$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: yHB97dmcbD3YsuxZtnoAOsMgE5HbyJq+87A9nYy7gQs= Subject key identifier: E5:2C:9F:B0:1C:70:A9:1D:D7:9F:16:F8:23:94:24:71:B8:B4:65:B0 Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 18F9 Signing time: Thu 24 Apr 2025 16:27:26 +0000 Manifest this update: Thu 24 Apr 2025 16:27:26 +0000 Manifest next update: Thu 01 May 2025 16:27:26 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: 5M2h6nlY2SKnOpuSrhAADf6rjd6KO/g5e8Vj6WFWaBs=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: Apr 24 16:27:26 2025 GMT Not After : May 1 16:27:26 2025 GMT Subject: CN=680a666e-74f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:d6:0c:00:45:f1:a6:f9:30:41:e4:55:c7: b8:f1:4a:2e:00:01:c9:86:d1:3b:cd:94:bd:eb:31: 1e:34:99:6e:4e:9a:31:fa:c1:d4:c4:c1:95:70:46: 84:79:05:c7:bf:04:8b:99:02:7d:ee:41:10:b0:03: ca:22:38:36:20:b7:fe:f9:2d:cc:e6:a0:a6:d2:6b: 7f:4c:a7:b9:83:87:7a:45:52:df:89:33:c5:ff:3a: a0:bc:d4:1e:57:3b:9f:e3:eb:d1:9e:1d:78:b3:51: a0:28:aa:81:8d:03:b8:5e:21:2d:0d:5b:a6:56:04: b3:1e:dc:c7:71:99:08:a2:e8:dd:47:d3:f8:69:75: 60:5a:03:31:39:9a:ca:d4:f2:ad:d6:8b:69:15:51: 8a:29:b7:35:6e:c1:91:31:53:5a:0c:b2:64:c4:13: 33:79:63:44:70:89:cc:b8:68:62:b6:16:19:4b:5f: 78:1b:2b:26:43:61:55:fc:e4:31:61:a7:96:1b:47: c5:c8:e5:fa:f0:25:90:bb:d3:c8:20:4d:a0:fc:bc: ff:a4:c2:b0:3a:c4:d3:fb:2a:1b:d1:d6:0a:61:cd: 89:d2:73:35:3b:6c:bd:8d:24:10:18:c7:e6:17:6a: 6c:35:d6:c0:e0:68:e3:b0:81:cf:f1:a0:29:f7:a5: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:9F:B0:1C:70:A9:1D:D7:9F:16:F8:23:94:24:71:B8:B4:65:B0 X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:61:f8:a7:2d:e4:b0:d0:6c:dc:d9:d0:08:b1:cd:14:5e:2e: ff:e1:45:08:3a:87:f4:b1:63:05:a5:7c:5f:1f:7c:d5:d5:84: c0:43:d1:25:3b:ab:14:c5:eb:2f:48:64:2c:a3:e8:fa:cf:ec: 32:c7:45:13:56:67:95:f8:bc:6b:25:96:7e:06:c5:3d:b7:fc: 10:ff:a8:58:64:f2:af:3d:19:36:99:e7:66:9a:9f:b9:fb:5c: 63:69:1f:40:0b:32:ba:c7:44:fc:d1:4f:92:16:fe:7d:bc:b9: 97:18:1a:09:a5:5a:81:1f:0b:86:6c:61:1b:3b:ae:40:66:a6: 5e:3f:42:36:0a:1b:8d:da:4e:e3:ca:9f:3a:4d:24:cc:9e:4c: 47:b0:b2:49:42:6a:4a:07:0e:7d:31:a6:db:3a:46:49:cf:c5: 93:b2:dd:09:4a:b6:07:7f:81:25:88:36:88:f2:6c:0d:43:d8: 2e:19:0f:10:ac:f0:ff:70:de:60:ec:ab:ad:e1:50:5f:3b:2f: 70:2e:20:eb:ff:dd:d5:3a:65:32:c6:7f:94:db:ec:6b:26:3b: 0f:91:94:25:d9:5b:e9:e7:4c:ac:c4:81:6a:a1:b5:c9:50:ad: 22:76:ca:f7:3e:e5:b1:49:37:21:c1:04:1c:d2:a7:16:e9:1d: a2:10:d5:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNDI0MTYyNzI2WhcNMjUwNTAxMTYyNzI2WjAYMRYwFAYD VQQDEw02ODBhNjY2ZS03NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGTWDABF8ab5MEHkVce48UouAAHJhtE7zZS96zEeNJluTpox+sHUxMGVcEaE eQXHvwSLmQJ97kEQsAPKIjg2ILf++S3M5qCm0mt/TKe5g4d6RVLfiTPF/zqgvNQe Vzuf4+vRnh14s1GgKKqBjQO4XiEtDVumVgSzHtzHcZkIoujdR9P4aXVgWgMxOZrK 1PKt1otpFVGKKbc1bsGRMVNaDLJkxBMzeWNEcInMuGhithYZS194GysmQ2FV/OQx YaeWG0fFyOX68CWQu9PIIE2g/Lz/pMKwOsTT+yob0dYKYc2J0nM1O2y9jSQQGMfm F2psNdbA4GjjsIHP8aAp96VsDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUsn7Ac cKkd158W+COUJHG4tGWwMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjYfinLeSw0Gzc2dAIsc0UXi7/4UUIOof0sWMFpXxfH3zV1YTAQ9El O6sUxesvSGQso+j6z+wyx0UTVmeV+LxrJZZ+BsU9t/wQ/6hYZPKvPRk2medmmp+5 +1xjaR9ACzK6x0T80U+SFv59vLmXGBoJpVqBHwuGbGEbO65AZqZeP0I2ChuN2k7j yp86TSTMnkxHsLJJQmpKBw59MabbOkZJz8WTst0JSrYHf4EliDaI8mwNQ9guGQ8Q rPD/cN5g7Kut4VBfOy9wLiDr/93VOmUyxn+U2+xrJjsPkZQl2Vvp50ysxIFqobXJ UK0idsr3PuWxSTchwQQc0qcW6R2iENUc -----END CERTIFICATE-----Generated at Sat Apr 26 18:15:50 2025 by rpki-client