$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: iE32cGF9dEExlQ8P+ootknSpz6ljQegYbliv7A7gQLU= Subject key identifier: A8:7A:14:22:F1:D8:66:FE:1B:51:A5:7B:5B:0E:5C:E6:34:AC:D2:00 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F32 Signing time: Fri 30 May 2025 17:47:55 +0000 Manifest this update: Fri 30 May 2025 17:47:54 +0000 Manifest next update: Fri 06 Jun 2025 17:47:54 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: 8RBua6BYD4nKYDqyHSmbmigF8k5oq46HlKD3twebPtY=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: May 30 17:47:54 2025 GMT Not After : Jun 6 17:47:54 2025 GMT Subject: CN=6839ef4a-afb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:03:80:a0:48:31:d5:8e:05:1b:1a:3c:3a: d5:a9:6c:90:7b:44:0f:60:59:2c:ba:71:a6:0e:58: 2b:b6:df:84:2b:60:e4:c7:10:09:e2:bf:67:b4:68: ae:b9:8c:00:88:e8:c9:b5:5d:0e:ec:76:80:26:56: 01:a4:0d:2a:a4:bd:86:65:24:84:ba:67:41:0e:1c: 6e:87:b0:50:46:51:f4:17:f9:5d:aa:90:34:3a:2a: db:fd:6e:b3:a4:ae:e8:70:df:f4:c9:75:78:cb:2f: 4e:e7:b9:dc:89:92:93:74:16:09:2d:d3:8d:d2:34: 0c:b1:6d:50:e0:47:d3:1e:c2:6f:d2:f8:1c:ef:47: e6:72:30:66:82:cd:2d:54:bc:36:37:a6:d4:9f:54: bc:9a:e3:d6:4e:12:8c:62:c3:ca:fc:99:7e:dd:7d: 9f:66:0a:8a:fd:c2:83:81:fb:e5:ef:40:ec:49:f6: c2:11:eb:8e:0e:5b:bb:37:a0:81:90:1c:0d:02:6c: dd:4b:6e:82:57:45:d9:60:2b:49:a0:ef:94:46:bd: df:91:e9:c9:50:91:2b:3d:8e:7b:70:80:ad:9c:fd: 36:05:c1:21:b8:0a:39:d6:68:f4:c7:e0:4d:75:d9: 23:cb:b8:34:26:bd:a8:48:47:50:18:b6:2a:3c:39: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:14:22:F1:D8:66:FE:1B:51:A5:7B:5B:0E:5C:E6:34:AC:D2:00 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bf:fa:7e:fc:c3:91:a7:53:da:19:09:4d:14:c1:0d:fd:c6: da:bd:4f:51:41:e0:d9:89:0b:e2:45:a6:e1:7f:22:3c:7e:c0: 36:3c:d5:0e:b2:df:ff:91:3c:ae:18:eb:4d:94:b3:8f:46:df: 22:6e:fb:8d:cd:0f:26:61:64:45:37:6b:61:60:27:5a:5e:bc: 36:04:97:b3:b8:b2:d9:13:12:45:5a:00:97:fb:a7:82:74:fb: ec:e2:96:01:f9:77:f0:08:fc:42:30:62:47:38:f4:85:2f:13: 67:8b:fd:e9:fc:c6:25:71:d5:9a:a2:79:51:7d:63:d0:33:55: 32:1f:f4:29:a3:53:8b:8b:2f:cd:3b:84:bc:2f:a1:15:c6:af: 2d:1c:6b:8d:31:c1:16:3d:4c:cd:1c:58:0a:5b:2d:d2:f9:10: c6:5f:23:c1:ce:44:36:09:88:87:84:9f:71:83:3c:a3:2d:c6: 6d:90:58:f0:36:ab:21:0f:cb:1a:e1:1c:1f:8a:cb:78:84:4d: 2d:59:9b:c3:05:09:96:4c:e9:15:6d:33:68:f1:b5:31:c5:69: 19:78:bf:d4:b8:91:31:71:ea:32:33:9a:95:62:9d:41:4e:7e: 7c:97:95:81:d8:45:68:57:a8:24:38:b8:29:ff:7c:87:04:e1: a1:ca:5d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNTMwMTc0NzU0WhcNMjUwNjA2MTc0NzU0WjAYMRYwFAYD VQQDEw02ODM5ZWY0YS1hZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnoDgKBIMdWOBRsaPDrVqWyQe0QPYFksunGmDlgrtt+EK2DkxxAJ4r9ntGiu uYwAiOjJtV0O7HaAJlYBpA0qpL2GZSSEumdBDhxuh7BQRlH0F/ldqpA0Oirb/W6z pK7ocN/0yXV4yy9O57nciZKTdBYJLdON0jQMsW1Q4EfTHsJv0vgc70fmcjBmgs0t VLw2N6bUn1S8muPWThKMYsPK/Jl+3X2fZgqK/cKDgfvl70DsSfbCEeuODlu7N6CB kBwNAmzdS26CV0XZYCtJoO+URr3fkenJUJErPY57cICtnP02BcEhuAo51mj0x+BN ddkjy7g0Jr2oSEdQGLYqPDlFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh6FCLx 2Gb+G1Gle1sOXOY0rNIAMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfv/p+/MORp1PaGQlNFMEN/cbavU9RQeDZiQviRabhfyI8fsA2PNUO st//kTyuGOtNlLOPRt8ibvuNzQ8mYWRFN2thYCdaXrw2BJezuLLZExJFWgCX+6eC dPvs4pYB+XfwCPxCMGJHOPSFLxNni/3p/MYlcdWaonlRfWPQM1UyH/Qpo1OLiy/N O4S8L6EVxq8tHGuNMcEWPUzNHFgKWy3S+RDGXyPBzkQ2CYiHhJ9xgzyjLcZtkFjw NqshD8sa4Rwfist4hE0tWZvDBQmWTOkVbTNo8bUxxWkZeL/UuJExceoyM5qVYp1B Tn58l5WB2EVoV6gkOLgp/3yHBOGhyl3q -----END CERTIFICATE-----Generated at Sat May 31 16:34:57 2025 by rpki-client