$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: I6Yzz/8e3R3xNRifOTNuAZSL0dGA+TtDkFzDDx1HwJ4= Subject key identifier: 5E:78:93:AA:76:A9:60:6B:0F:3B:85:AF:1C:CB:1E:E9:BD:18:C8:7B Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0394 Signing time: Sat 07 Jun 2025 00:51:02 +0000 Manifest this update: Sat 07 Jun 2025 00:51:01 +0000 Manifest next update: Sat 14 Jun 2025 00:51:01 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: YHd/nqmYWes861j5msNXiOBwHM7bZ1RyhYFYMYIVfXA=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Jun 7 00:51:01 2025 GMT Not After : Jun 14 00:51:01 2025 GMT Subject: CN=68438cf5-00db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:c9:a3:95:6a:29:83:52:77:ba:8b:a8:8c: 27:1d:20:44:a0:ef:36:9a:84:c4:8a:56:ac:57:52: 0a:29:9d:53:12:ac:e0:f0:65:af:78:38:4a:b8:45: 00:92:da:0b:8c:c9:b0:74:3d:82:68:6c:19:59:19: 07:df:50:78:1f:61:cb:d5:42:a5:3d:4a:07:95:c5: a9:2b:1f:33:f4:0a:5d:cc:25:3a:7b:07:24:42:49: cc:2b:73:68:8a:16:5c:50:27:f7:71:0b:fa:2a:e4: a3:c1:d9:ee:2d:b4:f1:49:a4:b5:ad:10:b6:4d:a4: a1:a8:f4:96:4d:be:cd:dc:41:31:db:50:ea:b9:4b: 15:11:91:41:11:a8:54:c7:f5:3a:7d:99:0e:b2:ad: 8f:80:1b:e2:75:15:8e:91:d1:15:b8:8d:1c:e1:82: 8d:fe:b5:54:d1:54:95:72:50:e3:57:7a:a2:86:67: 2a:2f:4a:11:db:cd:6f:88:96:c3:a6:16:1e:d0:c1: 11:56:e3:77:d0:6e:d8:71:f4:1f:26:ac:62:b8:d3: b6:71:e1:0b:23:07:e7:6a:06:4c:4c:29:95:a7:19: c2:c5:56:dd:d1:7c:2f:4e:6c:93:59:62:f2:46:60: 90:85:45:2f:cf:39:37:57:6d:6d:67:7f:2b:95:25: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:93:AA:76:A9:60:6B:0F:3B:85:AF:1C:CB:1E:E9:BD:18:C8:7B X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5a:d5:fc:96:c5:bc:60:48:3b:40:69:5e:fc:19:44:7c:1b: 26:81:69:7d:ea:83:1c:d5:a8:99:94:48:6b:19:c2:fc:f1:c2: dd:f1:db:74:53:a1:d1:73:76:1f:8b:8d:00:0c:19:b3:79:07: 1e:11:c3:a1:39:2b:77:4d:82:17:f9:c0:61:73:27:fd:67:4f: 18:09:bd:4a:dc:ea:92:d2:85:c2:73:b7:45:de:0b:e6:2e:8b: c6:45:0d:91:f4:a6:39:f5:ce:e3:1f:7f:fb:e0:1c:f4:0e:20: 5f:a2:79:1d:d5:a4:96:44:4b:23:eb:7c:97:81:99:2c:bf:2a: c0:34:31:2c:e8:f0:41:ba:dd:26:6e:2a:c1:48:a9:55:84:26: 03:25:eb:b1:79:47:ef:fb:f3:88:a8:c1:a4:2e:e5:9d:46:50: 41:d1:ee:0c:5f:12:f2:fe:0a:ee:91:87:b1:a0:4c:78:4c:d3: f7:0a:98:73:a5:03:41:a9:c8:20:bc:9d:1b:96:48:96:29:a4: 99:b6:8b:2f:60:3f:ea:21:66:fa:81:6b:f4:d0:cb:c7:69:42: 5c:de:91:ea:4a:21:e1:f6:13:15:f9:e3:23:a7:b7:b6:f6:f7: ce:a5:ec:f5:66:a2:5a:eb:b1:7b:fb:58:7c:42:6c:ca:9a:64: 30:fa:61:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjUwNjA3MDA1MTAxWhcNMjUwNjE0MDA1MTAxWjAYMRYwFAYD VQQDEw02ODQzOGNmNS0wMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOLJo5VqKYNSd7qLqIwnHSBEoO82moTEilasV1IKKZ1TEqzg8GWveDhKuEUA ktoLjMmwdD2CaGwZWRkH31B4H2HL1UKlPUoHlcWpKx8z9ApdzCU6ewckQknMK3No ihZcUCf3cQv6KuSjwdnuLbTxSaS1rRC2TaShqPSWTb7N3EEx21DquUsVEZFBEahU x/U6fZkOsq2PgBvidRWOkdEVuI0c4YKN/rVU0VSVclDjV3qihmcqL0oR281viJbD phYe0MERVuN30G7YcfQfJqxiuNO2ceELIwfnagZMTCmVpxnCxVbd0XwvTmyTWWLy RmCQhUUvzzk3V21tZ38rlSU7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF54k6p2 qWBrDzuFrxzLHum9GMh7MB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWtX8lsW8YEg7QGle/BlEfBsmgWl96oMc1aiZlEhrGcL88cLd8dt0 U6HRc3Yfi40ADBmzeQceEcOhOSt3TYIX+cBhcyf9Z08YCb1K3OqS0oXCc7dF3gvm LovGRQ2R9KY59c7jH3/74Bz0DiBfonkd1aSWREsj63yXgZksvyrANDEs6PBBut0m birBSKlVhCYDJeuxeUfv+/OIqMGkLuWdRlBB0e4MXxLy/grukYexoEx4TNP3Cphz pQNBqcggvJ0blkiWKaSZtosvYD/qIWb6gWv00MvHaUJc3pHqSiHh9hMV+eMjp7e2 9vfOpez1ZqJa67F7+1h8QmzKmmQw+mE9 -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:38 2025 by rpki-client