$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: tMCK4AzwDblFTyy7j+kQbGbW1x1Mb1nEBKNwME5jcgI= Subject key identifier: F0:1B:F7:33:3A:A3:6A:DC:7B:FE:B4:75:B3:D3:E3:F9:E2:15:8A:3C Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 1451 Signing time: Thu 24 Apr 2025 18:31:07 +0000 Manifest this update: Thu 24 Apr 2025 18:31:07 +0000 Manifest next update: Thu 01 May 2025 18:31:07 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: yhHWYt1Q4uJiUK357q2/W4RW9BVH0wVSbxQz6g/kJck=) 2: 3E35840C523211EE84408677C4F9AE02.roa (hash: odJkbnbFNGEzA/PRiNLIwgSKK/+yDHEM4DmIe+O5Su4=) 3: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: KUS4Ox2gEpezMstwpX1CTC0qzfRNi3wV04onRKW1ycI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Apr 24 18:31:07 2025 GMT Not After : May 1 18:31:07 2025 GMT Subject: CN=680a836b-93ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:da:0d:d6:38:62:30:05:d4:c1:56:43:d8: da:29:f2:b9:b1:44:ce:f7:2c:f2:40:23:fb:0b:4c: 53:cc:48:6d:5a:a6:11:42:99:78:7f:33:03:04:2a: f0:c3:fb:3a:a1:4b:ec:dc:78:29:bb:07:d2:f6:07: 37:ff:f2:08:e1:8b:3b:24:78:3c:bf:66:34:5c:e0: 52:e2:02:a6:9c:5c:b6:8a:d7:01:72:07:b3:eb:17: f3:21:d4:41:f1:1e:6c:34:69:97:4e:ec:d0:9c:eb: ba:5f:46:dc:81:82:05:d2:16:fc:3d:6a:28:28:57: 81:85:c2:30:09:78:21:b3:86:ed:ae:f9:64:89:a7: e5:43:15:0e:a8:77:a8:5c:a6:11:23:89:29:b6:16: 25:7e:bc:ea:1c:48:fc:6f:c8:1a:30:d1:c3:13:8e: 0f:ab:ba:b6:d6:92:af:2f:1a:ed:01:31:db:7b:d7: d8:9f:ac:33:62:a9:16:86:00:17:53:2f:e7:70:66: d6:b1:94:7e:65:bb:22:3d:08:c4:97:b3:7d:b8:47: 32:2d:f1:10:8e:f0:9c:57:ad:23:f2:36:e1:bf:17: c4:b6:3e:5d:8b:2c:c1:9a:20:6e:0e:c9:f3:63:e1: 49:cd:fd:9c:b4:77:58:91:24:5e:a4:13:c6:27:31: 28:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:F7:33:3A:A3:6A:DC:7B:FE:B4:75:B3:D3:E3:F9:E2:15:8A:3C X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:03:41:d3:3e:eb:2d:b3:8e:65:0e:a3:60:88:84:c0:74:ab: c5:7c:31:98:e0:9c:0d:89:91:28:77:36:f0:85:65:31:0e:27: 87:d2:c9:56:60:24:f1:c0:84:f0:a5:64:16:08:f4:9f:f6:0b: 13:ab:21:03:cf:eb:fb:db:d7:70:35:3f:17:d6:df:a1:a0:98: 26:c9:5f:81:15:ca:ff:b5:c8:03:77:53:f4:6f:76:39:45:35: 0a:b2:89:ac:e4:e4:72:84:c4:06:b8:bc:39:c2:5b:6f:ae:df: 18:9c:16:9a:96:0f:86:bc:d1:a6:c8:f3:38:bb:5c:92:5f:3a: 66:5d:3e:f3:ad:3e:65:29:fc:3d:9a:3e:7f:ce:8a:6a:68:1e: 31:70:5d:59:a8:e8:c4:cd:d0:64:0a:16:a4:af:6c:3f:a1:8e: 35:73:31:7b:18:68:ac:48:bc:b6:23:be:97:ce:c1:e1:f7:48: a2:13:b6:5c:17:09:40:96:34:07:cd:97:e8:e4:c8:56:be:a5: a2:4e:cd:c3:62:af:f9:35:b5:8c:dc:ec:a2:ca:f5:3f:ae:32: 4b:b4:e0:7c:4b:80:85:60:92:46:d7:63:bc:6f:f7:bf:fc:c8: 5d:67:95:4b:1c:bd:fc:44:e0:ad:5b:c5:6c:f6:50:bb:c6:11: 7a:4a:d0:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwNDI0MTgzMTA3WhcNMjUwNTAxMTgzMTA3WjAYMRYwFAYD VQQDEw02ODBhODM2Yi05M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZvaDdY4YjAF1MFWQ9jaKfK5sUTO9yzyQCP7C0xTzEhtWqYRQpl4fzMDBCrw w/s6oUvs3HgpuwfS9gc3//II4Ys7JHg8v2Y0XOBS4gKmnFy2itcBcgez6xfzIdRB 8R5sNGmXTuzQnOu6X0bcgYIF0hb8PWooKFeBhcIwCXghs4btrvlkiaflQxUOqHeo XKYRI4kpthYlfrzqHEj8b8gaMNHDE44Pq7q21pKvLxrtATHbe9fYn6wzYqkWhgAX Uy/ncGbWsZR+ZbsiPQjEl7N9uEcyLfEQjvCcV60j8jbhvxfEtj5diyzBmiBuDsnz Y+FJzf2ctHdYkSRepBPGJzEoZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAb9zM6 o2rce/60dbPT4/niFYo8MB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLA0HTPusts45lDqNgiITAdKvFfDGY4JwNiZEodzbwhWUxDieH0slW YCTxwITwpWQWCPSf9gsTqyEDz+v729dwNT8X1t+hoJgmyV+BFcr/tcgDd1P0b3Y5 RTUKsoms5ORyhMQGuLw5wltvrt8YnBaalg+GvNGmyPM4u1ySXzpmXT7zrT5lKfw9 mj5/zopqaB4xcF1ZqOjEzdBkChakr2w/oY41czF7GGisSLy2I76XzsHh90iiE7Zc FwlAljQHzZfo5MhWvqWiTs3DYq/5NbWM3OyiyvU/rjJLtOB8S4CFYJJG12O8b/e/ /MhdZ5VLHL38ROCtW8Vs9lC7xhF6StBF -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:04 2025 by rpki-client