$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: a8C7+UQUS5v+rCtxYzqj9emkguKnOib9XxBS6+ntEK8= Subject key identifier: A8:FE:80:49:6A:CB:92:9D:CD:B9:5F:57:CC:2A:11:97:F7:A7:D0:B8 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 076F Signing time: Thu 24 Apr 2025 21:23:14 +0000 Manifest this update: Thu 24 Apr 2025 21:23:14 +0000 Manifest next update: Thu 01 May 2025 21:23:14 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: Asdn1Jia5s5AZf2slOC1tP71/DqvOD8tUw5DR308jNk=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: 0LRH57WQzl4Rls3DA1D5ibSKHe1ZUiGoTlR4SEyE25o=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: FjZNV84GDEYG9rs7eSzrPs7JIeca7EBDu1KkwsxHYzI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: 4D0MtO3klPUbzcREIroqTwRalXeVpYqZnuQeF7up3Rs=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: iCvDHT2InFQYFJJ9LW52qC1YqNM+jnahLgFdP507rPQ=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: HgwGz1HNixPgkzYja86IABpReSgaWGluIINyqRObpeI=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: 3vTDoLxSMP6iCYPrTnRPa68156DbahM7Va7enXW/PyM=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: jHyz9hBesQPy2OLfpKePjWLaykWWtF8kdX2XvcQ4rao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Apr 24 21:23:14 2025 GMT Not After : May 1 21:23:14 2025 GMT Subject: CN=680aabc2-636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ee:42:66:45:58:71:44:dc:d5:c2:6b:e5:af: ff:a8:70:30:b0:80:86:c6:77:17:ef:7a:12:9c:e2: a4:39:78:9b:b0:30:f9:04:00:ec:66:26:15:d6:c7: 05:65:aa:71:2d:06:78:f0:ef:ff:7e:42:0b:45:ff: 62:8f:83:19:7c:19:1b:cd:ec:7b:95:de:10:ce:e1: 27:0a:30:d1:36:b7:b9:9e:fc:6f:1a:25:be:0e:88: 32:c4:b3:39:eb:fe:ca:36:7c:51:43:5d:1a:fa:41: 6b:c3:91:2c:e0:fc:ab:dd:c5:bc:2f:cb:b2:90:44: 11:fd:35:6c:0e:0a:6f:1a:48:39:79:28:02:e8:8a: 96:bf:e6:61:60:fa:5f:fa:14:3d:4a:9c:33:93:8e: 98:24:39:72:57:c8:63:e4:d3:07:94:58:a6:9a:32: 2a:be:bb:04:1e:dd:49:3b:e6:4f:18:d9:b4:60:ea: e0:b8:71:f4:1e:32:0a:23:e7:ab:0f:7f:22:6e:0f: 9b:54:2a:48:02:72:22:52:d9:82:dc:7c:7c:04:2f: c8:c5:77:02:e6:55:6f:a5:d6:98:29:dc:66:96:a5: a1:66:54:c9:2d:de:a3:c1:37:35:a3:68:53:c8:35: 30:60:54:11:f3:c2:61:47:cd:51:24:66:91:af:0e: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:80:49:6A:CB:92:9D:CD:B9:5F:57:CC:2A:11:97:F7:A7:D0:B8 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:de:cc:5e:9a:e9:55:00:a2:65:37:8c:21:6e:0f:24:9e:6f: fd:9f:d1:1c:cc:0a:27:33:71:30:dc:31:80:b1:91:3e:8b:9f: 10:b7:59:a4:b9:b8:04:7c:c3:89:fe:bd:1f:5c:dc:c5:69:97: a8:54:f9:ba:ff:8c:2e:bd:1b:16:ab:45:e9:89:29:69:63:7b: 28:a3:fe:fb:25:c5:58:b9:1f:94:6a:2c:73:8f:62:80:b2:5f: 66:83:69:d4:ec:49:0e:f3:b3:d4:15:28:a1:c0:42:8a:a0:af: 9f:0f:e1:85:9e:d1:cf:b0:ac:c7:dd:c9:8d:be:6a:c5:d2:7a: 0d:d3:ef:90:ca:82:50:3b:96:57:db:3b:ab:d9:89:2b:85:2e: e1:32:90:8f:b5:0d:ba:3e:18:de:f5:01:4c:3f:9b:53:a9:dc: 06:d5:01:4d:2f:a0:0c:90:43:11:d1:a9:4c:51:a9:09:b7:bf: 8e:2f:ce:83:4a:0f:19:33:a0:bf:d9:19:85:5e:0c:5b:9a:8f: 45:09:2c:69:e0:4f:e5:f4:c0:4e:71:0e:18:b5:b0:13:32:cb: 48:84:22:eb:91:78:bd:0f:5f:3c:40:f3:5f:f8:fa:07:fc:eb: 83:41:e6:db:0e:e0:15:60:f3:26:02:c3:5c:eb:c3:c7:8c:80: c6:0c:45:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwNDI0MjEyMzE0WhcNMjUwNTAxMjEyMzE0WjAYMRYwFAYD VQQDEw02ODBhYWJjMi02MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+5CZkVYcUTc1cJr5a//qHAwsICGxncX73oSnOKkOXibsDD5BADsZiYV1scF ZapxLQZ48O//fkILRf9ij4MZfBkbzex7ld4QzuEnCjDRNre5nvxvGiW+DogyxLM5 6/7KNnxRQ10a+kFrw5Es4Pyr3cW8L8uykEQR/TVsDgpvGkg5eSgC6IqWv+ZhYPpf +hQ9Spwzk46YJDlyV8hj5NMHlFimmjIqvrsEHt1JO+ZPGNm0YOrguHH0HjIKI+er D38ibg+bVCpIAnIiUtmC3Hx8BC/IxXcC5lVvpdaYKdxmlqWhZlTJLd6jwTc1o2hT yDUwYFQR88JhR81RJGaRrw5gLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj+gElq y5KdzblfV8wqEZf3p9C4MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV3sxemulVAKJlN4whbg8knm/9n9EczAonM3Ew3DGAsZE+i58Qt1mk ubgEfMOJ/r0fXNzFaZeoVPm6/4wuvRsWq0XpiSlpY3soo/77JcVYuR+Uaixzj2KA sl9mg2nU7EkO87PUFSihwEKKoK+fD+GFntHPsKzH3cmNvmrF0noN0++QyoJQO5ZX 2zur2YkrhS7hMpCPtQ26Phje9QFMP5tTqdwG1QFNL6AMkEMR0alMUakJt7+OL86D Sg8ZM6C/2RmFXgxbmo9FCSxp4E/l9MBOcQ4YtbATMstIhCLrkXi9D188QPNf+PoH /OuDQebbDuAVYPMmAsNc68PHjIDGDEXe -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:54 2025 by rpki-client