$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft File: FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json) Hash identifier: vsqrNc65BAZtKk1uH5X0ij4bXPSfW1HBAWyQgGP9Cl0= Subject key identifier: 4E:80:56:95:28:AF:8B:FE:68:61:8D:71:22:E2:06:BD:9B:DF:EB:C6 Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 Certificate issuer: /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69 Certificate serial: 32A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft Manifest number: 9A70 Signing time: Sun 20 Jul 2025 15:18:39 +0000 Manifest this update: Sun 20 Jul 2025 15:18:39 +0000 Manifest next update: Sun 27 Jul 2025 15:18:39 +0000 Files and hashes: 1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: 6jgGkitiFmwjsJkSjnVbBgSXn0tTgK9DfxZSbGImk4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12963 (0x32a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69 Validity Not Before: Jul 20 15:18:39 2025 GMT Not After : Jul 27 15:18:39 2025 GMT Subject: CN=687d08cf-f728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:7b:c3:99:0e:0e:26:35:98:2d:3d:4f:e5: 39:1a:f2:0d:3d:e7:d7:c1:2b:c5:27:7d:0a:d6:9a: 3f:22:f5:bd:46:86:a0:5b:ae:f7:67:f7:b3:62:35: ed:8f:fe:e2:17:77:82:fa:0e:c8:42:95:5a:8b:9c: c5:ea:65:19:2b:65:22:64:ad:7d:02:68:d1:56:00: cd:71:ce:e7:62:7c:55:71:9a:19:c3:f0:fa:98:0f: d8:c0:9b:8d:57:17:31:87:f0:01:19:47:0e:da:17: 06:d9:36:40:ee:5d:f2:c4:b8:ee:42:6f:5b:fc:3d: 4c:f0:40:e0:ee:cd:98:18:e7:4f:c9:fd:69:af:ad: 6c:b7:41:f1:40:9f:3c:d2:65:3b:7f:ba:8a:1f:d9: f1:1f:da:3f:aa:f4:57:67:52:08:79:f8:3b:2f:7f: b1:e1:c9:4e:2d:7e:1e:14:8d:09:a4:67:8a:1b:75: 18:2a:ce:48:fa:00:a3:1a:b1:6b:43:32:e3:8e:37: b8:a9:e9:a7:f0:ff:13:6f:fb:3e:e3:e3:c2:f1:cf: 74:24:cd:be:0b:52:53:f0:e9:b1:ba:99:71:11:cf: 9f:d9:84:87:a0:82:f0:41:67:ba:97:3c:ab:cc:cf: 21:32:63:49:cb:76:f5:1e:e4:cb:a0:96:74:75:c3: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:56:95:28:AF:8B:FE:68:61:8D:71:22:E2:06:BD:9B:DF:EB:C6 X509v3 Authority Key Identifier: keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3b:51:76:17:84:af:f4:8c:57:07:8a:00:3e:e7:60:a5:f8: 24:60:72:de:36:fc:f3:21:bf:24:28:7c:83:3d:c5:31:ef:28: 74:ed:66:ba:4a:dc:17:54:7a:68:30:eb:2e:4b:f0:14:aa:d3: af:24:31:e5:f0:de:18:6a:fe:f1:9d:f7:ba:a1:ce:c5:f0:29: 2d:4e:0a:07:86:88:c0:a0:aa:21:1c:70:f8:cc:89:d0:be:37: d8:8f:fc:e6:d5:5d:5e:50:e9:09:bc:0d:32:fc:a1:79:9c:eb: a7:46:5f:d0:6e:d3:28:27:9a:c9:b1:a3:90:42:09:af:8b:73: a0:34:2b:e7:a6:4b:6e:dc:5c:52:9d:35:df:f0:32:23:e4:31: 79:26:cb:91:08:72:2f:10:85:6f:01:9e:a8:6a:98:05:47:be: 58:02:ba:c9:a8:f4:64:01:21:38:16:c6:cb:c6:1b:41:e1:75: 3f:eb:75:85:ba:ec:9f:38:8d:22:8b:7a:5b:e9:49:0d:3b:ab: 1d:3a:81:fd:a0:64:7d:d0:9e:a2:3b:cd:50:1d:a6:32:87:08: 57:14:12:8b:7e:82:a7:cc:e1:7e:c0:b6:d4:4d:6d:9b:c8:44: 79:d1:40:66:90:4d:ee:16:e5:1b:3b:49:57:2b:03:75:42:bd: cf:de:ec:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDE0MTVGMjgxMUMwMzdGMzY0Q0M1ODcxODBCRjI0MDc5 NUIwNDNBNjkwHhcNMjUwNzIwMTUxODM5WhcNMjUwNzI3MTUxODM5WjAYMRYwFAYD VQQDEw02ODdkMDhjZi1mNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupV7w5kODiY1mC09T+U5GvINPefXwSvFJ30K1po/IvW9RoagW673Z/ezYjXt j/7iF3eC+g7IQpVai5zF6mUZK2UiZK19AmjRVgDNcc7nYnxVcZoZw/D6mA/YwJuN Vxcxh/ABGUcO2hcG2TZA7l3yxLjuQm9b/D1M8EDg7s2YGOdPyf1pr61st0HxQJ88 0mU7f7qKH9nxH9o/qvRXZ1IIefg7L3+x4clOLX4eFI0JpGeKG3UYKs5I+gCjGrFr QzLjjje4qemn8P8Tb/s+4+PC8c90JM2+C1JT8OmxuplxEc+f2YSHoILwQWe6lzyr zM8hMmNJy3b1HuTLoJZ0dcPcyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6AVpUo r4v+aGGNcSLiBr2b3+vGMB8GA1UdIwQYMBaAFBQV8oEcA382TMWHGAvyQHlbBDpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6Wk14WWNZQ19KQWVWc0VP bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCWHlnUndEZnpaTXhZY1lDX0pBZVZzRU9tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6 Wk14WWNZQ19KQWVWc0VPbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6O1F2F4Sv9IxXB4oAPudgpfgkYHLeNvzzIb8kKHyDPcUx7yh07Wa6 StwXVHpoMOsuS/AUqtOvJDHl8N4Yav7xnfe6oc7F8CktTgoHhojAoKohHHD4zInQ vjfYj/zm1V1eUOkJvA0y/KF5nOunRl/QbtMoJ5rJsaOQQgmvi3OgNCvnpktu3FxS nTXf8DIj5DF5JsuRCHIvEIVvAZ6oapgFR75YArrJqPRkASE4FsbLxhtB4XU/63WF uuyfOI0ii3pb6UkNO6sdOoH9oGR90J6iO81QHaYyhwhXFBKLfoKnzOF+wLbUTW2b yER50UBmkE3uFuUbO0lXKwN1Qr3P3uy+ -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:25 2025 by rpki-client