$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: tyaEOfajkBbODud18OmEpIanfLOb/QGEMacXrSBc6rs= Subject key identifier: F8:C1:21:9A:61:FE:CE:D0:92:C7:56:29:AE:4D:17:61:B3:21:72:00 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 0151 Signing time: Sat 07 Jun 2025 03:43:53 +0000 Manifest this update: Sat 07 Jun 2025 03:43:53 +0000 Manifest next update: Sat 14 Jun 2025 03:43:53 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: leCCH//eaZnMI0R2SMnvZNyLtddNDqxyN3Eq42spVzg=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 03:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Jun 7 03:43:53 2025 GMT Not After : Jun 14 03:43:53 2025 GMT Subject: CN=6843b579-da1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:cf:34:28:5f:96:e0:d7:85:bc:75:26:a1: 26:03:fd:cb:6c:96:df:3b:05:91:c9:d7:70:09:39: 46:77:51:e3:57:fb:c9:f6:c5:03:da:61:32:fc:5f: 4d:e8:0d:eb:dc:08:b7:fb:1a:e6:72:0a:4f:7b:2b: 27:f4:c1:66:b7:57:f4:e3:1b:6b:8d:e0:8f:d5:1f: ed:68:ad:08:70:2c:7a:48:94:2a:ed:a7:1a:5f:21: b2:fb:be:8a:d2:59:e3:c9:8e:a5:5a:d2:6a:23:8f: ba:c2:5a:4c:b0:c8:4d:6c:af:00:78:88:20:94:7f: f8:b1:37:af:ca:01:4a:d7:3e:8f:e2:b9:15:0b:d8: ed:26:8a:dd:52:bb:db:79:77:13:95:5e:93:92:cd: b0:06:f6:c2:f3:8c:68:ef:0f:07:d6:4c:fc:6f:f7: 11:cd:73:e3:2f:2f:de:d6:fd:52:7a:12:aa:e5:fb: 90:07:d4:00:62:88:b6:0f:96:f2:31:b2:c0:40:a1: 9b:ef:a0:27:f1:58:13:d9:48:14:be:27:07:b6:fa: 7a:11:a5:ae:75:dd:bf:28:af:f2:09:41:4c:30:88: 2e:c9:19:20:cf:e5:d6:3c:39:f3:cb:04:ec:0c:2a: 38:ce:be:40:b4:82:11:18:4c:3f:42:25:1d:cf:28: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:21:9A:61:FE:CE:D0:92:C7:56:29:AE:4D:17:61:B3:21:72:00 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:f3:24:69:ec:c1:c9:01:a8:54:55:80:67:29:02:fa:64:60: de:5d:f4:4b:6f:8e:9c:c8:b7:c9:53:43:d0:3c:6c:42:5a:f0: 52:9c:31:4b:16:43:c5:e4:dd:6d:d4:44:34:5e:30:3f:96:90: 14:03:03:ae:43:14:b2:6b:97:1d:1f:be:69:d3:19:17:45:bd: 91:8b:b1:f4:fe:80:6d:86:6d:dc:be:6c:a1:05:11:54:7a:c1: c4:66:39:55:bb:76:42:99:72:0d:65:71:00:77:c1:7d:b6:98: 14:e6:e8:e9:7a:df:9e:f0:50:dc:2b:3a:a7:8a:f1:78:c0:00: 10:df:e4:27:0c:2f:b4:b6:6b:39:f2:d7:6f:cf:ca:e5:c9:3b: df:86:ea:7a:c4:70:e8:51:8d:6a:8a:75:36:14:53:f5:a8:2e: 6a:75:a6:54:63:29:a2:e4:aa:1d:7a:36:38:2c:25:76:b1:1c: 1a:d4:4b:54:fe:35:df:29:e1:fc:7b:06:2a:46:f4:61:15:68: 28:1a:6f:a9:dc:1f:3a:ed:97:d1:6a:84:04:53:57:d2:ed:1f: a7:b6:b7:bb:58:6e:be:fb:cf:94:2c:0e:f4:88:4d:1c:24:88: a9:b3:a0:c9:15:03:c0:5b:34:32:4c:f5:0e:d9:c9:e4:ef:7f: 7f:2b:42:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUwNjA3MDM0MzUzWhcNMjUwNjE0MDM0MzUzWjAYMRYwFAYD VQQDEw02ODQzYjU3OS1kYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX7PNChfluDXhbx1JqEmA/3LbJbfOwWRyddwCTlGd1HjV/vJ9sUD2mEy/F9N 6A3r3Ai3+xrmcgpPeysn9MFmt1f04xtrjeCP1R/taK0IcCx6SJQq7acaXyGy+76K 0lnjyY6lWtJqI4+6wlpMsMhNbK8AeIgglH/4sTevygFK1z6P4rkVC9jtJordUrvb eXcTlV6Tks2wBvbC84xo7w8H1kz8b/cRzXPjLy/e1v1SehKq5fuQB9QAYoi2D5by MbLAQKGb76An8VgT2UgUvicHtvp6EaWudd2/KK/yCUFMMIguyRkgz+XWPDnzywTs DCo4zr5AtIIRGEw/QiUdzyhdYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjBIZph /s7QksdWKa5NF2GzIXIAMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm8yRp7MHJAahUVYBnKQL6ZGDeXfRLb46cyLfJU0PQPGxCWvBSnDFL FkPF5N1t1EQ0XjA/lpAUAwOuQxSya5cdH75p0xkXRb2Ri7H0/oBthm3cvmyhBRFU esHEZjlVu3ZCmXINZXEAd8F9tpgU5ujpet+e8FDcKzqnivF4wAAQ3+QnDC+0tms5 8tdvz8rlyTvfhup6xHDoUY1qinU2FFP1qC5qdaZUYymi5KodejY4LCV2sRwa1EtU /jXfKeH8ewYqRvRhFWgoGm+p3B867ZfRaoQEU1fS7R+ntre7WG6++8+ULA70iE0c JIips6DJFQPAWzQyTPUO2cnk739/K0I+ -----END CERTIFICATE-----Generated at Sat Jun 7 06:50:29 2025 by rpki-client