$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: Z8/XKdgxurDB6OUE195xcPh3Fe2sXg0+aTOcvNnls+8= Subject key identifier: 0E:E5:A1:11:11:8A:22:8A:06:14:F2:6D:28:5B:5F:5F:25:0F:B7:B6 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AB9 Signing time: Fri 30 May 2025 19:42:22 +0000 Manifest this update: Fri 30 May 2025 19:42:22 +0000 Manifest next update: Fri 06 Jun 2025 19:42:22 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: Qk9D5w6rjvOnVnuks9uV6l7pgg3mwWHxQWpfEXGEE0w=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: xe07Bh/37lddOkgu4nWtJeTBqHbyu/j2lK7PTJ6ZiCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: May 30 19:42:22 2025 GMT Not After : Jun 6 19:42:22 2025 GMT Subject: CN=683a0a1e-feaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:3a:bb:2a:22:b0:3e:7d:ce:4d:db:d8:13: d3:d0:06:9a:5b:d5:59:83:66:89:ae:06:d3:13:e6: 1c:7e:9c:d2:60:0e:20:f0:8d:67:c7:68:e4:fd:e3: c2:c3:cc:fb:4d:99:5f:17:74:1c:89:c8:38:f4:f7: 1a:2a:75:c5:70:16:c1:58:c8:ab:e2:6a:b3:08:be: e2:94:4a:4f:4a:4c:bb:dc:94:25:e4:48:0e:83:d1: 42:2a:56:08:db:36:b8:67:f1:b6:26:8e:80:68:9d: 25:40:b0:21:3e:5a:cf:aa:82:d2:49:22:c7:12:6b: 3e:8b:2b:67:79:7e:84:10:d1:4c:e3:21:99:b6:6d: d8:2e:25:1c:33:f3:d1:e5:f6:00:4e:15:50:9c:ff: b8:3c:7c:dd:01:06:af:16:ed:32:cb:e2:77:34:02: c2:de:6f:5b:0b:c3:2c:74:fc:10:67:c9:85:0a:23: 3b:c3:2e:5b:92:71:4d:9e:18:5c:96:6b:b6:56:52: ba:67:78:1d:b8:6d:d9:05:c8:76:e3:42:b5:1d:44: 29:4b:c0:ea:22:3b:4e:96:f2:49:44:a4:41:79:e7: ed:e8:b2:4c:a4:45:0a:f4:07:13:c9:53:41:2c:fe: ec:42:2c:7a:6f:35:8b:6c:43:b2:cb:b4:6f:67:9c: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E5:A1:11:11:8A:22:8A:06:14:F2:6D:28:5B:5F:5F:25:0F:B7:B6 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d7:2c:83:d0:32:65:75:86:a8:7b:c4:6c:70:e0:1b:4e:4b: 96:55:d8:93:07:22:ef:b1:59:92:d3:70:58:5c:68:e8:8c:f2: b3:18:f5:cc:2e:2f:73:1d:2d:61:6a:bd:c4:f7:b6:06:66:8e: de:1e:99:a2:c8:c1:b2:c3:7f:84:37:58:fa:02:b2:72:e0:e8: 99:99:4c:cc:5c:8c:d9:df:ac:7b:fd:ee:52:47:53:ce:d6:d3: 03:4c:44:18:21:97:e3:c6:7a:6d:33:03:ca:2f:d5:15:05:a3: 82:96:d2:e7:2b:87:2f:20:81:6f:4d:a5:bc:10:9d:03:59:aa: 3f:a9:e0:35:6e:69:cb:01:25:71:d2:d3:a3:d4:67:72:36:9c: 33:88:f2:f4:fe:70:23:b6:00:00:2e:a2:bb:8d:76:85:c6:6e: 14:56:ca:73:07:95:df:49:46:df:e8:7e:35:8b:23:70:6b:c2: 28:96:37:81:21:d2:e6:2e:9f:9a:95:34:a0:6c:c5:74:2f:fc: 52:39:20:4b:22:53:32:e5:21:ad:8e:f7:f3:3b:45:8d:e8:6e: 92:f8:63:56:50:6e:04:74:b4:4c:21:7b:9d:fc:d9:4e:00:cd: a4:7c:6b:29:5e:e2:c1:68:35:88:1e:44:8e:f8:04:3e:10:52: 9b:94:10:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwNTMwMTk0MjIyWhcNMjUwNjA2MTk0MjIyWjAYMRYwFAYD VQQDEw02ODNhMGExZS1mZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQA6uyoisD59zk3b2BPT0AaaW9VZg2aJrgbTE+YcfpzSYA4g8I1nx2jk/ePC w8z7TZlfF3Qcicg49PcaKnXFcBbBWMir4mqzCL7ilEpPSky73JQl5EgOg9FCKlYI 2za4Z/G2Jo6AaJ0lQLAhPlrPqoLSSSLHEms+iytneX6EENFM4yGZtm3YLiUcM/PR 5fYAThVQnP+4PHzdAQavFu0yy+J3NALC3m9bC8MsdPwQZ8mFCiM7wy5bknFNnhhc lmu2VlK6Z3gduG3ZBch240K1HUQpS8DqIjtOlvJJRKRBeeft6LJMpEUK9AcTyVNB LP7sQix6bzWLbEOyy7RvZ5zU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7loRER iiKKBhTybShbX18lD7e2MB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/1yyD0DJldYaoe8RscOAbTkuWVdiTByLvsVmS03BYXGjojPKzGPXM Li9zHS1har3E97YGZo7eHpmiyMGyw3+EN1j6ArJy4OiZmUzMXIzZ36x7/e5SR1PO 1tMDTEQYIZfjxnptMwPKL9UVBaOCltLnK4cvIIFvTaW8EJ0DWao/qeA1bmnLASVx 0tOj1GdyNpwziPL0/nAjtgAALqK7jXaFxm4UVspzB5XfSUbf6H41iyNwa8IoljeB IdLmLp+alTSgbMV0L/xSOSBLIlMy5SGtjvfzO0WN6G6S+GNWUG4EdLRMIXud/NlO AM2kfGspXuLBaDWIHkSO+AQ+EFKblBBx -----END CERTIFICATE-----Generated at Sat May 31 17:18:49 2025 by rpki-client