$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: 9bTvniM6XIu2f/Y1v5AYGyXZ76JR7vxHNuTGKHOBHEM= Subject key identifier: 23:C4:63:6E:08:49:13:6A:72:12:9D:E0:F3:28:36:98:15:C5:96:1F Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 38BC Signing time: Sat 31 May 2025 14:36:08 +0000 Manifest this update: Sat 31 May 2025 14:36:08 +0000 Manifest next update: Sat 07 Jun 2025 14:36:08 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: 5BI8cfiDYv7yXWjWcr/pmOrKjQ3ICqkwMC/HuEHCbuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: May 31 14:36:08 2025 GMT Not After : Jun 7 14:36:08 2025 GMT Subject: CN=683b13d8-cb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:c7:30:03:e4:b3:d2:ff:30:96:18:64:0c: 8a:61:3e:fb:ed:08:5d:6a:15:c7:62:0b:ea:77:df: 46:5f:2c:a1:3a:b1:ef:c0:03:d0:ca:21:3d:a1:2a: f5:5f:c7:9f:de:04:9a:45:d1:7a:71:86:70:c6:1a: 30:2b:ac:43:30:55:40:36:8f:88:f5:6c:bc:d9:7b: f7:8d:e5:10:f6:48:19:de:3f:4f:ba:3c:e3:d6:3a: a2:9c:dd:88:0e:f6:40:f7:cc:b1:96:a5:27:2b:e7: c5:bf:2a:c6:ce:5a:97:73:59:02:0b:df:c2:fb:4b: 82:15:d2:3c:5e:4b:09:e1:b7:c5:b1:4a:42:15:af: af:1c:4a:43:5a:87:9d:50:40:68:07:46:bb:37:af: b8:64:5e:05:cb:50:3f:c9:52:cc:4b:72:d3:52:f5: 9d:9a:cf:91:d2:97:7a:8f:fe:c2:01:52:d9:9c:d4: c0:76:55:c1:1b:c0:fd:5a:f3:78:a5:53:56:27:1a: be:b5:60:a5:f2:64:97:31:0c:f2:83:8b:40:34:ea: b6:5a:d5:e1:c9:6c:c4:76:6e:5f:0a:34:c7:7c:cc: 40:bf:9e:89:1a:2d:f5:91:36:b3:1b:7a:7d:c3:53: 2c:40:db:ea:ea:8e:1b:c3:14:77:bd:99:d3:48:44: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C4:63:6E:08:49:13:6A:72:12:9D:E0:F3:28:36:98:15:C5:96:1F X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cd:51:b2:92:e7:9b:d9:57:d3:f4:5b:e9:c7:54:88:5f:26: 27:75:6b:21:17:28:fa:42:bd:6d:4c:64:36:fc:23:98:53:63: b6:6e:f4:73:46:22:ef:e9:01:40:7b:3f:77:6b:bd:0a:f6:df: 3b:97:9c:d4:c8:c8:9c:ba:8b:e2:d6:81:de:b3:f6:13:52:c7: 39:d6:f6:cd:b8:f3:0a:5b:45:f2:6f:c5:a5:79:11:03:32:d9: a6:79:7c:b0:6d:a1:b3:12:a6:00:ac:c7:41:1f:3f:b7:99:54: 06:15:19:0b:67:0c:e2:05:23:b9:bd:db:3b:40:2c:37:37:62: 9c:17:97:ee:ed:c4:10:bc:b2:26:1e:c3:ba:66:be:1d:c8:ad: d1:89:7d:f7:21:77:a3:57:c1:96:88:18:0a:00:b3:8c:34:ce: aa:80:57:15:09:bd:f1:03:51:c2:cc:0d:2a:e2:ee:d8:b6:79: 3b:a6:c2:fc:c2:7d:0f:af:98:ad:20:11:02:2f:21:ba:be:c8: b6:4a:cc:be:8d:31:ac:76:c5:c6:04:f2:73:8f:7c:c0:20:7c: d4:df:61:74:05:b3:4a:be:41:b4:65:d6:c3:d8:7a:63:67:3a: 15:97:3d:b8:dd:d1:99:da:bb:60:fa:64:81:73:00:2f:5d:66: 43:3a:d7:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwNTMxMTQzNjA4WhcNMjUwNjA3MTQzNjA4WjAYMRYwFAYD VQQDEw02ODNiMTNkOC1jYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoITHMAPks9L/MJYYZAyKYT777QhdahXHYgvqd99GXyyhOrHvwAPQyiE9oSr1 X8ef3gSaRdF6cYZwxhowK6xDMFVANo+I9Wy82Xv3jeUQ9kgZ3j9Pujzj1jqinN2I DvZA98yxlqUnK+fFvyrGzlqXc1kCC9/C+0uCFdI8XksJ4bfFsUpCFa+vHEpDWoed UEBoB0a7N6+4ZF4Fy1A/yVLMS3LTUvWdms+R0pd6j/7CAVLZnNTAdlXBG8D9WvN4 pVNWJxq+tWCl8mSXMQzyg4tANOq2WtXhyWzEdm5fCjTHfMxAv56JGi31kTazG3p9 w1MsQNvq6o4bwxR3vZnTSETvkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPEY24I SRNqchKd4PMoNpgVxZYfMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCazVGykueb2VfT9Fvpx1SIXyYndWshFyj6Qr1tTGQ2/COYU2O2bvRz RiLv6QFAez93a70K9t87l5zUyMicuovi1oHes/YTUsc51vbNuPMKW0Xyb8WleRED MtmmeXywbaGzEqYArMdBHz+3mVQGFRkLZwziBSO5vds7QCw3N2KcF5fu7cQQvLIm HsO6Zr4dyK3RiX33IXejV8GWiBgKALOMNM6qgFcVCb3xA1HCzA0q4u7Ytnk7psL8 wn0Pr5itIBECLyG6vsi2Ssy+jTGsdsXGBPJzj3zAIHzU32F0BbNKvkG0ZdbD2Hpj ZzoVlz243dGZ2rtg+mSBcwAvXWZDOtfF -----END CERTIFICATE-----Generated at Mon Jun 2 06:33:28 2025 by rpki-client