$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: iaa2i3/ZKRs3JnWl+KOHkXMIdjXD343u1bILKpL4us8= Subject key identifier: 53:9D:CC:EB:B0:B8:3A:8F:13:83:18:B5:81:46:68:9C:7D:F9:8E:6D Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 07F7 Signing time: Fri 30 May 2025 21:11:19 +0000 Manifest this update: Fri 30 May 2025 21:11:19 +0000 Manifest next update: Fri 06 Jun 2025 21:11:19 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: HSFQu4F5bFaSuXD5ZlOsJ6T/ChVUWcm/iOgp1+2quVQ=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: May 30 21:11:19 2025 GMT Not After : Jun 6 21:11:19 2025 GMT Subject: CN=683a1ef7-2aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:82:8f:da:fe:e6:22:a2:30:51:8f:ff:a9: d0:84:6f:36:7d:ff:ca:62:1e:af:09:e1:2e:85:62: 16:52:10:50:29:d7:e4:61:ba:82:59:6c:fc:cf:47: 88:6d:bc:d3:4f:d3:d9:00:7a:00:10:35:4a:9a:de: 4f:26:8c:32:51:d1:b9:b5:bf:ce:79:84:b8:05:ae: f5:1a:5d:88:c6:a7:a0:08:9f:bd:0c:9e:22:aa:ea: c9:8c:b2:6d:10:59:8f:77:da:f0:ce:38:90:5f:73: eb:ea:75:09:e4:3d:18:ae:de:57:fd:0f:1e:48:84: 61:7d:f4:45:09:0f:c6:90:4c:f5:ff:35:f4:c0:5b: 37:c0:22:a1:02:0f:d4:9c:6c:85:7d:0a:7b:47:ba: 3f:c7:9e:98:76:d6:a3:45:a9:2a:f6:79:6e:8c:28: 37:44:04:6b:3e:26:57:85:a9:23:5d:fe:21:da:71: 86:23:f7:69:70:e1:40:de:9f:d1:d8:18:55:0d:b5: 77:78:7f:ad:e2:a2:a5:36:85:48:42:b1:91:89:e4: c3:b8:64:cf:8f:1c:e4:79:65:3e:18:bf:be:fc:9b: 59:ee:a9:8e:44:27:62:3e:1d:ba:30:8c:ce:13:95: cc:f4:5f:94:7f:77:03:92:d5:96:99:bf:94:e5:96: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:CC:EB:B0:B8:3A:8F:13:83:18:B5:81:46:68:9C:7D:F9:8E:6D X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:ae:23:3f:10:9b:8f:ea:7f:91:8a:78:48:f3:47:c0:c2: 60:4e:14:09:b0:b2:d8:22:0a:31:2e:8e:5d:03:50:14:20:eb: b2:1c:1f:f5:f4:ff:9b:15:93:33:97:29:65:f0:62:4e:44:9f: e5:bb:52:84:a6:03:9b:39:6a:c8:0f:83:63:27:98:fb:62:bf: 1f:fb:fa:74:f7:48:9a:e7:3a:56:27:e8:1c:5a:54:f7:a9:8b: 2c:5e:77:42:4d:d7:7b:26:79:e6:1a:d7:a7:47:eb:15:78:0a: 1c:75:db:df:2b:ab:58:66:85:f2:d8:e0:26:51:1b:4b:7e:21: 12:1f:f5:89:76:7e:f3:f7:8f:8f:44:65:08:14:4f:0f:fd:75: 61:bb:58:c1:e3:50:a8:6c:68:11:f0:65:9f:03:51:83:b2:e1: c3:1c:4f:b8:db:e5:3e:23:ab:64:5e:04:37:ae:17:bd:f4:07: d9:86:85:7b:aa:25:eb:71:13:72:29:1e:7f:07:ca:24:eb:76: 00:a3:4f:f4:bf:37:3f:f9:f8:17:c1:fa:a1:04:be:86:72:14: d7:d8:68:85:bf:d0:99:9b:c6:0b:f8:85:43:24:ea:d8:22:71: ae:51:9f:b1:41:f5:8a:62:86:84:19:29:0a:eb:d6:6f:d4:5a: 84:bf:f6:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUwNTMwMjExMTE5WhcNMjUwNjA2MjExMTE5WjAYMRYwFAYD VQQDEw02ODNhMWVmNy0yYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVuCj9r+5iKiMFGP/6nQhG82ff/KYh6vCeEuhWIWUhBQKdfkYbqCWWz8z0eI bbzTT9PZAHoAEDVKmt5PJowyUdG5tb/OeYS4Ba71Gl2IxqegCJ+9DJ4iqurJjLJt EFmPd9rwzjiQX3Pr6nUJ5D0Yrt5X/Q8eSIRhffRFCQ/GkEz1/zX0wFs3wCKhAg/U nGyFfQp7R7o/x56YdtajRakq9nlujCg3RARrPiZXhakjXf4h2nGGI/dpcOFA3p/R 2BhVDbV3eH+t4qKlNoVIQrGRieTDuGTPjxzkeWU+GL++/JtZ7qmORCdiPh26MIzO E5XM9F+Uf3cDktWWmb+U5ZZKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOdzOuw uDqPE4MYtYFGaJx9+Y5tMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvH64jPxCbj+p/kYp4SPNHwMJgThQJsLLYIgoxLo5dA1AUIOuyHB/1 9P+bFZMzlyll8GJORJ/lu1KEpgObOWrID4NjJ5j7Yr8f+/p090ia5zpWJ+gcWlT3 qYssXndCTdd7JnnmGtenR+sVeAocddvfK6tYZoXy2OAmURtLfiESH/WJdn7z94+P RGUIFE8P/XVhu1jB41CobGgR8GWfA1GDsuHDHE+42+U+I6tkXgQ3rhe99AfZhoV7 qiXrcRNyKR5/B8ok63YAo0/0vzc/+fgXwfqhBL6GchTX2GiFv9CZm8YL+IVDJOrY InGuUZ+xQfWKYoaEGSkK69Zv1FqEv/Yi -----END CERTIFICATE-----Generated at Sat May 31 16:32:12 2025 by rpki-client