$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: Ke298GisIs94sAXQsybkys8EFbF9koegAL+FkpVfTmo= Subject key identifier: C3:A4:00:C2:A9:28:54:13:8F:EB:46:6C:CE:68:76:A3:F7:AC:D6:E2 Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 079C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 0795 Signing time: Fri 06 Jun 2025 21:25:09 +0000 Manifest this update: Fri 06 Jun 2025 21:25:08 +0000 Manifest next update: Fri 13 Jun 2025 21:25:08 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: gIwK02/jgSWVO3Z2nSB20CAe3dqF7boaVCirwYH8oPs=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1948 (0x79c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Jun 6 21:25:08 2025 GMT Not After : Jun 13 21:25:08 2025 GMT Subject: CN=68435cb4-8b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:92:0f:57:a4:ae:7d:29:ce:65:d3:b5:ec: e0:15:d7:c5:04:63:99:1d:ff:7e:be:52:23:21:b3: e2:fe:d7:20:f6:fb:83:06:3e:c9:4d:6b:de:a0:db: 2d:87:4c:96:27:80:47:ac:01:99:1e:bd:04:be:2f: 4f:93:2d:a2:1c:e6:e6:7f:a3:e8:ef:e1:59:ec:1c: 63:c9:9f:4e:f1:44:09:91:e5:65:a3:eb:9d:88:1b: 40:7b:8c:d7:d0:59:43:b7:41:3e:75:45:2d:a4:11: bd:59:af:b4:0d:43:a0:db:9b:3e:19:8e:04:66:17: ba:4d:da:34:ab:2f:02:79:62:a5:fe:c2:06:93:bf: d6:ee:23:f9:04:d8:cc:bb:e4:4e:72:62:6f:14:2f: 92:10:d0:97:30:fc:53:fe:75:93:db:7a:21:5a:06: de:af:9e:b4:7a:a3:04:0b:c5:2a:0a:f4:54:10:4d: 0a:81:01:13:62:dd:25:49:23:7c:c2:10:a2:85:44: 7f:f3:eb:d0:da:b2:47:d8:2a:e7:28:5e:a9:be:eb: d7:9d:f3:21:2b:4d:23:ce:f8:8a:01:36:cd:4c:64: 07:b7:03:e1:ad:cc:2d:17:86:6c:44:d5:a9:4e:2d: 98:45:57:fe:5e:c2:2f:69:df:5f:50:1c:70:e2:84: a3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:00:C2:A9:28:54:13:8F:EB:46:6C:CE:68:76:A3:F7:AC:D6:E2 X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:21:c7:dc:df:8c:a9:61:e9:70:c3:ea:21:6f:7d:38:5f:b2: fc:9c:d2:9d:a8:55:e6:48:52:f9:f8:ee:2a:4d:c7:16:e5:f4: e5:b9:f5:dd:cd:ec:e5:0c:fd:14:03:d2:24:04:0d:7e:3a:85: 2b:d0:26:95:72:cd:0b:de:9d:5a:b3:ed:dc:7d:ac:f1:0a:86: 6b:8c:99:9c:86:b6:c8:bb:48:78:58:db:dd:4b:4e:06:7b:f2: 46:09:71:ac:bc:ef:2f:44:41:06:43:4d:76:f3:36:2a:ef:3a: c9:00:6f:c8:94:f4:7d:c1:7f:ad:61:c0:49:29:61:a0:71:a5: 62:d9:17:2e:2f:e1:eb:c1:1d:23:13:82:4a:8f:b0:fd:72:3a: 0d:18:fb:51:41:af:00:2d:9b:b0:de:f1:1c:6d:c6:f4:f9:ed: 58:ab:0b:d7:cc:69:57:2d:d2:16:22:03:5e:ab:17:a6:2b:88: f2:35:19:a9:cb:cc:68:db:28:86:3e:f7:8a:53:89:77:6b:93: c3:9b:67:75:79:1f:e6:b0:28:da:ab:a8:83:2c:49:20:bb:ba: 57:5f:03:55:b2:72:73:4d:78:c8:69:85:a6:ef:67:28:12:3e: d7:78:c7:70:74:36:57:17:55:df:d2:94:c5:c5:90:69:9c:03: e2:48:47:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUwNjA2MjEyNTA4WhcNMjUwNjEzMjEyNTA4WjAYMRYwFAYD VQQDEw02ODQzNWNiNC04YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaqSD1ekrn0pzmXTtezgFdfFBGOZHf9+vlIjIbPi/tcg9vuDBj7JTWveoNst h0yWJ4BHrAGZHr0Evi9Pky2iHObmf6Po7+FZ7BxjyZ9O8UQJkeVlo+udiBtAe4zX 0FlDt0E+dUUtpBG9Wa+0DUOg25s+GY4EZhe6Tdo0qy8CeWKl/sIGk7/W7iP5BNjM u+ROcmJvFC+SENCXMPxT/nWT23ohWgber560eqMEC8UqCvRUEE0KgQETYt0lSSN8 whCihUR/8+vQ2rJH2CrnKF6pvuvXnfMhK00jzviKATbNTGQHtwPhrcwtF4ZsRNWp Ti2YRVf+XsIvad9fUBxw4oSj2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOkAMKp KFQTj+tGbM5odqP3rNbiMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHIcfc34ypYelww+ohb304X7L8nNKdqFXmSFL5+O4qTccW5fTlufXd zezlDP0UA9IkBA1+OoUr0CaVcs0L3p1as+3cfazxCoZrjJmchrbIu0h4WNvdS04G e/JGCXGsvO8vREEGQ0128zYq7zrJAG/IlPR9wX+tYcBJKWGgcaVi2RcuL+HrwR0j E4JKj7D9cjoNGPtRQa8ALZuw3vEcbcb0+e1YqwvXzGlXLdIWIgNeqxemK4jyNRmp y8xo2yiGPveKU4l3a5PDm2d1eR/msCjaq6iDLEkgu7pXXwNVsnJzTXjIaYWm72co Ej7XeMdwdDZXF1Xf0pTFxZBpnAPiSEdl -----END CERTIFICATE-----Generated at Sat Jun 7 12:41:09 2025 by rpki-client