$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: 6vtTE/W8rSa0CIOZmuSP5ed58w17OIOPqiU/7CfKWtI= Subject key identifier: AE:2B:74:B3:6D:CA:A6:E6:82:1F:A9:D0:34:8C:A6:53:27:89:FF:2D Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: 0155 Signing time: Fri 25 Apr 2025 03:17:36 +0000 Manifest this update: Fri 25 Apr 2025 03:17:36 +0000 Manifest next update: Fri 02 May 2025 03:17:36 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: H/Ek/g5u/kW4zq1O16nXYDEZYCHK6MLXEAbMmsc5Y9E=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: ghcy6JDfa3u1ukpc0kfcadEcqAXRi4dJb4eZF65dqFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Apr 25 03:17:36 2025 GMT Not After : May 2 03:17:36 2025 GMT Subject: CN=680afed0-aa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:fe:bb:c5:88:08:1d:47:4c:a1:b8:5e:4b: 94:87:4c:c9:19:0f:d0:52:32:24:90:58:4f:6c:2f: 9d:71:89:59:af:4c:7b:4e:ae:f3:6e:72:88:7d:cf: 64:73:76:12:09:94:20:66:9b:09:ff:3e:d5:55:44: 02:81:65:8f:90:22:c6:97:ae:57:67:00:32:10:27: 4e:c7:1d:da:c7:3e:94:d8:d2:ca:9d:38:16:0c:ea: d4:3a:c8:85:15:e1:32:35:ca:c7:72:46:b5:dd:a7: 6a:10:b2:f7:10:b5:d9:9a:bf:24:f0:e3:55:4f:48: 10:83:54:be:10:20:3e:45:16:ab:2b:93:bd:31:fb: 02:3a:56:9b:ab:4b:fa:93:c2:49:12:46:b6:a1:bf: 35:45:db:27:7b:07:c8:fe:20:92:36:4d:9c:75:ce: dd:a5:0d:c7:82:93:8f:ec:16:a8:cc:b1:b9:ed:a5: a0:9d:b8:a6:a8:c6:e4:02:85:37:71:5f:d4:0a:db: 70:c5:f2:02:41:c3:06:72:32:b3:38:3d:7a:88:d7: a6:77:c6:c2:6c:29:61:28:9d:f3:02:ab:d4:3e:43: b7:b4:e1:d0:a0:81:04:64:91:20:92:eb:06:03:36: 16:44:3a:9f:d2:a6:26:34:74:35:43:e5:b8:d1:bd: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:74:B3:6D:CA:A6:E6:82:1F:A9:D0:34:8C:A6:53:27:89:FF:2D X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f8:5f:e2:ff:39:d1:b9:d8:11:db:76:a6:6c:25:34:88:e2: a9:e4:ed:be:5c:e1:b4:e8:53:0a:d5:e2:eb:cd:a8:b5:ab:9c: 4f:76:83:e8:1a:ea:ca:fc:28:43:77:65:a7:f3:7f:09:d4:97: 6e:93:58:1b:d2:8f:f5:b5:58:5e:0a:a8:a5:07:8a:75:00:cb: ae:64:45:66:2f:2b:5d:e7:48:b2:a8:0e:49:0c:41:cf:5e:5a: ad:13:9a:49:d1:5d:82:54:57:aa:8f:74:37:ce:f6:74:bf:0e: 8d:b9:36:77:e9:9c:bd:01:35:6f:f8:0d:48:cf:fa:49:20:25: a5:ab:55:71:9d:e1:49:6b:10:3c:c7:41:f2:dd:76:f5:c4:be: 89:6f:d9:d4:cb:79:4b:a6:a4:f5:c6:bc:bb:e6:52:aa:42:a2: 0b:2a:17:a8:c0:d7:47:cb:fe:de:9a:73:2a:6f:f3:c2:12:25: 35:e0:99:11:18:30:f7:05:4c:95:27:a6:f4:d9:81:3f:ca:10: b3:24:23:ba:0b:d5:9a:cf:da:16:80:b4:5e:98:1c:2d:33:ff: e3:9b:a8:80:cd:7b:cc:a5:90:0b:27:8a:1b:7f:47:ca:7d:4a: 06:76:93:07:06:b1:43:96:b1:16:03:ee:08:85:24:bc:16:c9: 85:53:16:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUwNDI1MDMxNzM2WhcNMjUwNTAyMDMxNzM2WjAYMRYwFAYD VQQDEw02ODBhZmVkMC1hYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Tf+u8WICB1HTKG4XkuUh0zJGQ/QUjIkkFhPbC+dcYlZr0x7Tq7zbnKIfc9k c3YSCZQgZpsJ/z7VVUQCgWWPkCLGl65XZwAyECdOxx3axz6U2NLKnTgWDOrUOsiF FeEyNcrHcka13adqELL3ELXZmr8k8ONVT0gQg1S+ECA+RRarK5O9MfsCOlabq0v6 k8JJEka2ob81RdsnewfI/iCSNk2cdc7dpQ3HgpOP7BaozLG57aWgnbimqMbkAoU3 cV/UCttwxfICQcMGcjKzOD16iNemd8bCbClhKJ3zAqvUPkO3tOHQoIEEZJEgkusG AzYWRDqf0qYmNHQ1Q+W40b2rbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4rdLNt yqbmgh+p0DSMplMnif8tMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy+F/i/znRudgR23ambCU0iOKp5O2+XOG06FMK1eLrzai1q5xPdoPo GurK/ChDd2Wn838J1Jduk1gb0o/1tVheCqilB4p1AMuuZEVmLytd50iyqA5JDEHP XlqtE5pJ0V2CVFeqj3Q3zvZ0vw6NuTZ36Zy9ATVv+A1Iz/pJICWlq1VxneFJaxA8 x0Hy3Xb1xL6Jb9nUy3lLpqT1xry75lKqQqILKheowNdHy/7emnMqb/PCEiU14JkR GDD3BUyVJ6b02YE/yhCzJCO6C9Waz9oWgLRemBwtM//jm6iAzXvMpZALJ4obf0fK fUoGdpMHBrFDlrEWA+4IhSS8FsmFUxal -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:07 2025 by rpki-client