvldhkoRVClRTz+LtNzT6vDUIsqGRUTpOoU= Subject key identifier: A2:85:0B:87:59:6E:EE:39:4F:2E:32:5F:D6:0C:DB:F5:44:80:35:57 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 34 Signing time: Thu 03 Jul 2025 07:54:10 +0000 Manifest this update: Thu 03 Jul 2025 07:54:09 +0000 Manifest next update: Thu 10 Jul 2025 07:54:09 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: 3PWuzf6EXTp/mK2ROPe8jtbOce8C906k8urp0xaG03g=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: 1E9Uj0G9r4nxcyscWv579FgIwgT3cljTL2z6/KS3cW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Jul 3 07:54:09 2025 GMT Not After : Jul 10 07:54:09 2025 GMT Subject: CN=68663722-ef1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:b6:b5:2a:ef:05:4e:27:f0:e8:5d:8e:bb: ae:29:ce:65:fb:87:29:09:e4:2a:7a:81:99:e5:4d: c6:a5:6f:96:6c:68:e3:61:cc:cc:4e:16:1f:62:f5: 1f:f1:26:e9:5f:e6:3c:27:0a:3c:75:9d:d6:dd:57: 9c:8d:84:4e:91:0b:14:59:27:01:88:0e:ad:17:c2: 46:fa:6d:6c:ef:b4:ed:41:50:f8:95:2d:f6:d2:f7: 80:e3:c0:13:cb:71:0f:53:d1:0e:30:57:fa:d8:de: 0d:63:6e:05:03:1d:b0:a1:52:cd:99:6c:85:98:b4: ee:68:31:6d:6c:90:08:43:1a:de:d3:7c:7a:4e:55: 5b:43:2d:2c:8c:cc:03:1a:8d:9e:41:7d:cc:c3:78: 00:11:6f:83:a7:49:22:f1:53:c9:dc:90:fd:26:f5: f7:d5:a2:10:f1:d6:bb:78:d7:cc:40:1f:12:61:72: 12:4d:ac:99:c3:f3:00:c6:43:12:21:76:c5:29:3a: 15:f2:a0:75:f8:54:6c:80:5f:fd:85:39:70:aa:3e: 26:46:e2:e3:bb:39:1c:b4:aa:a9:18:16:79:1b:da: 96:2b:23:98:38:34:bd:b0:7c:82:92:8c:fa:d3:67: a1:0f:e3:57:06:86:f2:3c:64:d0:ce:22:17:61:31: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:85:0B:87:59:6E:EE:39:4F:2E:32:5F:D6:0C:DB:F5:44:80:35:57 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:79:05:de:0a:67:cd:77:4e:66:93:f7:eb:c2:7b:70:3a:0b: 9a:6a:ce:c8:47:39:1e:fa:7e:14:20:cc:ba:05:4a:c7:c7:ea: 76:66:f8:d9:82:89:b8:fc:e5:75:cb:79:c0:04:cc:97:19:b9: c4:ca:3c:6d:66:16:5d:bb:2c:81:98:4c:4d:f6:95:5f:41:a3: 9a:e4:15:21:ec:d6:8c:ce:94:45:e9:fd:68:4b:63:c6:b8:8f: b4:b9:61:58:5e:61:30:a0:b5:ad:02:c9:42:bf:dd:be:d5:f5: 01:a0:22:33:a6:37:bf:4e:cf:e3:d4:a7:ff:d9:2b:f6:73:03: 7c:54:e0:ad:fc:c0:eb:3a:ce:70:72:46:a5:4d:60:83:0a:5f: 4f:b3:1a:88:8e:96:19:ec:51:ce:6c:5b:48:26:1f:91:f1:a7: 9f:8c:b4:91:c3:68:3f:02:85:9d:1a:27:ad:6f:59:c8:19:4a: a7:28:7d:54:11:05:ba:4b:8c:48:9c:8a:ae:fc:30:13:8d:3b: 48:5e:83:c6:cc:4d:7e:f3:d4:0a:9d:ae:35:54:33:bd:b4:a7: 6e:cc:b2:67:01:cf:83:16:38:34:57:f9:bb:c2:54:ca:9d:57: 14:b4:84:13:ef:c1:20:e0:7c:bd:89:00:04:73:2a:97:2f:ce: 6e:91:d2:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA3MDMwNzU0MDlaFw0yNTA3MTAwNzU0MDlaMBgxFjAUBgNV BAMTDTY4NjYzNzIyLWVmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Aba1Ku8FTifw6F2Ou64pzmX7hykJ5Cp6gZnlTcalb5ZsaONhzMxOFh9i9R/x Julf5jwnCjx1ndbdV5yNhE6RCxRZJwGIDq0Xwkb6bWzvtO1BUPiVLfbS94DjwBPL cQ9T0Q4wV/rY3g1jbgUDHbChUs2ZbIWYtO5oMW1skAhDGt7TfHpOVVtDLSyMzAMa jZ5BfczDeAARb4OnSSLxU8nckP0m9ffVohDx1rt418xAHxJhchJNrJnD8wDGQxIh dsUpOhXyoHX4VGyAX/2FOXCqPiZG4uO7ORy0qqkYFnkb2pYrI5g4NL2wfIKSjPrT Z6EP41cGhvI8ZNDOIhdhMay1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUooULh1lu 7jlPLjJf1gzb9USANVcwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAl5Bd4KZ813TmaT9+vCe3A6C5pqzshHOR76fhQgzLoFSsfH6nZm+NmC ibj85XXLecAEzJcZucTKPG1mFl27LIGYTE32lV9Bo5rkFSHs1ozOlEXp/WhLY8a4 j7S5YVheYTCgta0CyUK/3b7V9QGgIjOmN79Oz+PUp//ZK/ZzA3xU4K38wOs6znBy RqVNYIMKX0+zGoiOlhnsUc5sW0gmH5Hxp5+MtJHDaD8ChZ0aJ61vWcgZSqcofVQR BbpLjEiciq78MBONO0heg8bMTX7z1AqdrjVUM720p27MsmcBz4MWODRX+bvCVMqd VxS0hBPvwSDgfL2JAARzKpcvzm6R0jY= -----END CERTIFICATE-----Generated at Fri Jul 4 14:29:23 2025 by rpki-client