$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: WiTuWPaHf5sTWeajLt+qFXnE02+TIU7MkEfKxeSyFn8= Subject key identifier: 9D:A8:2F:6E:59:06:0E:56:F6:CC:02:FD:52:37:F0:A6:09:E9:6A:D7 Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0AA3 Signing time: Thu 24 Apr 2025 19:25:45 +0000 Manifest this update: Thu 24 Apr 2025 19:25:44 +0000 Manifest next update: Thu 01 May 2025 19:25:44 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: nYFvm+aIEHxTrFuXcPlbVEd+9wLooBl5nlTgKU/9q30=) 2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: ip0tFLU4ZQT3pfoDMLAgucX2vvcCHaknK3+b2q4VRsQ=) 3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=) 4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=) 5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Apr 24 19:25:44 2025 GMT Not After : May 1 19:25:44 2025 GMT Subject: CN=680a9038-ab35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:d0:f7:8b:9d:c1:53:90:27:0a:3a:12:0a: a8:60:d3:ab:aa:40:b0:71:82:c7:ad:8a:53:64:74: f9:1d:5c:c5:0e:9a:7d:6a:97:e7:b3:5a:a1:43:04: 17:6b:50:c3:dd:7a:fd:9b:2e:b5:9c:c9:af:6c:73: 96:c5:6e:1c:e8:33:d2:74:c6:17:24:20:4b:03:bb: 8b:08:54:4b:c0:e5:4d:bd:0e:c3:5e:45:58:b9:f6: 30:d0:ef:8e:c6:50:3d:4a:5a:72:e3:0e:ca:d1:2d: 60:89:34:75:23:ee:4f:79:10:c0:1f:af:10:82:3e: 81:eb:08:06:b3:47:d2:2f:ae:60:a9:53:42:2f:de: c5:ae:7f:c8:9f:ff:43:a1:31:05:d5:d3:08:94:d8: 28:2d:f5:68:e2:da:c9:87:23:c6:c7:d6:27:b6:98: 33:ea:57:2c:80:14:e2:d4:50:37:10:f1:4f:80:76: 7d:82:3d:36:ac:d2:c5:b8:cb:0d:f3:b0:76:9a:11: 9c:40:9d:90:a3:53:dd:2a:e4:29:8b:eb:33:2a:b4: 68:23:38:88:db:2d:86:28:84:90:fa:85:c0:b1:d5: 8e:b9:33:81:98:78:9d:09:6a:20:67:07:45:86:f6: 96:41:24:3e:97:83:54:e3:73:bb:b3:54:04:14:32: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:2F:6E:59:06:0E:56:F6:CC:02:FD:52:37:F0:A6:09:E9:6A:D7 X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:39:d1:5c:ca:f5:6c:19:9a:28:5d:78:b8:6d:f8:bd:c3: 22:be:e7:e8:27:a6:87:ad:3c:bb:cc:bb:25:8f:50:1d:f3:97: 28:16:8e:96:9b:5d:12:ae:e1:25:9c:52:49:f6:76:28:e1:86: f5:e2:6c:e5:2f:ce:10:a5:94:f6:f9:68:23:73:32:a1:f1:6b: f7:b8:ee:61:b9:d2:60:53:cc:f9:6c:42:42:6b:44:4e:2d:b3: ae:92:93:09:1e:78:82:dd:87:0c:80:e4:24:d6:af:57:7d:cc: 2b:d4:ef:2d:14:45:3a:28:a0:7e:f4:0f:93:62:04:6b:cf:27: ac:c4:78:9c:e3:29:cc:55:74:f7:a3:41:6b:52:97:34:64:3d: 10:bf:2f:a9:b5:43:b0:c0:25:24:47:a7:d2:1d:56:e8:55:11: 30:49:3d:c3:4b:5a:a2:08:a8:f0:5f:d2:95:03:79:28:40:6a: 68:d0:97:fd:5f:61:a8:df:fe:54:34:3c:51:78:fd:6f:a3:7d: e2:ba:6e:44:36:f7:33:d7:42:f9:a5:ee:ac:c8:94:7c:d1:94: 74:8f:0c:2d:1f:8f:0c:ee:56:3d:f2:a3:e7:5a:20:8e:1c:22: eb:e4:ce:a5:cc:d2:96:77:79:a5:26:fd:19:ef:c0:5b:0e:35: 6d:b5:ab:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwNDI0MTkyNTQ0WhcNMjUwNTAxMTkyNTQ0WjAYMRYwFAYD VQQDEw02ODBhOTAzOC1hYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXnQ94udwVOQJwo6EgqoYNOrqkCwcYLHrYpTZHT5HVzFDpp9apfns1qhQwQX a1DD3Xr9my61nMmvbHOWxW4c6DPSdMYXJCBLA7uLCFRLwOVNvQ7DXkVYufYw0O+O xlA9Slpy4w7K0S1giTR1I+5PeRDAH68Qgj6B6wgGs0fSL65gqVNCL97Frn/In/9D oTEF1dMIlNgoLfVo4trJhyPGx9Yntpgz6lcsgBTi1FA3EPFPgHZ9gj02rNLFuMsN 87B2mhGcQJ2Qo1PdKuQpi+szKrRoIziI2y2GKISQ+oXAsdWOuTOBmHidCWogZwdF hvaWQSQ+l4NU43O7s1QEFDK1XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2oL25Z Bg5W9swC/VI38KYJ6WrXMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtDnRXMr1bBmaKF14uG34vcMivufoJ6aHrTy7zLslj1Ad85coFo6W m10SruElnFJJ9nYo4Yb14mzlL84QpZT2+WgjczKh8Wv3uO5hudJgU8z5bEJCa0RO LbOukpMJHniC3YcMgOQk1q9Xfcwr1O8tFEU6KKB+9A+TYgRrzyesxHic4ynMVXT3 o0FrUpc0ZD0Qvy+ptUOwwCUkR6fSHVboVREwST3DS1qiCKjwX9KVA3koQGpo0Jf9 X2Go3/5UNDxReP1vo33ium5ENvcz10L5pe6syJR80ZR0jwwtH48M7lY98qPnWiCO HCLr5M6lzNKWd3mlJv0Z78BbDjVttavP -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:18 2025 by rpki-client