$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: LxKigPk2MUo+kMZrJqPoOiTatRbrPjkaAp4uTiaHMAA= Subject key identifier: 22:41:A7:48:EF:27:C1:18:6E:00:AD:0A:51:66:BC:EB:37:6A:F6:8B Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 067A Signing time: Fri 30 May 2025 22:34:21 +0000 Manifest this update: Fri 30 May 2025 22:34:21 +0000 Manifest next update: Fri 06 Jun 2025 22:34:21 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: 2lrvcXvijwhTq9bu5IuvsRXCCt5V4C1A8zulLbVWbAg=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: May 30 22:34:21 2025 GMT Not After : Jun 6 22:34:21 2025 GMT Subject: CN=683a326d-4a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:99:9f:ac:e6:5a:39:d1:3b:c0:e8:46:ee: e7:f3:57:0d:93:ad:10:60:e1:28:c0:14:fa:81:80: 72:a7:41:7a:d1:dd:07:75:19:a1:71:20:d5:de:a8: db:4e:54:66:fc:f5:c1:18:77:7f:9f:dd:8c:7b:90: 0f:9e:2f:a0:c6:a7:8a:37:9c:d8:e2:9f:40:36:a7: 99:34:5a:db:75:fa:be:69:f3:a6:42:15:88:e7:d7: 45:0b:1b:24:e0:dd:5e:76:7d:78:63:fe:bd:35:12: ff:a5:43:4b:c1:fa:a3:8f:fd:4b:38:63:c1:75:3a: ce:fc:46:61:56:47:3a:f9:e1:10:d0:23:17:7a:2c: f3:69:06:80:ee:57:cc:91:94:a2:83:da:ee:26:0b: 11:3b:9a:9a:75:60:bd:95:f0:d1:96:84:42:44:1d: 4d:eb:83:3c:02:07:79:c0:8f:c9:d4:4e:6b:14:5b: 72:2d:3a:eb:57:48:b2:6e:1f:60:ec:a3:52:84:7a: 4d:17:54:ac:a1:a3:75:8a:02:2b:ce:f7:32:55:eb: fb:9a:ea:b9:80:70:da:04:3c:03:af:d4:03:dd:fc: d2:18:90:bb:1c:ca:cd:cc:8f:43:79:bc:08:fa:4c: 9d:d9:bf:a8:85:37:00:76:6e:3e:20:c8:8b:a5:02: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:41:A7:48:EF:27:C1:18:6E:00:AD:0A:51:66:BC:EB:37:6A:F6:8B X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3e:82:6a:72:8b:3d:34:b3:2c:46:11:3c:22:ec:bd:d3:e9: ee:a2:ca:0a:a3:2b:82:a2:db:e5:c4:06:0a:4a:7a:43:b9:1f: c1:21:bc:27:1d:9f:ad:b3:7f:5d:2a:b2:9f:de:69:84:9f:39: f1:21:4d:0d:dd:70:09:2b:9f:03:ad:ab:f4:05:f6:ef:47:52: a1:78:88:dc:57:ad:70:74:12:4c:a6:cf:c0:1e:27:17:88:59: 23:2f:ef:c3:d5:b4:f2:f1:0c:3d:04:5c:f8:0d:37:18:11:79: d2:da:42:91:10:39:74:b3:eb:a1:8b:9d:34:74:8a:8e:6f:80: 65:a6:54:26:65:1b:7d:d3:64:a4:d0:28:22:72:c5:5a:d8:6e: a8:08:10:66:22:a3:19:f2:48:88:3b:59:a9:8c:32:08:74:46: ee:94:12:6b:99:57:77:6c:c2:27:6e:00:d7:44:4b:dd:f9:58: 56:08:d2:28:7c:be:72:cf:8f:ee:b9:44:82:37:42:61:ad:08: 25:16:a8:05:6d:2c:71:10:41:82:59:ef:07:a6:cd:72:7c:7a: b8:6e:e5:f8:c5:17:e8:b7:dc:21:35:79:14:58:2d:60:8b:86: 41:9a:13:2f:21:70:39:c7:0b:b5:8d:f3:e7:60:3a:8a:39:43: 44:b6:4b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNTMwMjIzNDIxWhcNMjUwNjA2MjIzNDIxWjAYMRYwFAYD VQQDEw02ODNhMzI2ZC00YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g+Zn6zmWjnRO8DoRu7n81cNk60QYOEowBT6gYByp0F60d0HdRmhcSDV3qjb TlRm/PXBGHd/n92Me5APni+gxqeKN5zY4p9ANqeZNFrbdfq+afOmQhWI59dFCxsk 4N1edn14Y/69NRL/pUNLwfqjj/1LOGPBdTrO/EZhVkc6+eEQ0CMXeizzaQaA7lfM kZSig9ruJgsRO5qadWC9lfDRloRCRB1N64M8Agd5wI/J1E5rFFtyLTrrV0iybh9g 7KNShHpNF1SsoaN1igIrzvcyVev7muq5gHDaBDwDr9QD3fzSGJC7HMrNzI9DebwI +kyd2b+ohTcAdm4+IMiLpQKroQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJBp0jv J8EYbgCtClFmvOs3avaLMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2PoJqcos9NLMsRhE8Iuy90+nuosoKoyuCotvlxAYKSnpDuR/BIbwn HZ+ts39dKrKf3mmEnznxIU0N3XAJK58Drav0BfbvR1KheIjcV61wdBJMps/AHicX iFkjL+/D1bTy8Qw9BFz4DTcYEXnS2kKREDl0s+uhi500dIqOb4BlplQmZRt902Sk 0CgicsVa2G6oCBBmIqMZ8kiIO1mpjDIIdEbulBJrmVd3bMInbgDXREvd+VhWCNIo fL5yz4/uuUSCN0JhrQglFqgFbSxxEEGCWe8Hps1yfHq4buX4xRfot9whNXkUWC1g i4ZBmhMvIXA5xwu1jfPnYDqKOUNEtksn -----END CERTIFICATE-----Generated at Sat May 31 16:46:56 2025 by rpki-client