$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: a2SLtNY6NGcbZRQVxIpUPvg22mZzNj8eYN1sSmiaLI8= Subject key identifier: 81:E4:3A:DD:36:EA:02:37:83:B9:0C:54:6C:ED:7E:1A:34:C4:06:CA Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C64 Signing time: Fri 30 May 2025 18:33:54 +0000 Manifest this update: Fri 30 May 2025 18:33:54 +0000 Manifest next update: Fri 06 Jun 2025 18:33:54 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: MiPcecruQTXohHweRrrIMR9I9wFxI2NvvsYeZUo780Q=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: May 30 18:33:54 2025 GMT Not After : Jun 6 18:33:54 2025 GMT Subject: CN=6839fa12-c8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:33:b7:7e:0e:5f:d1:a0:f2:41:d7:51:6a: 7e:2f:c3:16:9c:98:dd:f0:50:d2:7a:e3:1b:f9:8c: 84:a5:1e:dc:d6:32:4a:42:94:05:2b:a5:5f:1b:b0: 93:1e:9f:c1:a6:5c:08:25:d3:86:25:19:6e:ca:11: ba:4f:ab:09:7c:fc:67:7f:ce:c6:79:1d:c3:4b:cf: ac:6b:14:80:84:4e:ee:ca:3c:2a:4a:46:b1:65:2b: 30:8f:cc:39:e2:db:cd:fe:ef:e2:48:c5:43:69:b2: dd:db:c3:ea:46:29:8c:11:78:04:12:15:84:ae:dd: d2:48:a8:2a:bf:57:62:14:05:13:fa:e5:14:2e:f3: 43:87:51:90:70:c7:d2:39:fd:1c:a1:0f:00:c4:38: fa:a5:7d:84:d6:28:0a:e4:46:e0:63:02:59:7a:4d: 7b:03:0c:65:34:39:e6:ab:dc:69:84:4b:eb:47:fc: 23:5c:25:40:85:99:d6:fd:1b:21:0a:5f:95:08:d3: 40:77:21:bd:62:57:19:1e:6b:c2:40:58:23:c2:b6: 6e:29:d0:85:c7:6f:b9:91:ee:8f:05:52:aa:44:63: d1:22:0d:ab:7a:94:fb:10:07:50:30:ec:fb:39:74: ef:84:0d:f2:ba:85:2d:33:63:70:7c:7a:fc:d2:3d: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E4:3A:DD:36:EA:02:37:83:B9:0C:54:6C:ED:7E:1A:34:C4:06:CA X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f3:5c:be:aa:16:5a:bd:ee:4a:30:19:47:ad:0f:c6:02:b5: f9:93:96:27:9b:b6:96:7e:20:93:c1:08:c4:63:5a:bb:25:1a: 56:6d:a9:b4:70:f2:1c:bc:8f:af:75:1d:e2:34:2c:38:19:19: dd:6d:ae:4f:f7:53:a8:4c:9e:d2:27:2c:40:8c:11:01:43:96: a7:6e:1c:12:a4:aa:48:91:79:0e:fe:ff:8b:d3:6d:21:b8:b0: a5:e6:6a:6a:33:a1:8f:0b:71:2f:ea:bf:ff:27:c2:ef:38:27: 71:2e:a1:0a:b2:37:36:ef:9b:03:6a:11:27:ae:6d:f9:c7:db: bd:a1:94:b8:d0:88:64:c5:2c:ae:79:e6:2b:38:2b:77:56:c2: 52:c4:f5:b3:64:07:d3:c3:9e:c0:da:e1:80:a9:a7:71:37:75: 5c:d3:5b:b5:25:8f:f6:17:fd:5c:d3:20:15:02:54:a0:7b:a4: cc:49:69:1b:e8:50:38:00:9e:11:84:9e:4c:b3:e2:d3:76:eb: c0:5d:1f:b4:f6:c3:fb:2d:98:3e:18:0c:ab:85:8f:42:30:24: 6d:ca:fb:fb:85:77:55:e3:49:40:18:68:ae:8f:f4:57:00:7d: 02:ac:28:bc:07:55:23:21:b5:38:ff:b2:07:82:a7:24:fb:18: cc:6c:48:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwNTMwMTgzMzU0WhcNMjUwNjA2MTgzMzU0WjAYMRYwFAYD VQQDEw02ODM5ZmExMi1jOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pMzt34OX9Gg8kHXUWp+L8MWnJjd8FDSeuMb+YyEpR7c1jJKQpQFK6VfG7CT Hp/BplwIJdOGJRluyhG6T6sJfPxnf87GeR3DS8+saxSAhE7uyjwqSkaxZSswj8w5 4tvN/u/iSMVDabLd28PqRimMEXgEEhWErt3SSKgqv1diFAUT+uUULvNDh1GQcMfS Of0coQ8AxDj6pX2E1igK5EbgYwJZek17AwxlNDnmq9xphEvrR/wjXCVAhZnW/Rsh Cl+VCNNAdyG9YlcZHmvCQFgjwrZuKdCFx2+5ke6PBVKqRGPRIg2repT7EAdQMOz7 OXTvhA3yuoUtM2NwfHr80j0BhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHkOt02 6gI3g7kMVGztfho0xAbKMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs81y+qhZave5KMBlHrQ/GArX5k5Ynm7aWfiCTwQjEY1q7JRpWbam0 cPIcvI+vdR3iNCw4GRndba5P91OoTJ7SJyxAjBEBQ5anbhwSpKpIkXkO/v+L020h uLCl5mpqM6GPC3Ev6r//J8LvOCdxLqEKsjc275sDahEnrm35x9u9oZS40IhkxSyu eeYrOCt3VsJSxPWzZAfTw57A2uGAqadxN3Vc01u1JY/2F/1c0yAVAlSge6TMSWkb 6FA4AJ4RhJ5Ms+LTduvAXR+09sP7LZg+GAyrhY9CMCRtyvv7hXdV40lAGGiuj/RX AH0CrCi8B1UjIbU4/7IHgqck+xjMbEhc -----END CERTIFICATE-----Generated at Sat May 31 17:32:51 2025 by rpki-client