$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: b+REmhraR1hvbhxiIeLBp8Anm9uR2fEm5whqgW9DbHU= Subject key identifier: 5A:CA:DC:15:DB:1E:6A:3D:A0:04:4F:9D:89:91:74:17:F4:03:4C:73 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0C4B Signing time: Fri 30 May 2025 18:51:19 +0000 Manifest this update: Fri 30 May 2025 18:51:19 +0000 Manifest next update: Fri 06 Jun 2025 18:51:19 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: UnXJ+aG/jVJOrhcTwfiUmOXfqfpLPu4wPTHXLRPHYyI=) 2: 1B07853EA4F711EF84B06E42C4F9AE02.roa (hash: Gm1fun7pnQKByDLxI/azTsTDDryvchojFZK6+n4D1PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: May 30 18:51:19 2025 GMT Not After : Jun 6 18:51:19 2025 GMT Subject: CN=6839fe27-77a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:db:d9:95:e3:ae:ec:d3:78:87:ee:87:2c: 42:2d:c5:ba:6b:f6:03:d4:78:d1:7e:f4:05:39:e1: d4:74:25:b6:46:ad:07:ff:fb:d7:a8:8d:b3:2a:1a: 51:b9:75:0c:e2:db:b6:a6:01:26:bd:a0:f8:ee:b1: 1d:7f:96:b6:db:51:63:e8:3a:e1:b2:de:4c:9c:05: 26:1b:6b:d9:1e:dc:d8:3f:46:7e:77:8f:33:4f:28: 19:5d:25:79:71:07:8b:89:20:33:1d:63:61:e2:d6: 66:05:cd:03:f3:41:f7:15:d5:45:23:14:5b:df:a9: d3:63:dd:87:41:23:1d:96:b8:4d:6a:76:43:14:2f: 9e:ad:04:bb:00:50:8a:91:f2:ac:24:a3:6a:56:ed: 09:6f:61:3c:5b:22:f8:4b:f9:8b:ef:f9:37:d6:e2: 1d:94:17:23:a3:46:46:f2:32:05:40:61:e7:04:36: 19:dc:79:7f:8c:9c:c1:6c:81:33:cb:3c:4e:07:c7: 3c:1c:c3:3f:b9:dc:ea:98:35:de:b6:17:e3:60:fa: 62:40:bb:c5:bf:53:ab:8a:49:36:1a:81:1f:92:60: 90:f5:b5:27:15:38:13:45:05:84:99:42:f1:e8:7b: bd:7f:c4:7e:b8:c4:66:84:28:77:5b:c1:c0:a0:2b: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CA:DC:15:DB:1E:6A:3D:A0:04:4F:9D:89:91:74:17:F4:03:4C:73 X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ba:b8:a6:85:76:36:cb:d6:38:e4:d8:a0:51:28:be:76:8b: aa:ce:8a:a4:a7:fd:94:08:f0:d2:73:2b:42:65:f9:4b:6b:97: c6:91:4f:f3:a3:01:0b:4a:f4:f8:28:03:1b:5f:ef:19:9d:6f: 61:bd:90:ab:cf:3f:bf:75:f4:09:02:a9:9f:f6:75:3f:41:9d: 44:df:21:d1:2d:c8:d5:e2:bf:c9:13:57:38:55:74:87:aa:15: 5c:5e:d8:c8:af:db:04:ce:a4:7d:40:5c:e3:ab:2c:ac:29:9a: 42:a6:eb:3a:88:76:82:b2:da:89:ae:43:76:52:70:03:a5:a5: a4:0c:71:e8:ce:93:49:ed:1c:fa:96:88:ba:ff:12:9a:2b:be: 4c:e7:45:fd:57:39:66:4b:d5:62:ae:22:10:c9:a3:57:38:4e: 6f:38:22:bb:2c:0e:c3:16:2e:e9:22:0f:9e:97:79:da:cd:51: 98:b9:6b:8d:8c:0f:44:e0:3e:68:19:17:63:3e:ed:7e:f2:02: 88:4e:96:5e:00:7e:e7:73:07:e6:fd:71:9f:d9:f3:34:12:35: 73:3c:6e:2c:59:53:92:3e:89:3b:64:2f:2b:12:4a:e6:8f:09: 1e:24:71:2b:2f:b4:fa:f8:fc:6e:b5:a9:bf:2c:d8:a5:1a:3e: 7b:55:e4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUwNTMwMTg1MTE5WhcNMjUwNjA2MTg1MTE5WjAYMRYwFAYD VQQDEw02ODM5ZmUyNy03N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Hzb2ZXjruzTeIfuhyxCLcW6a/YD1HjRfvQFOeHUdCW2Rq0H//vXqI2zKhpR uXUM4tu2pgEmvaD47rEdf5a221Fj6Drhst5MnAUmG2vZHtzYP0Z+d48zTygZXSV5 cQeLiSAzHWNh4tZmBc0D80H3FdVFIxRb36nTY92HQSMdlrhNanZDFC+erQS7AFCK kfKsJKNqVu0Jb2E8WyL4S/mL7/k31uIdlBcjo0ZG8jIFQGHnBDYZ3Hl/jJzBbIEz yzxOB8c8HMM/udzqmDXethfjYPpiQLvFv1Orikk2GoEfkmCQ9bUnFTgTRQWEmULx 6Hu9f8R+uMRmhCh3W8HAoCu+OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrK3BXb Hmo9oARPnYmRdBf0A0xzMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/urimhXY2y9Y45NigUSi+douqzoqkp/2UCPDScytCZflLa5fGkU/z owELSvT4KAMbX+8ZnW9hvZCrzz+/dfQJAqmf9nU/QZ1E3yHRLcjV4r/JE1c4VXSH qhVcXtjIr9sEzqR9QFzjqyysKZpCpus6iHaCstqJrkN2UnADpaWkDHHozpNJ7Rz6 loi6/xKaK75M50X9VzlmS9ViriIQyaNXOE5vOCK7LA7DFi7pIg+el3nazVGYuWuN jA9E4D5oGRdjPu1+8gKITpZeAH7ncwfm/XGf2fM0EjVzPG4sWVOSPok7ZC8rEkrm jwkeJHErL7T6+Pxutam/LNilGj57VeSL -----END CERTIFICATE-----Generated at Sat May 31 17:27:50 2025 by rpki-client