$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: Z1WNbJy5r3JcMsq8g0aaYv+QedoQvtbEo5/4Ws00eOo= Subject key identifier: F7:20:B4:37:97:1B:88:67:DA:2B:B7:BC:93:9B:FC:4A:67:85:09:31 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 014E Signing time: Mon 21 Jul 2025 04:18:08 +0000 Manifest this update: Mon 21 Jul 2025 04:18:07 +0000 Manifest next update: Mon 28 Jul 2025 04:18:07 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: qjCH9Og8hwJF0nZVtggpApkn7wfZAE4XrXVq1BPBsbw=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Jul 21 04:18:07 2025 GMT Not After : Jul 28 04:18:07 2025 GMT Subject: CN=687dbf7f-c381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:68:02:af:bf:0e:61:f0:79:3e:0b:07:33: 9c:00:56:f7:af:72:77:81:66:01:70:69:1e:34:14: 08:78:26:8f:52:78:02:06:e1:8e:7e:d2:cf:90:16: 34:ca:81:01:4c:b8:17:57:0a:27:05:f6:ad:51:fa: d6:9b:13:55:62:f0:fc:a6:58:12:af:58:07:5d:af: d7:84:15:a0:8d:f3:44:4d:4b:21:38:b7:b9:0c:c6: 29:0f:71:88:a7:f5:72:a2:cf:6f:bb:70:45:b8:8d: 76:b1:d9:d6:ef:4f:7b:ca:d8:a6:82:7a:87:34:60: 9f:a1:3d:5c:e9:d9:ae:6d:38:33:9f:f2:7e:11:89: 49:99:bc:6e:c3:4f:3d:61:93:ee:13:8e:b4:01:2e: 52:d3:f7:e2:cf:9f:85:7a:88:9a:f1:27:d4:51:f6: 53:5d:03:02:74:8e:ef:a9:dd:42:44:07:94:f2:4a: 2c:4c:bb:f0:19:96:50:1d:6a:a5:4d:7e:6f:ac:d4: f1:ce:d7:d5:10:f0:f0:9b:1d:f7:fd:c1:14:e4:82: fd:bd:a1:c8:ca:d2:b9:05:a9:b1:27:d0:19:ae:45: d8:c8:d4:eb:f5:a5:72:51:f0:32:45:0a:2a:90:1c: 56:9d:d0:5b:06:83:36:da:1b:32:35:2f:38:a0:dc: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:B4:37:97:1B:88:67:DA:2B:B7:BC:93:9B:FC:4A:67:85:09:31 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:90:97:13:cf:62:30:8d:f2:6e:af:43:7a:09:c8:6e:0f:32: 6c:ee:d5:d6:f6:6c:b4:8a:c1:2c:5c:26:b8:af:77:e5:68:48: e8:49:b5:c1:e4:f5:6e:e2:b3:62:a7:7e:d4:bc:96:63:a4:b5: 7b:5f:62:59:60:15:00:92:a4:e6:c5:e7:68:cf:5d:0f:55:53: 1c:3d:80:e3:fb:b3:45:69:d2:2c:9d:4e:fe:41:45:c9:21:9e: b4:43:de:5b:ab:58:7d:7b:88:41:e6:d3:c6:60:59:66:33:ec: a7:25:36:d4:f8:f9:a4:0a:8d:19:62:3d:d2:43:44:96:df:67: 0d:29:9a:bb:91:19:8a:65:8e:d7:e8:6f:26:b0:1e:20:0e:63: 07:3d:fa:38:21:16:eb:5f:c2:d4:dd:51:39:d4:b6:a9:85:59: 21:3b:89:0a:df:03:39:31:38:9b:aa:b1:dc:30:ca:13:e9:42: 8a:67:30:6e:7a:91:70:f1:9e:74:5c:04:dc:55:15:b6:da:d4: a1:64:44:9e:d5:1b:c1:a9:c9:4f:21:84:20:70:23:16:5e:ed: cb:1e:89:28:8f:ca:d7:a2:fd:29:57:1d:e7:28:d5:dd:e1:2c: 8a:c8:9e:01:bb:90:c4:94:04:01:42:d8:3e:5b:c5:32:2b:da: 30:bc:d5:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwNzIxMDQxODA3WhcNMjUwNzI4MDQxODA3WjAYMRYwFAYD VQQDEw02ODdkYmY3Zi1jMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu01oAq+/DmHweT4LBzOcAFb3r3J3gWYBcGkeNBQIeCaPUngCBuGOftLPkBY0 yoEBTLgXVwonBfatUfrWmxNVYvD8plgSr1gHXa/XhBWgjfNETUshOLe5DMYpD3GI p/Vyos9vu3BFuI12sdnW7097ytimgnqHNGCfoT1c6dmubTgzn/J+EYlJmbxuw089 YZPuE460AS5S0/fiz5+Feoia8SfUUfZTXQMCdI7vqd1CRAeU8kosTLvwGZZQHWql TX5vrNTxztfVEPDwmx33/cEU5IL9vaHIytK5BamxJ9AZrkXYyNTr9aVyUfAyRQoq kBxWndBbBoM22hsyNS84oNx/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcgtDeX G4hn2iu3vJOb/EpnhQkxMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMkJcTz2IwjfJur0N6CchuDzJs7tXW9my0isEsXCa4r3flaEjoSbXB 5PVu4rNip37UvJZjpLV7X2JZYBUAkqTmxedoz10PVVMcPYDj+7NFadIsnU7+QUXJ IZ60Q95bq1h9e4hB5tPGYFlmM+ynJTbU+PmkCo0ZYj3SQ0SW32cNKZq7kRmKZY7X 6G8msB4gDmMHPfo4IRbrX8LU3VE51LaphVkhO4kK3wM5MTibqrHcMMoT6UKKZzBu epFw8Z50XATcVRW22tShZESe1RvBqclPIYQgcCMWXu3LHokoj8rXov0pVx3nKNXd 4SyKyJ4Bu5DElAQBQtg+W8UyK9owvNU9 -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:17 2025 by rpki-client