$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: a9zJq6TSHZZpd7ZCkzQ5UJQku+cljIeHmyCHAwbFFSw= Subject key identifier: 5E:2F:62:31:B4:78:6F:CB:6E:54:45:F8:E5:55:5E:ED:FF:80:35:C4 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 117B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1174 Signing time: Sun 20 Jul 2025 17:15:41 +0000 Manifest this update: Sun 20 Jul 2025 17:15:41 +0000 Manifest next update: Sun 27 Jul 2025 17:15:41 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: Aqbucv0aSX/B2k5hPIk8oHJcHwuDLFxVNIYUntExdBg=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4475 (0x117b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jul 20 17:15:41 2025 GMT Not After : Jul 27 17:15:41 2025 GMT Subject: CN=687d243d-7d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:45:7a:e6:c6:43:01:cc:ad:74:69:05:c6: 9e:de:ed:f6:62:7e:2f:61:8e:6a:e0:03:57:16:d9: 19:dc:1e:80:03:71:0d:bd:4e:a0:1e:8a:3e:a8:75: 51:73:b5:49:5b:37:b8:cd:7a:53:b8:c4:60:b7:ac: 19:0d:78:1a:ae:f1:e1:fe:c3:22:a9:a2:da:07:61: 9a:bf:6d:6d:00:d4:73:36:3a:bd:d7:6e:48:31:04: 55:f1:db:0a:30:7f:e7:26:f6:19:b7:2b:d9:4e:98: 33:8d:c1:22:13:34:34:fd:b4:85:39:af:de:e1:e6: 77:63:fe:e9:87:f4:51:3f:e9:c4:1a:2c:b4:8c:38: ed:8c:7e:04:00:f8:55:06:de:36:3a:88:93:78:88: 61:53:80:3f:e5:10:18:fc:15:84:05:ee:e2:89:45: ca:2a:be:57:b7:a2:19:80:09:68:e4:77:16:9b:f2: 44:23:2b:36:74:94:87:94:96:54:f2:21:f8:d3:db: ef:83:01:81:7a:f3:45:6f:d5:f2:23:9d:37:b4:74: 4c:2f:39:f2:5d:d3:d2:4d:0a:94:d4:bd:95:e9:31: 4d:f1:59:14:66:c1:d3:1c:c4:a9:c4:7e:18:34:a9: 19:4c:7a:06:eb:12:f7:07:e0:9e:11:95:27:7c:fe: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:62:31:B4:78:6F:CB:6E:54:45:F8:E5:55:5E:ED:FF:80:35:C4 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:43:3c:ed:e7:fc:51:de:98:1d:91:92:9e:83:80:96:08:8a: 24:f2:d3:53:5f:1d:88:75:2a:3d:81:7f:ef:fe:fe:7a:26:71: 4e:1f:b6:28:e4:93:77:03:53:a1:f0:d8:e3:ed:18:fc:88:e0: 71:84:7e:97:eb:90:29:78:66:78:13:42:6a:9d:93:68:93:d2: 38:55:26:27:06:0a:ea:72:be:3a:e1:4c:3b:e7:3f:98:da:44: 2d:02:dc:be:7d:f9:68:ac:06:08:84:98:d4:50:f3:31:38:3a: 34:a9:87:08:e3:a9:fb:a4:0c:41:52:53:c7:fb:93:fc:cf:e4: 4f:99:37:8a:ad:7c:1d:07:75:69:36:4e:af:5f:4d:4b:d9:c5: 69:bd:df:62:44:3c:59:ba:bd:2b:55:4a:26:f5:ae:e7:f5:f2: 78:e6:be:c0:c3:02:9e:4f:0f:2c:98:5b:de:8e:ed:34:55:fb: 12:a7:ee:e8:ac:80:e3:bd:e9:3d:7d:84:2a:82:ff:1f:44:41: 55:7c:7d:d5:de:47:cf:3e:5f:16:89:eb:c0:fd:c8:b5:8d:4d: f9:34:48:19:35:76:4b:9d:a1:15:e7:d9:3a:95:06:64:a4:b2: b9:89:95:56:7a:da:ac:29:39:77:21:cc:54:f9:d7:fd:bb:b3: d3:17:57:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwNzIwMTcxNTQxWhcNMjUwNzI3MTcxNTQxWjAYMRYwFAYD VQQDEw02ODdkMjQzZC03ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFZFeubGQwHMrXRpBcae3u32Yn4vYY5q4ANXFtkZ3B6AA3ENvU6gHoo+qHVR c7VJWze4zXpTuMRgt6wZDXgarvHh/sMiqaLaB2Gav21tANRzNjq9125IMQRV8dsK MH/nJvYZtyvZTpgzjcEiEzQ0/bSFOa/e4eZ3Y/7ph/RRP+nEGiy0jDjtjH4EAPhV Bt42OoiTeIhhU4A/5RAY/BWEBe7iiUXKKr5Xt6IZgAlo5HcWm/JEIys2dJSHlJZU 8iH409vvgwGBevNFb9XyI503tHRMLznyXdPSTQqU1L2V6TFN8VkUZsHTHMSpxH4Y NKkZTHoG6xL3B+CeEZUnfP7H8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4vYjG0 eG/LblRF+OVVXu3/gDXEMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQzzt5/xR3pgdkZKeg4CWCIok8tNTXx2IdSo9gX/v/v56JnFOH7Yo 5JN3A1Oh8Njj7Rj8iOBxhH6X65ApeGZ4E0JqnZNok9I4VSYnBgrqcr464Uw75z+Y 2kQtAty+fflorAYIhJjUUPMxODo0qYcI46n7pAxBUlPH+5P8z+RPmTeKrXwdB3Vp Nk6vX01L2cVpvd9iRDxZur0rVUom9a7n9fJ45r7AwwKeTw8smFveju00VfsSp+7o rIDjvek9fYQqgv8fREFVfH3V3kfPPl8WievA/ci1jU35NEgZNXZLnaEV59k6lQZk pLK5iZVWetqsKTl3IcxU+df9u7PTF1e6 -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:32 2025 by rpki-client