$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: DuyXPETb9y8vFobEcT/jD37fMwHb+poaGdz88nKoPmU= Subject key identifier: 1E:5D:D9:B7:DE:AF:01:FE:3A:7C:AD:F4:31:09:2A:E1:1F:7F:FD:13 Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 0101 Signing time: Tue 03 Jun 2025 04:52:35 +0000 Manifest this update: Tue 03 Jun 2025 04:52:35 +0000 Manifest next update: Tue 10 Jun 2025 04:52:35 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: q9FZg8XgX8SNcO9rLlGJIqvUzTigaRKETCgHVM7NyyA=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Jun 3 04:52:35 2025 GMT Not After : Jun 10 04:52:35 2025 GMT Subject: CN=683e7f93-1271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:f8:b1:bf:75:27:f2:4f:96:a0:6c:16:e0: 4c:bc:43:52:a4:f4:44:f8:67:1f:53:53:ec:2c:4e: 18:ba:64:eb:1b:97:a8:37:5c:5b:74:d6:01:30:ee: 85:68:9b:eb:4b:3e:b6:a4:9e:15:2c:7f:e4:39:ec: e7:24:e3:e3:8e:f3:d5:3e:e6:9f:ca:fa:e7:d3:25: 94:76:d4:ad:e8:19:5a:31:b5:95:a5:4c:38:2a:38: 49:9e:31:e4:93:1e:79:65:af:f6:6c:1f:5f:3e:57: d4:f8:1e:b0:9f:52:c6:5d:db:76:a7:b6:7c:33:35: 28:c0:c8:c5:4b:71:e8:f1:82:40:07:03:f5:fd:d8: c8:fd:88:ff:07:47:0e:3a:45:1b:ab:fe:86:92:69: 20:bb:32:e1:b2:8d:5a:36:75:1c:0c:89:57:8a:95: 8a:1d:07:d4:ff:e5:44:ab:0f:ab:8c:b8:83:32:88: d3:5d:85:37:9d:c8:ed:a9:3f:4a:1b:d8:fb:24:2f: 71:2a:de:da:3f:90:49:66:2c:79:bf:e4:65:45:8d: ab:f5:e6:4c:9b:4a:fa:71:68:d8:1c:b3:6c:d5:35: 80:b1:34:9d:42:85:48:9b:f9:47:5c:f5:98:32:cc: 01:2b:c9:8f:6a:62:80:96:7e:90:99:13:aa:91:75: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:D9:B7:DE:AF:01:FE:3A:7C:AD:F4:31:09:2A:E1:1F:7F:FD:13 X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:03:e7:ce:d1:6d:02:20:c5:8e:c4:b8:b6:33:82:34:9b:15: 08:92:2c:f7:e4:59:96:89:b0:82:24:ca:11:34:fa:5f:41:a2: 3e:e9:c7:40:ee:09:70:92:3c:c2:91:42:46:83:46:78:a1:f7: 38:a2:45:55:d1:84:18:86:02:c3:94:4c:3e:f9:02:fc:11:09: 8e:8a:4d:9e:f7:f7:7e:39:45:20:44:69:4c:e6:71:9a:23:4d: 65:69:86:05:4e:68:f7:7e:ab:5d:cd:91:10:23:e0:81:51:cc: 42:68:3d:0c:a0:ba:ff:5a:ea:f1:bf:60:e1:73:e0:db:87:ab: 30:58:48:d8:a3:4e:e3:a6:04:c1:29:da:f9:7a:d6:9d:50:60: 49:62:ad:22:6d:ff:c8:93:82:18:a0:66:fb:50:4c:87:01:e3: 85:fe:a1:99:50:c0:21:5d:9c:ee:50:86:d6:e1:b7:96:b5:f3: 5b:35:38:f6:6b:7e:70:70:ec:3a:7f:0f:73:4f:5c:f3:6c:fa: 44:79:92:15:4b:3c:0d:b5:0e:86:19:15:4a:a6:25:88:a9:33: 59:2e:75:61:dc:00:5b:fb:08:56:73:de:4e:ff:8e:17:5a:84: 51:cf:6e:a7:ea:e1:09:f5:cb:f4:09:0e:49:94:a0:dd:87:6d: 32:3d:e2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUwNjAzMDQ1MjM1WhcNMjUwNjEwMDQ1MjM1WjAYMRYwFAYD VQQDEw02ODNlN2Y5My0xMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPH4sb91J/JPlqBsFuBMvENSpPRE+GcfU1PsLE4YumTrG5eoN1xbdNYBMO6F aJvrSz62pJ4VLH/kOeznJOPjjvPVPuafyvrn0yWUdtSt6BlaMbWVpUw4KjhJnjHk kx55Za/2bB9fPlfU+B6wn1LGXdt2p7Z8MzUowMjFS3Ho8YJABwP1/djI/Yj/B0cO OkUbq/6GkmkguzLhso1aNnUcDIlXipWKHQfU/+VEqw+rjLiDMojTXYU3ncjtqT9K G9j7JC9xKt7aP5BJZix5v+RlRY2r9eZMm0r6cWjYHLNs1TWAsTSdQoVIm/lHXPWY MswBK8mPamKAln6QmROqkXUngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5d2bfe rwH+Onyt9DEJKuEff/0TMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqA+fO0W0CIMWOxLi2M4I0mxUIkiz35FmWibCCJMoRNPpfQaI+6cdA 7glwkjzCkUJGg0Z4ofc4okVV0YQYhgLDlEw++QL8EQmOik2e9/d+OUUgRGlM5nGa I01laYYFTmj3fqtdzZEQI+CBUcxCaD0MoLr/Wurxv2Dhc+Dbh6swWEjYo07jpgTB Kdr5etadUGBJYq0ibf/Ik4IYoGb7UEyHAeOF/qGZUMAhXZzuUIbW4beWtfNbNTj2 a35wcOw6fw9zT1zzbPpEeZIVSzwNtQ6GGRVKpiWIqTNZLnVh3ABb+whWc95O/44X WoRRz26n6uEJ9cv0CQ5JlKDdh20yPeIL -----END CERTIFICATE-----Generated at Tue Jun 3 23:47:24 2025 by rpki-client