$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: lv/CbnXsua0zBfATlFGuUT4VSG2VWruG1/eU6tYlX/Q= Subject key identifier: 74:6A:3A:0F:4A:FC:50:75:D9:DC:39:DA:D8:AF:73:B6:C6:AF:77:3E Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 2838 Signing time: Fri 30 May 2025 15:45:44 +0000 Manifest this update: Fri 30 May 2025 15:45:44 +0000 Manifest next update: Fri 06 Jun 2025 15:45:44 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: c4YLig4xxGu7q307DVhdY1iod59qLKPTTZK49vWiboo=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 5: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (hash: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w=) 6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) 7: 69448F24901811EFAD307C71C4F9AE02.roa (hash: Hzh3xVvRRKPzv+kWPsFSNzqLMIeNZk0IRUe+axzlVNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10413 (0x28ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: May 30 15:45:44 2025 GMT Not After : Jun 6 15:45:44 2025 GMT Subject: CN=6839d2a8-1f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:92:d2:17:20:07:4c:10:d7:b5:49:e8:89: 9d:3c:18:2f:23:2a:35:1d:08:7c:92:a9:18:6f:00: d1:1a:b8:fa:e1:9c:a6:97:7f:7d:e1:d0:5a:63:fb: a5:27:5f:44:23:9a:6b:32:54:9c:3e:d1:74:70:16: 8c:a3:07:54:44:2c:83:b1:f5:5a:71:c4:c7:25:e3: d2:bf:15:71:77:66:58:7e:37:e4:ea:39:97:2a:60: 58:ce:f2:d6:b6:98:d7:64:e2:2f:47:ef:d9:b0:c0: 2c:9a:df:ec:5f:e1:48:61:48:24:04:16:d1:00:c5: bd:e3:60:6a:0f:4a:0f:69:63:2d:23:3e:98:5e:c7: 64:00:c1:6e:4e:ff:e1:39:2b:f5:66:4f:0f:8c:07: d5:c4:a6:4e:de:54:e3:6f:9f:0f:c6:56:e1:db:d8: b3:df:28:0c:e6:ae:38:aa:ef:de:45:04:72:e7:f9: 08:17:11:76:10:55:d8:b4:97:8d:0b:e0:f4:60:b1: 33:97:ca:8e:03:63:2c:1c:9d:69:39:e2:46:aa:e0: 7d:89:6d:b5:62:87:66:c6:3b:ef:43:30:41:4e:93: 67:5c:74:14:d1:0d:10:04:97:7d:0a:07:df:da:2a: 39:bb:9c:3c:4f:1f:8a:24:4b:81:78:e4:41:dd:e7: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:3A:0F:4A:FC:50:75:D9:DC:39:DA:D8:AF:73:B6:C6:AF:77:3E X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:7c:f0:b7:51:ce:75:35:19:84:c0:57:c6:f1:a6:6b:19: dd:e7:8e:cf:c7:0e:e3:97:6e:b2:c9:72:ef:b0:87:60:f4:66: 04:74:82:25:4d:2c:cc:24:48:d0:a1:11:63:35:d2:c9:bc:ed: 67:4b:6e:04:ca:08:0a:bb:78:c9:55:a0:59:65:d6:96:71:de: 37:18:14:97:95:f0:fc:e0:b9:a4:dc:85:4a:fa:c1:68:03:6d: 0f:38:60:5f:7d:a9:4c:8d:64:16:2e:9f:b2:10:e0:a0:6a:41: cc:9a:6b:cd:f7:41:b1:ba:b1:71:f0:ca:b9:1a:f6:cb:b0:77: 0e:3e:0f:a4:f9:c5:6f:4a:08:97:f1:e0:54:8a:68:10:54:4b: ba:24:2b:bf:b2:f7:e1:b1:d2:a4:31:68:6d:56:5c:21:fe:e7: 4f:50:dd:3b:f0:93:7e:72:6f:95:4e:b1:49:d5:de:86:3c:62: c6:00:41:c9:a0:8d:08:82:d9:cc:2f:f2:e7:24:1c:df:57:f5: b2:a3:31:36:15:d3:60:2d:6c:4d:80:f0:c6:63:3d:69:c0:e1: 1b:9c:39:d6:db:c9:9e:9f:58:c4:17:8a:5b:98:9a:d8:12:3e: 46:5e:a3:84:b7:13:94:bf:6c:f2:98:68:26:f7:4d:6d:2a:2e: f0:e6:90:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNTMwMTU0NTQ0WhcNMjUwNjA2MTU0NTQ0WjAYMRYwFAYD VQQDEw02ODM5ZDJhOC0xZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04SS0hcgB0wQ17VJ6ImdPBgvIyo1HQh8kqkYbwDRGrj64Zyml3994dBaY/ul J19EI5prMlScPtF0cBaMowdURCyDsfVaccTHJePSvxVxd2ZYfjfk6jmXKmBYzvLW tpjXZOIvR+/ZsMAsmt/sX+FIYUgkBBbRAMW942BqD0oPaWMtIz6YXsdkAMFuTv/h OSv1Zk8PjAfVxKZO3lTjb58Pxlbh29iz3ygM5q44qu/eRQRy5/kIFxF2EFXYtJeN C+D0YLEzl8qOA2MsHJ1pOeJGquB9iW21YodmxjvvQzBBTpNnXHQU0Q0QBJd9Cgff 2io5u5w8Tx+KJEuBeORB3ef9awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRqOg9K /FB12dw52tivc7bGr3c+MB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHPHzwt1HOdTUZhMBXxvGmaxnd547Pxw7jl26yyXLvsIdg9GYEdIIl TSzMJEjQoRFjNdLJvO1nS24EyggKu3jJVaBZZdaWcd43GBSXlfD84Lmk3IVK+sFo A20POGBffalMjWQWLp+yEOCgakHMmmvN90GxurFx8Mq5GvbLsHcOPg+k+cVvSgiX 8eBUimgQVEu6JCu/svfhsdKkMWhtVlwh/udPUN078JN+cm+VTrFJ1d6GPGLGAEHJ oI0IgtnML/LnJBzfV/WyozE2FdNgLWxNgPDGYz1pwOEbnDnW28men1jEF4pbmJrY Ej5GXqOEtxOUv2zymGgm901tKi7w5pDH -----END CERTIFICATE-----Generated at Sat May 31 16:38:08 2025 by rpki-client