$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: VgUVysgiL102ghq1o0+CskYDeVXvUziCF49dAvSDoIU= Subject key identifier: 09:77:35:CE:A7:61:34:C4:A2:8F:CC:94:F8:53:67:A2:EE:E7:EE:92 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: EA Signing time: Sat 07 Jun 2025 04:53:13 +0000 Manifest this update: Sat 07 Jun 2025 04:53:12 +0000 Manifest next update: Sat 14 Jun 2025 04:53:12 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: SPHgRVi+mfGZHOHGYsFNZZ5U3tHBXnAarVgUdKZqNy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Jun 7 04:53:12 2025 GMT Not After : Jun 14 04:53:12 2025 GMT Subject: CN=6843c5b9-572b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:1b:0b:9d:20:a6:40:48:de:4b:88:4b:81: 1e:61:59:b3:e2:fb:22:c7:bd:e4:9b:dd:8d:87:4c: 43:60:52:71:b2:71:78:19:7f:56:2e:d8:09:16:21: 6b:97:07:33:4f:bf:ff:80:12:53:8b:e5:33:6b:f1: fc:04:5a:52:57:d8:c3:40:c3:72:ec:d0:da:85:85: 7a:69:1d:20:2c:23:d1:af:34:bd:91:6a:50:05:2e: 7d:89:bb:af:9e:4a:4b:2c:4f:50:69:23:68:2e:71: b9:e3:27:f1:be:cc:3c:c9:f3:63:41:75:11:f9:bb: 7a:74:24:46:9f:8f:6d:f5:86:2b:46:4e:e2:44:6f: d6:9d:db:ac:f5:ef:39:d6:fa:de:e4:8d:3d:18:3f: fa:34:3d:9a:d7:fe:3d:2f:f0:e5:29:ae:c7:a3:3c: 5e:61:41:1d:c7:cf:6a:d0:ad:7e:64:c5:b1:2e:4d: 4b:9c:bd:e5:a8:08:17:6d:ab:29:24:2d:d3:32:4b: b1:40:c4:4d:9b:04:e0:2c:c2:67:b6:6b:2a:e2:17: 6b:36:5a:b8:bb:c9:69:6a:bb:ef:7a:2f:e6:4a:6c: 0d:e2:a5:a0:41:38:69:1f:b5:50:b1:7b:dd:12:00: 22:b9:0a:3b:1d:98:02:98:50:d1:92:e3:a4:58:48: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:77:35:CE:A7:61:34:C4:A2:8F:CC:94:F8:53:67:A2:EE:E7:EE:92 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2d:1b:ab:c2:e5:bf:17:8a:f0:57:0a:74:e9:7d:c5:aa:37: 3e:8e:d0:f5:7c:be:11:cd:73:28:ac:5b:51:fd:e0:32:68:52: ff:29:9f:db:66:d4:65:67:73:d8:66:a3:62:de:8f:98:78:25: de:9e:78:b5:3f:87:a5:99:e3:54:f1:80:2c:c6:5c:10:4a:1c: 7e:d7:99:23:68:55:b5:4f:81:c4:46:f7:e6:e5:e4:18:17:87: 8d:fc:ce:d8:c0:15:1f:74:c1:d5:1c:ec:d5:c9:d8:f6:86:9a: 5e:04:e0:bf:f4:05:ca:57:41:92:16:f4:ab:6c:10:cc:2a:2b: 7b:d5:1a:f0:1d:1e:40:b2:9e:fa:af:f3:5f:42:de:e5:27:1a: 35:83:f7:76:47:03:1e:d7:1d:62:a2:0a:dc:66:30:1e:aa:54: e6:d7:f1:f7:c4:95:4f:8e:38:31:48:e9:b5:63:2f:f4:e8:b2: 4b:6e:21:8c:4e:3c:ca:7f:16:01:73:1a:b4:d1:52:8a:4d:b3: b4:f9:8b:a2:8b:aa:bb:d0:d3:5c:65:0e:82:70:9e:5d:15:bb: 84:1a:79:12:75:6d:04:70:12:f2:05:41:9f:09:38:10:17:a6: d5:24:df:ee:c9:db:10:a3:cc:99:4d:82:06:52:47:1e:33:cd: e9:cc:f0:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUwNjA3MDQ1MzEyWhcNMjUwNjE0MDQ1MzEyWjAYMRYwFAYD VQQDEw02ODQzYzViOS01NzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YkbC50gpkBI3kuIS4EeYVmz4vsix73km92Nh0xDYFJxsnF4GX9WLtgJFiFr lwczT7//gBJTi+Uza/H8BFpSV9jDQMNy7NDahYV6aR0gLCPRrzS9kWpQBS59ibuv nkpLLE9QaSNoLnG54yfxvsw8yfNjQXUR+bt6dCRGn49t9YYrRk7iRG/Wndus9e85 1vre5I09GD/6ND2a1/49L/DlKa7HozxeYUEdx89q0K1+ZMWxLk1LnL3lqAgXbasp JC3TMkuxQMRNmwTgLMJntmsq4hdrNlq4u8lparvvei/mSmwN4qWgQThpH7VQsXvd EgAiuQo7HZgCmFDRkuOkWEhPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl3Nc6n YTTEoo/MlPhTZ6Lu5+6SMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsLRurwuW/F4rwVwp06X3Fqjc+jtD1fL4RzXMorFtR/eAyaFL/KZ/b ZtRlZ3PYZqNi3o+YeCXenni1P4elmeNU8YAsxlwQShx+15kjaFW1T4HERvfm5eQY F4eN/M7YwBUfdMHVHOzVydj2hppeBOC/9AXKV0GSFvSrbBDMKit71RrwHR5Asp76 r/NfQt7lJxo1g/d2RwMe1x1iogrcZjAeqlTm1/H3xJVPjjgxSOm1Yy/06LJLbiGM TjzKfxYBcxq00VKKTbO0+Yuii6q70NNcZQ6CcJ5dFbuEGnkSdW0EcBLyBUGfCTgQ F6bVJN/uydsQo8yZTYIGUkceM83pzPB0 -----END CERTIFICATE-----Generated at Sun Jun 8 23:15:48 2025 by rpki-client