$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: dP8/+qJvdehhIXg+7K0TD+zmAwcOZ83/b5Tmer+jgo0= Subject key identifier: 2C:05:D6:FA:C2:6A:FC:D6:21:09:25:4F:B0:99:20:CC:08:CC:2F:8C Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 19F9 Signing time: Fri 30 May 2025 16:33:55 +0000 Manifest this update: Fri 30 May 2025 16:33:55 +0000 Manifest next update: Fri 06 Jun 2025 16:33:55 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: sj9erC9GbGBAamLz9/z3nP2nlpVTkn3DDtu8aYqCl7k=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: 5xyOynEgqDMhag5EGZQN5c/BseZmGpYeCMWkUJIxh/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6669 (0x1a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: May 30 16:33:55 2025 GMT Not After : Jun 6 16:33:55 2025 GMT Subject: CN=6839ddf3-67b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:36:f0:4d:92:96:81:0b:95:31:34:c6:de:94: a0:84:0b:fd:19:eb:cd:6f:ec:50:7f:71:a9:14:13: 0b:b6:24:7c:29:ae:eb:59:d6:69:e6:50:a7:6a:f3: ca:9d:3c:8c:66:db:ee:75:fc:23:10:84:93:16:e3: 68:49:a5:ca:fe:d7:8b:e8:d4:da:15:a1:ed:d5:d4: bb:9b:bf:b6:7a:15:85:23:e5:8a:25:0d:6d:88:92: 6e:82:3b:af:95:d5:c9:10:d5:d5:bc:82:35:d7:50: 91:d8:74:9f:ef:c2:d1:86:39:d3:62:61:af:b5:4b: 47:6a:3a:32:c8:54:7e:73:49:47:48:2a:b3:df:64: 45:20:fb:35:41:f0:b1:b1:67:5e:02:2f:bc:b1:5f: 0f:9c:f4:c8:30:a5:47:ed:7f:d5:ff:99:2f:53:8e: 1f:7b:68:dd:79:ad:ab:16:6c:e3:06:64:e8:65:6d: 5e:3c:e9:14:70:ce:02:4c:70:12:3b:12:e1:ee:5a: 8b:50:8f:54:ec:e2:2d:dc:85:4d:c7:cb:51:dd:cd: 0a:2b:23:dc:43:20:e3:5f:cb:99:ba:cd:fb:fa:af: 70:e3:30:f2:9f:1b:6c:5d:88:57:f7:fe:db:c2:54: e8:61:e8:a4:b1:4c:fe:b9:f4:1e:a5:99:74:cf:42: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:05:D6:FA:C2:6A:FC:D6:21:09:25:4F:B0:99:20:CC:08:CC:2F:8C X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e4:3f:9f:6f:80:ca:f7:2f:ae:d3:94:b6:9a:b8:9e:c5:03: 6f:c0:85:8f:a4:27:85:4f:88:5e:1a:82:bf:de:c6:f0:70:0f: 42:1c:11:1f:3e:70:b4:70:48:68:b0:58:69:d5:4c:c0:ff:94: 8e:92:fa:c5:5b:68:06:01:71:70:8e:aa:36:b3:65:33:f8:51: 56:f6:ff:11:6a:be:e3:21:42:e6:62:f6:8e:6d:db:43:c6:4a: 8d:cd:6f:01:83:6d:1b:a0:c7:4b:6f:c9:57:10:a3:68:8b:bd: f5:54:20:f6:74:45:5f:50:ed:22:77:71:b8:cd:da:40:0d:53: ac:b5:b8:a4:0b:a8:8f:e6:2c:97:1a:41:75:0d:0e:0c:b8:76: e0:b8:08:5e:bb:52:88:57:30:a5:17:36:6b:83:ef:e2:81:65: 41:76:a4:ee:c5:d8:3b:06:3d:ac:ee:0c:3a:62:94:6f:0d:75: 6c:ed:71:d3:ba:a1:55:ae:87:00:22:12:2d:54:b3:c6:32:58: 86:24:3e:1e:a0:6d:6d:b6:1c:bc:bc:10:7f:4d:35:b6:e4:c2: 29:f4:2a:d1:b8:f5:cc:af:ae:c1:a4:65:3f:46:4a:c7:91:ed: 42:de:fc:09:96:60:26:69:66:61:c1:85:bd:c6:de:c7:1b:89: 97:90:cd:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUwNTMwMTYzMzU1WhcNMjUwNjA2MTYzMzU1WjAYMRYwFAYD VQQDEw02ODM5ZGRmMy02N2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zbwTZKWgQuVMTTG3pSghAv9GevNb+xQf3GpFBMLtiR8Ka7rWdZp5lCnavPK nTyMZtvudfwjEISTFuNoSaXK/teL6NTaFaHt1dS7m7+2ehWFI+WKJQ1tiJJugjuv ldXJENXVvII111CR2HSf78LRhjnTYmGvtUtHajoyyFR+c0lHSCqz32RFIPs1QfCx sWdeAi+8sV8PnPTIMKVH7X/V/5kvU44fe2jdea2rFmzjBmToZW1ePOkUcM4CTHAS OxLh7lqLUI9U7OIt3IVNx8tR3c0KKyPcQyDjX8uZus37+q9w4zDynxtsXYhX9/7b wlToYeiksUz+ufQepZl0z0JcmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwF1vrC avzWIQklT7CZIMwIzC+MMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa5D+fb4DK9y+u05S2mriexQNvwIWPpCeFT4heGoK/3sbwcA9CHBEf PnC0cEhosFhp1UzA/5SOkvrFW2gGAXFwjqo2s2Uz+FFW9v8Rar7jIULmYvaObdtD xkqNzW8Bg20boMdLb8lXEKNoi731VCD2dEVfUO0id3G4zdpADVOstbikC6iP5iyX GkF1DQ4MuHbguAheu1KIVzClFzZrg+/igWVBdqTuxdg7Bj2s7gw6YpRvDXVs7XHT uqFVrocAIhItVLPGMliGJD4eoG1tthy8vBB/TTW25MIp9CrRuPXMr67BpGU/RkrH ke1C3vwJlmAmaWZhwYW9xt7HG4mXkM2Q -----END CERTIFICATE-----Generated at Sat May 31 16:35:01 2025 by rpki-client