$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: InNSSirIOB5bIWXZsSpNienaQ1giL1Aj/bjNHTsVMNw= Subject key identifier: 52:A9:81:22:6D:B1:F7:4A:FB:3C:82:A6:1E:25:86:0B:24:8A:30:28 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 93 Signing time: Sat 31 May 2025 05:58:42 +0000 Manifest this update: Sat 31 May 2025 05:58:42 +0000 Manifest next update: Sat 07 Jun 2025 05:58:42 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: vaDrVjBfWIaeOHE+hhfnJ70Q0c/PxVX57yWIun92hW8=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: May 31 05:58:42 2025 GMT Not After : Jun 7 05:58:42 2025 GMT Subject: CN=683a9a92-2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d1:3d:d1:64:58:61:15:b4:ea:d8:65:3b:69: 5a:52:51:bb:84:b5:e9:9b:03:fe:ce:6d:b9:1c:73: e8:44:3a:d7:4a:b4:1d:7a:79:29:aa:eb:60:3c:d9: e3:00:5a:2c:f8:ce:ce:07:07:6b:c6:11:fd:ac:fd: 69:04:08:69:7f:c6:63:c9:cd:37:ad:6d:66:27:90: e2:74:e6:1a:30:04:43:f6:1a:bd:e0:8e:ae:d4:94: bc:2d:e3:e8:6d:60:ae:25:1a:7b:2e:56:40:98:11: d7:11:1b:42:7b:91:be:cc:db:d2:7e:19:c3:0a:92: 75:03:59:66:62:e6:32:ba:d6:01:10:38:50:0e:bd: 94:19:81:e8:9d:f2:fb:40:ea:10:fb:d6:dd:03:50: 22:ea:78:e5:5c:49:7f:7a:50:cf:d6:ef:41:00:3e: 81:9f:67:42:70:8d:3b:3d:4f:dd:77:b3:9b:41:44: b6:f8:ad:8a:da:11:d5:ea:69:14:a9:ce:e6:0d:44: 11:fc:ae:bf:f1:72:06:1c:b4:fb:d2:78:38:3b:93: 6b:2a:42:5d:46:c2:1a:f6:82:3e:8b:fb:2a:65:fa: cf:d9:91:47:94:00:92:0a:1e:53:73:15:38:9a:58: a0:32:8f:c6:f0:4c:74:07:d7:c1:36:c3:4a:8e:d7: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A9:81:22:6D:B1:F7:4A:FB:3C:82:A6:1E:25:86:0B:24:8A:30:28 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:98:20:fe:9e:a0:5d:9c:a2:1d:6d:20:21:a9:17:c6:97:4d: 17:a4:a2:57:e3:89:36:fc:11:fb:5e:9b:3b:f3:ba:91:d4:e0: 0e:eb:2e:20:f4:41:da:ba:9b:27:05:31:3f:b2:ba:f6:2f:fc: 40:9e:3b:b0:25:02:77:2f:fa:23:b8:86:a0:8b:bc:c1:dd:75: 28:1e:39:0d:cf:4b:47:2a:df:46:b6:fd:34:b9:fe:b6:a5:aa: 76:85:11:15:e9:bc:53:be:8d:da:9c:fc:8f:e2:3c:c4:d1:8d: df:e4:d0:25:05:44:d5:1c:7d:d1:26:6e:68:75:c8:60:7a:e5: fa:61:3b:92:4b:57:7f:9f:b6:e5:08:fa:30:f6:9d:d1:23:87: bf:25:03:c1:36:a5:0f:67:c0:83:9e:a9:65:8e:af:21:02:16: 42:05:d5:1b:6a:39:6e:8a:33:86:42:6a:e3:b0:ec:24:04:0b: 79:58:91:a0:ba:fb:fe:42:f4:47:8f:80:97:b0:b4:f3:83:41: b3:07:03:9e:cc:24:90:65:c7:50:83:b2:24:e8:78:04:f0:3f: 0e:08:2a:12:a2:34:a6:97:88:db:87:fd:d8:60:d8:68:40:1d: 03:f7:f8:72:0f:25:b3:0b:d0:5f:36:2a:ee:89:2b:c0:09:ea: 7a:a5:cd:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwNTMxMDU1ODQyWhcNMjUwNjA3MDU1ODQyWjAYMRYwFAYD VQQDEw02ODNhOWE5Mi0yZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69E90WRYYRW06thlO2laUlG7hLXpmwP+zm25HHPoRDrXSrQdenkpqutgPNnj AFos+M7OBwdrxhH9rP1pBAhpf8Zjyc03rW1mJ5DidOYaMARD9hq94I6u1JS8LePo bWCuJRp7LlZAmBHXERtCe5G+zNvSfhnDCpJ1A1lmYuYyutYBEDhQDr2UGYHonfL7 QOoQ+9bdA1Ai6njlXEl/elDP1u9BAD6Bn2dCcI07PU/dd7ObQUS2+K2K2hHV6mkU qc7mDUQR/K6/8XIGHLT70ng4O5NrKkJdRsIa9oI+i/sqZfrP2ZFHlACSCh5TcxU4 mligMo/G8Ex0B9fBNsNKjtdZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKpgSJt sfdK+zyCph4lhgskijAoMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxmCD+nqBdnKIdbSAhqRfGl00XpKJX44k2/BH7Xps787qR1OAO6y4g 9EHaupsnBTE/srr2L/xAnjuwJQJ3L/ojuIagi7zB3XUoHjkNz0tHKt9Gtv00uf62 pap2hREV6bxTvo3anPyP4jzE0Y3f5NAlBUTVHH3RJm5odchgeuX6YTuSS1d/n7bl CPow9p3RI4e/JQPBNqUPZ8CDnqlljq8hAhZCBdUbajluijOGQmrjsOwkBAt5WJGg uvv+QvRHj4CXsLTzg0GzBwOezCSQZcdQg7Ik6HgE8D8OCCoSojSml4jbh/3YYNho QB0D9/hyDyWzC9BfNiruiSvACep6pc0o -----END CERTIFICATE-----Generated at Sat May 31 16:49:14 2025 by rpki-client