$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: 5ugskLmB16fZTpGkTMJ9+WZkkpbL1KrHIAc1Zwe1j0s= Subject key identifier: C0:14:8D:AC:96:82:15:D0:58:AA:76:23:C5:D2:84:1B:E4:E4:71:E4 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 0251 Signing time: Sat 07 Jun 2025 01:52:23 +0000 Manifest this update: Sat 07 Jun 2025 01:52:22 +0000 Manifest next update: Sat 14 Jun 2025 01:52:22 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: fSLBQuFb04lFZk0riLjmHl65iE6afQAlTFlCkihuxTE=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Jun 7 01:52:22 2025 GMT Not After : Jun 14 01:52:22 2025 GMT Subject: CN=68439b57-52f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:aa:fa:05:c1:49:f9:79:9d:92:eb:43:76: 46:39:c7:7b:fa:3a:91:3c:c3:35:ae:4c:e5:12:c6: 0a:dd:9a:65:e9:e9:1b:66:7d:bc:27:8a:0d:f9:8c: 45:74:6f:3a:a7:29:c9:8c:bb:16:09:50:8e:82:73: f7:9f:48:f5:a3:93:5b:07:e8:e7:cb:21:b0:c4:80: 72:9f:9a:37:78:1c:96:35:88:88:35:e6:36:e9:df: 7d:60:b5:08:5a:af:da:d6:cd:56:05:63:4b:29:d6: 63:ef:a6:94:7f:8c:3f:10:9c:5d:4a:1a:66:1e:80: 5e:e7:07:07:87:86:92:fc:51:04:ed:38:77:4c:cd: 3b:06:f0:49:be:9f:e4:ed:85:de:50:3e:0d:3b:74: dc:44:24:54:6f:17:93:87:09:8c:54:f3:76:9c:9f: dd:1a:0c:61:9e:83:01:0c:50:1f:f0:b0:cf:0a:6e: 7e:1f:e0:6f:7b:a9:79:ff:65:ab:5d:15:c3:30:7a: be:7d:a6:1c:92:86:66:f3:7d:db:59:3e:cc:1e:74: e2:ce:d3:34:e5:44:31:71:48:cb:d3:cd:3f:66:ca: 75:78:08:b1:9d:fb:1e:ff:03:73:3d:2e:d3:e1:df: 5e:54:b0:d5:12:45:03:e8:43:4a:68:14:b0:ae:8b: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:8D:AC:96:82:15:D0:58:AA:76:23:C5:D2:84:1B:E4:E4:71:E4 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:35:24:4c:4d:a6:15:23:b4:fe:06:58:fe:dd:27:04:3c:c9: 05:54:e2:bc:43:8c:80:1a:39:8c:5b:6d:23:d3:3f:66:4c:47: 7c:a5:42:d4:56:88:51:eb:ed:bb:3c:c5:6d:84:8b:35:1e:1b: 49:10:27:34:77:6d:00:8d:a7:80:61:e5:50:c4:05:10:b8:f5: 0d:8f:7b:2d:89:44:18:96:e1:2f:cb:9b:9e:ab:76:c3:04:9e: 9c:b1:16:fd:75:f7:99:17:9f:12:a9:c1:e1:ef:f6:1c:3a:fa: 6c:45:d4:2a:b2:b8:4e:19:e2:f1:78:b8:f5:7c:c1:82:10:8a: 06:81:32:1c:10:91:d2:44:89:5a:71:e9:0f:2d:c5:dc:a5:7a: 40:92:ef:61:23:36:22:aa:bb:53:68:6e:b3:d5:a0:2f:09:9e: 02:63:f8:a7:1c:db:6a:a4:fa:c6:c9:fd:11:80:81:f4:b6:01: ca:17:8f:9d:c0:52:7c:76:d5:24:00:65:9f:06:4f:62:bc:91: f3:e7:ac:81:78:2a:8d:b7:cc:36:9b:1d:e4:61:0c:8a:f3:31: 3f:08:70:5d:cd:45:c7:f1:e4:14:21:96:61:6f:90:b7:b2:22: ff:ab:5a:10:34:c8:f7:28:bc:90:b6:a2:59:39:74:b3:92:13: 51:fe:f5:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwNjA3MDE1MjIyWhcNMjUwNjE0MDE1MjIyWjAYMRYwFAYD VQQDEw02ODQzOWI1Ny01MmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeyq+gXBSfl5nZLrQ3ZGOcd7+jqRPMM1rkzlEsYK3Zpl6ekbZn28J4oN+YxF dG86pynJjLsWCVCOgnP3n0j1o5NbB+jnyyGwxIByn5o3eByWNYiINeY26d99YLUI Wq/a1s1WBWNLKdZj76aUf4w/EJxdShpmHoBe5wcHh4aS/FEE7Th3TM07BvBJvp/k 7YXeUD4NO3TcRCRUbxeThwmMVPN2nJ/dGgxhnoMBDFAf8LDPCm5+H+Bve6l5/2Wr XRXDMHq+faYckoZm833bWT7MHnTiztM05UQxcUjL080/Zsp1eAixnfse/wNzPS7T 4d9eVLDVEkUD6ENKaBSwrovcPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAUjayW ghXQWKp2I8XShBvk5HHkMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApNSRMTaYVI7T+Blj+3ScEPMkFVOK8Q4yAGjmMW20j0z9mTEd8pULU VohR6+27PMVthIs1HhtJECc0d20AjaeAYeVQxAUQuPUNj3stiUQYluEvy5ueq3bD BJ6csRb9dfeZF58SqcHh7/YcOvpsRdQqsrhOGeLxeLj1fMGCEIoGgTIcEJHSRIla cekPLcXcpXpAku9hIzYiqrtTaG6z1aAvCZ4CY/inHNtqpPrGyf0RgIH0tgHKF4+d wFJ8dtUkAGWfBk9ivJHz56yBeCqNt8w2mx3kYQyK8zE/CHBdzUXH8eQUIZZhb5C3 siL/q1oQNMj3KLyQtqJZOXSzkhNR/vUY -----END CERTIFICATE-----Generated at Sun Jun 8 07:18:16 2025 by rpki-client