$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: LJozULbRakCy5OCuU+ZZEYi5j3xWqa/06ndUBMcgeQY= Subject key identifier: 6D:7C:5C:B7:34:68:A9:7B:AE:CC:72:CF:18:A7:1C:A6:81:25:4F:4C Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04B1 Signing time: Sat 31 May 2025 00:06:41 +0000 Manifest this update: Sat 31 May 2025 00:06:41 +0000 Manifest next update: Sat 07 Jun 2025 00:06:41 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: DKehSio2aYEV8yXHLeditQtTijxxj9+HKMKk3zfvI/I=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: May 31 00:06:41 2025 GMT Not After : Jun 7 00:06:41 2025 GMT Subject: CN=683a4811-c2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:64:d5:d4:be:98:e5:c7:66:2d:a6:7c:45: 33:54:db:0c:67:84:93:af:68:06:83:2b:8a:90:a6: 0f:4c:59:16:90:76:39:98:68:73:53:f9:59:90:27: 6e:67:ec:8f:66:d7:5a:a9:e0:9f:8d:5b:b6:c0:d8: a2:3f:eb:c3:ca:87:bc:78:e4:59:fb:d9:42:7d:40: 45:15:d4:44:7e:65:38:13:50:d7:51:87:61:e0:7f: da:c2:ce:e5:0d:1e:01:07:3b:c1:03:97:8b:a4:80: 99:38:2c:1d:d6:73:9c:68:11:6d:92:69:7f:0d:a2: e1:e9:49:f4:02:5a:50:62:98:2c:cb:e2:98:ec:c2: ef:13:64:8a:6f:8d:25:0f:cf:07:30:f3:96:bc:2c: e6:7d:27:87:7f:03:f7:8d:fa:1f:dd:a1:d9:dd:18: 4d:a1:d6:ff:55:c7:54:3a:e0:59:30:2b:ef:6a:08: c2:f6:9b:41:72:ba:82:7e:32:53:55:93:af:8b:54: 13:b0:68:f2:9f:60:c7:03:53:fc:ea:97:ea:77:1a: a4:84:05:f1:db:40:38:96:48:f8:60:34:b9:e3:13: 7c:46:5a:c3:b4:09:e0:73:ae:2b:a4:01:fc:1b:e8: 5f:4c:83:92:b0:a3:d4:30:b6:f3:3c:0c:f0:04:06: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7C:5C:B7:34:68:A9:7B:AE:CC:72:CF:18:A7:1C:A6:81:25:4F:4C X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5b:5b:1c:e6:d4:cf:01:e6:58:10:7f:6a:99:e0:26:0b:30: 2a:67:36:9b:5b:c2:1c:07:15:44:a0:2c:c3:28:28:b9:04:5e: 97:fc:9c:30:c4:76:e2:3b:80:17:40:3b:03:38:6b:4b:77:1e: 66:e3:15:dc:15:4d:42:d4:49:28:08:7f:17:d2:5c:ee:6a:67: ef:75:68:ab:d7:59:8c:e2:7a:a5:35:50:b5:29:3c:54:62:c0: de:96:71:56:78:99:c1:7b:c6:5c:1f:51:3e:1a:1b:39:6c:47: 89:ad:5f:c4:4a:1a:e2:f6:51:aa:c0:a0:54:ad:2e:2f:41:27: 42:8c:38:04:6c:08:d4:7d:77:fd:d8:e8:5e:ae:17:65:fc:7a: 2f:09:4a:14:4d:4f:40:0d:c5:d8:ab:44:4c:42:ec:19:09:0d: 54:96:ac:49:bb:e8:91:29:84:91:71:46:3c:96:79:ed:fb:99: d8:71:12:32:11:14:9d:06:2c:1f:42:c1:de:3f:5f:50:ce:f1: bf:b3:d5:a8:11:2e:0b:63:c2:11:ba:62:eb:13:b9:6a:f1:d1: 79:8b:37:b0:e1:b7:4d:a6:29:be:de:c2:eb:0f:ad:db:89:de: 3d:a5:d0:dc:bd:78:9e:ba:3b:1e:c2:72:21:b0:d8:79:ea:89: a1:94:a4:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwNTMxMDAwNjQxWhcNMjUwNjA3MDAwNjQxWjAYMRYwFAYD VQQDEw02ODNhNDgxMS1jMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tlk1dS+mOXHZi2mfEUzVNsMZ4STr2gGgyuKkKYPTFkWkHY5mGhzU/lZkCdu Z+yPZtdaqeCfjVu2wNiiP+vDyoe8eORZ+9lCfUBFFdREfmU4E1DXUYdh4H/aws7l DR4BBzvBA5eLpICZOCwd1nOcaBFtkml/DaLh6Un0AlpQYpgsy+KY7MLvE2SKb40l D88HMPOWvCzmfSeHfwP3jfof3aHZ3RhNodb/VcdUOuBZMCvvagjC9ptBcrqCfjJT VZOvi1QTsGjyn2DHA1P86pfqdxqkhAXx20A4lkj4YDS54xN8RlrDtAngc64rpAH8 G+hfTIOSsKPUMLbzPAzwBAa6TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG18XLc0 aKl7rsxyzxinHKaBJU9MMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvW1sc5tTPAeZYEH9qmeAmCzAqZzabW8IcBxVEoCzDKCi5BF6X/Jww xHbiO4AXQDsDOGtLdx5m4xXcFU1C1EkoCH8X0lzuamfvdWir11mM4nqlNVC1KTxU YsDelnFWeJnBe8ZcH1E+Ghs5bEeJrV/EShri9lGqwKBUrS4vQSdCjDgEbAjUfXf9 2Oherhdl/HovCUoUTU9ADcXYq0RMQuwZCQ1UlqxJu+iRKYSRcUY8lnnt+5nYcRIy ERSdBiwfQsHeP19QzvG/s9WoES4LY8IRumLrE7lq8dF5izew4bdNpim+3sLrD63b id49pdDcvXieujsewnIhsNh56omhlKTN -----END CERTIFICATE-----Generated at Sat May 31 16:59:29 2025 by rpki-client