$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: gap3LZLcTqNPM4mRB44YAuuGco2c8KNm9uIkm7N0Xcg= Subject key identifier: 70:62:2B:03:6F:AE:8D:20:E4:EB:D8:F7:E0:C5:F6:EC:60:8F:AA:B3 Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 0392 Signing time: Fri 25 Apr 2025 00:33:53 +0000 Manifest this update: Fri 25 Apr 2025 00:33:53 +0000 Manifest next update: Fri 02 May 2025 00:33:53 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: XGIe+3xKSLVznqE9lmk70K055w0fNxZzn4W2Wiu+xlE=) 2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Apr 25 00:33:53 2025 GMT Not After : May 2 00:33:53 2025 GMT Subject: CN=680ad871-79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:ea:72:cf:2d:a4:b8:56:9b:dc:f4:cb:23: 0f:61:fd:f9:46:8a:06:e9:4b:98:ea:f9:88:a6:ff: cb:63:a1:ec:51:c4:07:78:66:ae:fe:9c:81:12:98: 93:b8:80:11:9a:26:c0:c6:9e:91:ac:2f:1b:eb:2c: f0:2d:a9:69:c9:0c:c6:0e:af:53:ef:38:75:26:6f: b3:64:2e:4c:21:a7:8a:0f:c4:41:3e:a5:bf:81:cd: df:29:a4:19:c1:86:8a:b7:b5:43:2d:85:19:22:51: fd:28:1c:d2:0d:73:cf:1d:18:90:2c:c6:a8:55:05: 44:ad:9c:42:5a:6f:e1:cb:e6:c4:de:84:49:a6:cd: 01:92:96:3e:2d:3c:87:9f:bc:e4:a5:28:9c:0a:30: 57:70:d3:bb:d0:04:8a:7d:d0:f7:5f:07:8e:8e:2c: fc:40:4d:be:41:89:49:99:95:0e:c4:fe:2a:33:d4: f0:84:73:79:80:8f:e5:e2:6a:b3:14:7c:f6:7d:34: 10:ca:ef:a6:79:e5:da:1d:29:e0:50:69:ed:69:02: 70:92:fb:59:65:f6:81:72:cd:63:0a:38:54:4d:53: cf:5b:2a:d4:a4:23:e1:0e:92:fa:98:39:d2:91:88: a2:93:d7:59:ba:ce:7d:38:19:fc:3b:57:7f:b3:d7: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:62:2B:03:6F:AE:8D:20:E4:EB:D8:F7:E0:C5:F6:EC:60:8F:AA:B3 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:08:07:a9:77:0a:93:4f:98:9d:de:56:cf:e4:21:02:57:60: 84:1e:0e:b2:cd:54:23:eb:8a:1c:6c:34:a6:00:2b:1e:70:71: 9d:f5:c8:1f:e9:65:9a:ce:7c:d2:7b:fe:78:64:bc:56:f6:b9: 0d:b1:55:12:a5:d7:0a:51:69:93:01:39:06:c3:3f:34:97:48: 61:bd:03:02:9a:e5:ac:d0:0b:22:eb:b2:07:81:91:dc:7f:7c: 2b:7f:1c:39:95:c9:65:c8:bb:33:bb:f5:ef:39:50:e4:33:69: fd:32:67:06:5f:f3:13:35:62:17:d1:32:95:4c:57:92:a6:86: b6:0f:d6:c0:07:42:25:f2:88:19:3f:ad:fa:78:ad:f1:66:bf: 10:6b:88:c4:a0:0d:37:c6:43:3b:a1:9d:23:87:d7:66:c4:69: 8f:32:02:00:07:e9:b7:e1:0a:94:28:fd:8d:ff:db:6a:99:da: e0:c2:36:1d:f1:f3:d3:4f:6f:be:e9:59:2a:5a:97:47:24:46: 1c:d4:f9:74:de:7a:4d:c6:ab:59:ea:dc:0c:8e:42:bb:53:50: 9f:90:eb:9a:57:67:f8:5e:73:aa:7c:48:9e:b8:af:1f:e2:a1: a3:68:c8:87:eb:e6:7a:e3:ea:e5:9b:85:c0:a4:4b:27:c6:cb: 94:67:68:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUwNDI1MDAzMzUzWhcNMjUwNTAyMDAzMzUzWjAYMRYwFAYD VQQDEw02ODBhZDg3MS03OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUnqcs8tpLhWm9z0yyMPYf35RooG6UuY6vmIpv/LY6HsUcQHeGau/pyBEpiT uIARmibAxp6RrC8b6yzwLalpyQzGDq9T7zh1Jm+zZC5MIaeKD8RBPqW/gc3fKaQZ wYaKt7VDLYUZIlH9KBzSDXPPHRiQLMaoVQVErZxCWm/hy+bE3oRJps0BkpY+LTyH n7zkpSicCjBXcNO70ASKfdD3XweOjiz8QE2+QYlJmZUOxP4qM9TwhHN5gI/l4mqz FHz2fTQQyu+meeXaHSngUGntaQJwkvtZZfaBcs1jCjhUTVPPWyrUpCPhDpL6mDnS kYiik9dZus59OBn8O1d/s9eCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBiKwNv ro0g5OvY9+DF9uxgj6qzMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyCAepdwqTT5id3lbP5CECV2CEHg6yzVQj64ocbDSmACsecHGd9cgf 6WWaznzSe/54ZLxW9rkNsVUSpdcKUWmTATkGwz80l0hhvQMCmuWs0Asi67IHgZHc f3wrfxw5lcllyLszu/XvOVDkM2n9MmcGX/MTNWIX0TKVTFeSpoa2D9bAB0Il8ogZ P636eK3xZr8Qa4jEoA03xkM7oZ0jh9dmxGmPMgIAB+m34QqUKP2N/9tqmdrgwjYd 8fPTT2++6VkqWpdHJEYc1Pl03npNxqtZ6twMjkK7U1CfkOuaV2f4XnOqfEieuK8f 4qGjaMiH6+Z64+rlm4XApEsnxsuUZ2jt -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:39 2025 by rpki-client