$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: fy5SVt8J3F45ZyBSydw8orQTIM8HjV5hIoqvqYBja7k= Subject key identifier: B9:F3:74:D6:2E:36:24:62:ED:AF:72:42:41:3F:40:6E:D3:D0:95:18 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 3495 Signing time: Mon 30 Jun 2025 14:43:39 +0000 Manifest this update: Mon 30 Jun 2025 14:43:38 +0000 Manifest next update: Mon 07 Jul 2025 14:43:38 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: UTzfoI5KiYNqKopIP/UGqwl3iJ0oIKtGvd351rOlzqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Jun 30 14:43:38 2025 GMT Not After : Jul 7 14:43:38 2025 GMT Subject: CN=6862a29b-580a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:ef:0d:f9:4d:af:26:2d:52:3e:a4:74:87: 64:04:e3:87:53:e8:8f:27:e0:fc:96:61:92:59:97: 2d:75:93:a9:6a:a3:08:0b:71:a9:7d:c3:d4:85:1c: c0:28:dc:61:a4:c0:8f:b3:8e:a4:7b:6b:d4:39:8a: 28:e4:59:d3:8e:e0:3a:9e:5c:82:39:dd:f8:ee:3f: 54:54:e1:c4:62:fc:cf:9a:b1:28:cd:fe:8b:19:e9: 52:3a:c2:bb:8d:60:6f:af:3c:7e:85:f7:4c:6f:73: b1:9e:a2:db:58:36:22:52:2b:9a:5a:f3:43:c8:b7: 06:c9:7a:e8:3b:ec:75:3f:e0:de:6d:37:08:06:05: c7:aa:a6:21:42:bc:ed:c4:81:73:1c:3e:4e:02:4e: 1c:8c:cc:eb:c8:e6:f4:81:21:c2:7f:db:2d:72:b0: b7:24:95:50:16:b4:7f:d2:72:af:1c:7e:58:3b:a8: 5a:43:95:b0:b1:e8:61:a8:f6:59:6b:d9:d8:78:4c: 28:41:56:75:6c:4b:35:8a:a9:09:bb:0c:c7:fb:8b: 9d:85:dc:be:c3:65:a0:25:c2:da:96:17:04:d5:ad: d0:05:16:51:41:90:28:41:6b:4f:01:db:5b:73:b0: 1a:96:87:8b:98:9f:c9:96:77:ca:cd:30:f3:d1:97: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:74:D6:2E:36:24:62:ED:AF:72:42:41:3F:40:6E:D3:D0:95:18 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ac:ee:19:db:6e:02:a0:3b:b3:bc:fd:3c:47:e4:7e:23:7b: 4e:7f:4f:67:37:03:d1:31:63:36:58:34:90:5d:c4:aa:34:b9: 34:3c:6a:4c:b8:e1:96:82:21:6f:4b:0f:bf:46:05:17:90:a6: 03:f1:56:4e:33:14:57:0e:ef:3d:42:a3:78:8e:ec:64:e2:98: 5a:cd:e7:4f:50:d4:55:ba:bd:09:42:b5:6b:7a:01:a7:aa:90: b8:dc:6d:3a:04:c5:42:57:01:fd:75:40:ed:a0:4e:0b:66:6b: 5a:09:6a:fc:cb:80:61:a8:19:1c:fd:63:e6:9f:a7:f4:90:af: b9:83:56:39:42:f0:57:1a:11:b1:7e:a7:c0:6c:f3:77:f0:73: 6f:b0:8f:06:49:df:c6:4d:a5:57:74:8f:3d:e2:c0:d8:4e:38: 02:fc:aa:e0:23:fc:da:06:5f:c2:42:29:35:03:56:1b:f6:dc: af:92:90:87:56:02:72:78:3a:c7:2d:f4:b2:31:2c:42:ed:4f: fe:a7:d5:24:a5:55:cc:79:c0:63:f9:bc:40:3a:57:34:73:cd: f4:cd:01:38:21:85:58:96:d2:6a:1f:8c:01:be:61:01:ef:17: 57:a7:7a:b2:b8:44:11:63:6a:2e:dc:68:a4:2c:8c:b5:52:75: 3e:63:d9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwNjMwMTQ0MzM4WhcNMjUwNzA3MTQ0MzM4WjAYMRYwFAYD VQQDEw02ODYyYTI5Yi01ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zjvDflNryYtUj6kdIdkBOOHU+iPJ+D8lmGSWZctdZOpaqMIC3GpfcPUhRzA KNxhpMCPs46ke2vUOYoo5FnTjuA6nlyCOd347j9UVOHEYvzPmrEozf6LGelSOsK7 jWBvrzx+hfdMb3OxnqLbWDYiUiuaWvNDyLcGyXroO+x1P+DebTcIBgXHqqYhQrzt xIFzHD5OAk4cjMzryOb0gSHCf9stcrC3JJVQFrR/0nKvHH5YO6haQ5WwsehhqPZZ a9nYeEwoQVZ1bEs1iqkJuwzH+4udhdy+w2WgJcLalhcE1a3QBRZRQZAoQWtPAdtb c7AaloeLmJ/JlnfKzTDz0ZcQdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnzdNYu NiRi7a9yQkE/QG7T0JUYMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQrO4Z224CoDuzvP08R+R+I3tOf09nNwPRMWM2WDSQXcSqNLk0PGpM uOGWgiFvSw+/RgUXkKYD8VZOMxRXDu89QqN4juxk4phazedPUNRVur0JQrVregGn qpC43G06BMVCVwH9dUDtoE4LZmtaCWr8y4BhqBkc/WPmn6f0kK+5g1Y5QvBXGhGx fqfAbPN38HNvsI8GSd/GTaVXdI894sDYTjgC/KrgI/zaBl/CQik1A1Yb9tyvkpCH VgJyeDrHLfSyMSxC7U/+p9UkpVXMecBj+bxAOlc0c830zQE4IYVYltJqH4wBvmEB 7xdXp3qyuEQRY2ou3GikLIy1UnU+Y9mN -----END CERTIFICATE-----Generated at Tue Jul 1 19:17:25 2025 by rpki-client