$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: NfFMA8UwWgKyKjsQs0vtyWuIwzkgRYEG+Rx0rYJp4n4= Subject key identifier: B4:D2:92:69:CA:A9:3C:40:93:59:0C:13:59:26:AD:97:CB:6A:A0:6D Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 03:59:42 +0000 Manifest this update: Fri 25 Apr 2025 03:59:41 +0000 Manifest next update: Fri 02 May 2025 03:59:41 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: TElBPqPtSuF2jgCfaPBov3rpYMuNLuthS2QX58LhHhY=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Apr 25 03:59:41 2025 GMT Not After : May 2 03:59:41 2025 GMT Subject: CN=680b08ae-68ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:a0:d3:36:15:0f:c5:f5:84:41:6a:86:38: f1:e2:bb:cd:0d:3e:cb:39:d7:aa:c9:64:c7:f3:19: 53:db:37:62:21:ce:25:f5:af:66:16:6e:82:be:4f: a8:f2:65:de:f2:06:44:03:ec:f2:26:9b:b4:69:95: 8f:cc:5a:c9:bf:7f:5e:d4:08:f3:11:62:4c:3f:a7: 1e:0b:bb:02:15:1f:4c:f4:1f:4a:7c:c0:aa:a6:61: 6e:45:e2:d5:c5:03:8a:fd:2a:a4:c4:5c:4e:8a:b6: 37:a2:ff:5f:5d:44:ef:b1:bd:52:2e:d2:f9:5a:2d: 24:a8:4f:5b:2e:4a:04:93:51:84:e3:99:8a:f2:a6: 68:db:14:a8:95:b0:cb:e6:3b:3c:bb:97:3e:f4:e0: 79:c9:e5:de:e6:b7:0c:dc:b3:64:2d:06:5b:54:4e: 4e:b9:e0:69:2c:19:95:43:48:88:bd:9e:e4:f5:ae: 10:67:96:fc:e7:17:39:eb:6c:18:a9:c3:bd:31:0f: 3b:b5:47:8e:e2:40:9f:47:56:52:3b:f4:0c:49:ee: c7:d2:57:fd:27:39:1d:42:8d:6b:d7:ff:db:89:9d: 48:88:8d:50:ff:28:6b:8e:8e:b9:61:fa:31:33:37: 0a:33:b2:3f:96:80:49:f5:95:28:05:5b:9f:a8:d0: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D2:92:69:CA:A9:3C:40:93:59:0C:13:59:26:AD:97:CB:6A:A0:6D X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0e:79:1b:b8:89:ba:eb:e3:41:70:03:7e:9c:9a:48:60:7a: c0:de:79:c0:cc:11:71:73:09:26:90:c1:1f:3a:6c:ae:63:01: b6:cd:db:c0:d6:1e:bd:db:73:a9:e7:a4:be:57:97:19:13:fc: 86:f9:2b:be:de:ea:47:9a:27:ea:10:8d:30:dc:77:1a:c2:8b: 62:94:68:3b:c4:79:9e:ca:ba:f4:f5:77:4d:29:21:dd:4b:8c: 85:68:83:5f:85:29:5b:cc:e1:f2:87:b9:b3:69:eb:a1:35:43: be:b5:3a:d4:42:a0:78:24:d5:71:8f:06:c8:de:33:3b:32:6f: 13:26:85:71:fc:38:20:4e:ac:14:05:66:8b:48:38:01:d3:1e: ec:5a:1b:9e:82:48:6a:52:3e:59:91:48:c6:55:c0:96:88:8b: 0f:7f:8c:94:93:ec:a6:58:35:0a:6c:9a:57:1c:f2:64:e3:b5: e7:74:61:24:85:3b:6f:b1:36:69:6b:d7:d7:74:f7:c7:84:91: fa:33:78:88:c7:2e:8d:b1:91:7f:24:24:c4:2b:31:13:f1:ea: 25:2a:23:63:d5:a4:59:fd:c1:46:99:2e:4a:8e:02:ec:c0:f5: 46:17:6f:3d:f9:1a:fa:6b:fd:fb:77:99:12:8a:23:3a:59:f7: 20:af:21:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwNDI1MDM1OTQxWhcNMjUwNTAyMDM1OTQxWjAYMRYwFAYD VQQDEw02ODBiMDhhZS02OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qqg0zYVD8X1hEFqhjjx4rvNDT7LOdeqyWTH8xlT2zdiIc4l9a9mFm6Cvk+o 8mXe8gZEA+zyJpu0aZWPzFrJv39e1AjzEWJMP6ceC7sCFR9M9B9KfMCqpmFuReLV xQOK/SqkxFxOirY3ov9fXUTvsb1SLtL5Wi0kqE9bLkoEk1GE45mK8qZo2xSolbDL 5js8u5c+9OB5yeXe5rcM3LNkLQZbVE5OueBpLBmVQ0iIvZ7k9a4QZ5b85xc562wY qcO9MQ87tUeO4kCfR1ZSO/QMSe7H0lf9JzkdQo1r1//biZ1IiI1Q/yhrjo65Yfox MzcKM7I/loBJ9ZUoBVufqNC16wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTSkmnK qTxAk1kME1kmrZfLaqBtMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZDnkbuIm66+NBcAN+nJpIYHrA3nnAzBFxcwkmkMEfOmyuYwG2zdvA 1h6923Op56S+V5cZE/yG+Su+3upHmifqEI0w3HcawotilGg7xHmeyrr09XdNKSHd S4yFaINfhSlbzOHyh7mzaeuhNUO+tTrUQqB4JNVxjwbI3jM7Mm8TJoVx/DggTqwU BWaLSDgB0x7sWhuegkhqUj5ZkUjGVcCWiIsPf4yUk+ymWDUKbJpXHPJk47XndGEk hTtvsTZpa9fXdPfHhJH6M3iIxy6NsZF/JCTEKzET8eolKiNj1aRZ/cFGmS5KjgLs wPVGF289+Rr6a/37d5kSiiM6WfcgryFk -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:44 2025 by rpki-client