$ rpki-client -vvf rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft File: FpJaX5SGv8PxG1GPDfhHOgKruFs.mft (raw, json) Hash identifier: E+NreDD0hYGdJobiykIE/hi3+dZBsUoVtXHJGrqSJbI= Subject key identifier: D9:35:24:DA:69:3C:2F:5D:DE:6F:CB:1A:E2:2B:4A:78:2D:CF:47:3E Authority key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B Certificate issuer: /CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft Manifest number: 9E Signing time: Fri 25 Apr 2025 05:17:15 +0000 Manifest this update: Fri 25 Apr 2025 05:17:14 +0000 Manifest next update: Fri 02 May 2025 05:17:14 +0000 Files and hashes: 1: FpJaX5SGv8PxG1GPDfhHOgKruFs.crl (hash: 87YYts1xBf/pc0SL5HuEkzn5JpbOJ+h//De3NtMszEk=) 2: 0F0D45D0373711EF896FCE68C4F9AE02.roa (hash: 8SD/beYd/nx0hbzhIjleBbHgR6i9e/DB5zLCO7k3URU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91282C6, serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Validity Not Before: Apr 25 05:17:14 2025 GMT Not After : May 2 05:17:14 2025 GMT Subject: CN=680b1adb-0788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:12:6a:7d:c7:4f:21:90:2a:8c:98:a5:1c: 33:3e:b4:06:8c:6f:ff:3f:30:74:4e:d9:f4:63:dd: 25:31:16:fb:62:e7:e8:6c:56:ba:c0:31:94:ec:32: 40:26:14:a0:87:35:f6:79:09:22:50:e0:7b:1f:7d: 21:bc:c0:41:f7:23:e6:0f:e6:8d:4b:1f:25:e8:ba: 05:bb:54:ec:62:e2:d6:85:c2:df:9b:db:61:a5:ea: 76:fa:27:18:1c:b8:03:31:df:82:8f:e9:bc:7e:b1: 76:b9:24:4a:ec:6a:28:13:3f:75:d1:dc:3a:37:f2: e9:9d:c0:b0:31:80:3c:f4:4f:2a:4e:fb:fe:b2:23: 18:31:fb:71:c7:b9:97:dd:e1:2c:d8:89:a0:f1:bd: ef:9c:e0:d5:ca:bb:c9:31:03:d9:21:c0:f7:e8:89: 7a:b2:31:d1:08:80:63:7b:e1:4d:ca:10:dc:57:90: ae:99:fc:31:fc:17:95:37:fb:be:65:75:64:82:1a: af:00:34:4c:c2:96:fb:9f:40:99:1d:5f:10:41:33: f8:c5:89:52:f6:67:69:3a:69:7e:3b:32:e0:be:8b: 97:08:ff:c5:c8:34:30:74:28:d3:76:4f:9c:68:4e: 0a:e6:af:2e:dc:b0:f1:c8:fb:ec:1c:51:f1:dc:14: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:24:DA:69:3C:2F:5D:DE:6F:CB:1A:E2:2B:4A:78:2D:CF:47:3E X509v3 Authority Key Identifier: keyid:16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f0:53:02:83:20:ae:da:13:6c:a2:5f:34:0f:6f:33:f3:4d: 31:fa:76:e4:55:c3:35:ba:31:8c:dd:b0:47:a8:38:b1:f6:92: a6:50:2e:b7:27:ea:a8:85:77:81:10:88:ab:93:32:59:bc:f0: 30:72:f2:f0:36:ec:1a:c1:97:6b:49:65:b0:6a:cd:5f:a5:64: 99:af:ad:0a:8a:cf:8b:c8:d9:cf:30:50:d3:0a:42:96:87:4d: 79:7b:b1:d5:10:82:a6:9e:57:7a:b9:1a:db:fa:a1:55:dc:0c: bc:d9:60:aa:36:3a:d9:35:3e:10:ef:ff:a8:93:24:d5:f0:8a: d0:da:ce:3c:ef:84:2f:0b:b8:d6:63:49:a4:65:d2:23:dc:f0: c3:71:e4:67:f7:be:0f:85:1a:56:c0:f8:58:70:ff:f7:f0:4d: c0:c7:0e:2a:49:14:e3:ec:98:ac:74:30:f7:ee:e8:ca:47:16: 7f:85:62:4b:d0:ec:c5:93:3f:58:29:c4:4d:b6:3b:cf:36:a6: 83:27:eb:b9:e8:c3:2f:92:62:1e:10:da:40:0b:bd:72:33:19: 2b:64:e6:ef:1c:6c:45:bf:c9:b2:b0:fc:04:d7:db:1a:68:14: 60:74:99:1d:f6:67:70:d9:58:07:d6:74:aa:ce:6d:78:78:8b: 10:c4:04:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyQzYxMTAvBgNVBAUTKDE2OTI1QTVGOTQ4NkJGQzNGMTFCNTE4RjBERjg0NzNB MDJBQkI4NUIwHhcNMjUwNDI1MDUxNzE0WhcNMjUwNTAyMDUxNzE0WjAYMRYwFAYD VQQDEw02ODBiMWFkYi0wNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCkSan3HTyGQKoyYpRwzPrQGjG//PzB0Ttn0Y90lMRb7YufobFa6wDGU7DJA JhSghzX2eQkiUOB7H30hvMBB9yPmD+aNSx8l6LoFu1TsYuLWhcLfm9thpep2+icY HLgDMd+Cj+m8frF2uSRK7GooEz910dw6N/LpncCwMYA89E8qTvv+siMYMftxx7mX 3eEs2Img8b3vnODVyrvJMQPZIcD36Il6sjHRCIBje+FNyhDcV5Cumfwx/BeVN/u+ ZXVkghqvADRMwpb7n0CZHV8QQTP4xYlS9mdpOml+OzLgvouXCP/FyDQwdCjTdk+c aE4K5q8u3LDxyPvsHFHx3BSqLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk1JNpp PC9d3m/LGuIrSngtz0c+MB8GA1UdIwQYMBaAFBaSWl+Uhr/D8RtRjw34RzoCq7hb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODJDNi85Q0UzQUZCNjM2 NzQxMUVGQURCNTIwMUNDNEY5QUUwMi9GcEphWDVTR3Y4UHhHMUdQRGZoSE9nS3J1 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZwSmFYNVNHdjhQeEcxR1BEZmhIT2dLcnVGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODJDNi85Q0UzQUZCNjM2NzQxMUVGQURCNTIwMUNDNEY5QUUwMi9GcEphWDVTR3Y4 UHhHMUdQRGZoSE9nS3J1RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg8FMCgyCu2hNsol80D28z800x+nbkVcM1ujGM3bBHqDix9pKmUC63 J+qohXeBEIirkzJZvPAwcvLwNuwawZdrSWWwas1fpWSZr60Kis+LyNnPMFDTCkKW h015e7HVEIKmnld6uRrb+qFV3Ay82WCqNjrZNT4Q7/+okyTV8IrQ2s4874QvC7jW Y0mkZdIj3PDDceRn974PhRpWwPhYcP/38E3Axw4qSRTj7JisdDD37ujKRxZ/hWJL 0OzFkz9YKcRNtjvPNqaDJ+u56MMvkmIeENpAC71yMxkrZObvHGxFv8mysPwE19sa aBRgdJkd9mdw2VgH1nSqzm14eIsQxARj -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:58 2025 by rpki-client