$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: JZAx/T6urpKL961sY36/+yDxp/oTECa6ptSqB00aj0g= Subject key identifier: 51:1A:C5:49:CA:A5:EB:A3:47:90:8A:BE:02:AF:CE:E3:DE:FE:49:65 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0AD3 Signing time: Fri 30 May 2025 19:38:42 +0000 Manifest this update: Fri 30 May 2025 19:38:41 +0000 Manifest next update: Fri 06 Jun 2025 19:38:41 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: cpRxyH1pR5Sro0+sluRQVGgzBEK8ooUbvqYjL8HYG+Q=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: May 30 19:38:41 2025 GMT Not After : Jun 6 19:38:41 2025 GMT Subject: CN=683a0942-7ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:3b:fe:ad:45:f5:14:85:7a:88:d4:9b:14: 3a:71:96:c1:b7:40:87:11:92:79:49:b4:96:e5:0a: 6b:af:56:b3:58:9f:af:70:eb:78:9a:c2:5b:a9:c8: 6d:1a:84:68:7b:51:16:fc:6e:0d:57:ad:cf:dd:e5: c5:89:19:9b:32:a1:01:0e:0e:ca:95:09:10:c9:de: 6f:e7:e5:05:c9:6b:ab:f3:37:57:fe:23:44:07:46: 46:42:e8:71:7b:6a:f1:7b:cf:d3:d9:bd:5d:2b:46: 62:14:56:f9:7b:fc:b0:d1:a5:02:64:6c:63:e0:f5: d7:7d:20:7d:3e:ab:04:15:ee:9a:7f:25:a3:43:e7: 64:12:3b:c6:d9:4e:f7:17:88:6a:0c:03:f3:2a:e8: 52:dd:f8:db:a1:c8:5f:10:d6:43:b6:33:fd:bc:ae: 9d:ac:de:ea:c4:de:0f:16:ce:23:d7:9f:f1:6c:0d: 8b:10:5b:7f:e8:88:be:af:6d:7b:9d:bb:b1:ae:ea: 32:92:b9:4d:2f:ee:6a:bc:ed:8a:3d:3c:d8:b4:62: 9a:56:6d:34:59:cd:94:0a:63:23:e2:42:27:60:66: 1d:47:d3:a7:b6:42:f1:9e:73:f4:d3:a0:44:3f:56: 0a:e9:14:0d:35:f7:32:1d:89:6f:cb:81:a3:95:b2: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1A:C5:49:CA:A5:EB:A3:47:90:8A:BE:02:AF:CE:E3:DE:FE:49:65 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:d2:28:a6:c4:b1:b5:60:91:a0:82:8c:ec:2f:92:2b:09: 26:4c:25:53:0a:3e:3d:6a:9a:2a:a1:97:60:9e:10:78:61:50: ca:7e:73:f2:ff:b6:0d:1a:71:ef:d5:94:14:e3:ed:88:2c:02: 4a:5e:09:c5:c0:73:19:6a:54:72:f8:d7:9e:3c:94:e3:db:a8: ee:b2:5f:ac:03:6b:20:12:79:47:bb:dd:6a:c2:f1:83:22:26: b7:28:1b:c7:60:5e:0c:5c:4e:8a:1f:65:62:59:3a:68:20:06: ab:87:68:7c:4b:75:b7:a5:96:3c:31:84:0f:e5:a5:dc:5d:35: 6b:95:a6:ea:dc:9c:50:46:fd:e6:da:b8:6d:57:7c:f2:63:6e: 07:a2:38:9d:9a:3a:e0:97:43:4f:85:75:f0:8a:d6:02:ad:70: d0:9a:dc:20:d5:fe:10:96:46:56:13:b3:cd:0c:31:0f:f9:4d: 28:87:af:6b:62:32:c9:6c:0b:52:07:67:36:c2:1b:58:a7:96: 1e:86:cc:12:fc:30:62:ae:ec:65:52:41:9a:e3:29:e8:bc:4f: 57:e7:bc:12:8f:ff:7b:28:9c:e0:0c:9e:1f:83:cf:33:58:86: 31:25:85:70:b6:88:9f:79:72:cb:6c:cd:7a:c0:2e:20:73:af: 45:cb:54:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNTMwMTkzODQxWhcNMjUwNjA2MTkzODQxWjAYMRYwFAYD VQQDEw02ODNhMDk0Mi03ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jw7/q1F9RSFeojUmxQ6cZbBt0CHEZJ5SbSW5Qprr1azWJ+vcOt4msJbqcht GoRoe1EW/G4NV63P3eXFiRmbMqEBDg7KlQkQyd5v5+UFyWur8zdX/iNEB0ZGQuhx e2rxe8/T2b1dK0ZiFFb5e/yw0aUCZGxj4PXXfSB9PqsEFe6afyWjQ+dkEjvG2U73 F4hqDAPzKuhS3fjbochfENZDtjP9vK6drN7qxN4PFs4j15/xbA2LEFt/6Ii+r217 nbuxruoykrlNL+5qvO2KPTzYtGKaVm00Wc2UCmMj4kInYGYdR9OntkLxnnP006BE P1YK6RQNNfcyHYlvy4GjlbKebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEaxUnK peujR5CKvgKvzuPe/kllMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfodIopsSxtWCRoIKM7C+SKwkmTCVTCj49apoqoZdgnhB4YVDKfnPy /7YNGnHv1ZQU4+2ILAJKXgnFwHMZalRy+NeePJTj26jusl+sA2sgEnlHu91qwvGD Iia3KBvHYF4MXE6KH2ViWTpoIAarh2h8S3W3pZY8MYQP5aXcXTVrlabq3JxQRv3m 2rhtV3zyY24Hojidmjrgl0NPhXXwitYCrXDQmtwg1f4QlkZWE7PNDDEP+U0oh69r YjLJbAtSB2c2whtYp5YehswS/DBiruxlUkGa4ynovE9X57wSj/97KJzgDJ4fg88z WIYxJYVwtoifeXLLbM16wC4gc69Fy1QL -----END CERTIFICATE-----Generated at Sat May 31 16:53:41 2025 by rpki-client