$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: V65JCb6fSCJfu33w+7mHiEm3rUlEW2Mi3gMLwGrMWiY= Subject key identifier: E4:17:B2:5E:58:22:5C:C0:95:40:07:75:36:D7:1B:78:0B:B8:18:86 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 130A Signing time: Thu 24 Apr 2025 19:33:49 +0000 Manifest this update: Thu 24 Apr 2025 19:33:48 +0000 Manifest next update: Thu 01 May 2025 19:33:48 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: 7ghC+f2T2yJY2JwEOmPF17fvUclANdEUa6reOmfNznc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Apr 24 19:33:48 2025 GMT Not After : May 1 19:33:48 2025 GMT Subject: CN=680a921c-c780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:b5:18:bc:05:06:e1:be:d4:8c:22:3b:49: 6d:ce:85:74:e4:77:07:6f:32:f3:bc:99:97:12:08: e6:39:e3:c0:df:28:14:21:a8:72:21:dc:bf:01:f0: 77:53:3b:41:4d:36:41:8f:a6:8c:2a:cb:6e:5f:2b: b5:79:92:d8:a1:d2:74:1e:58:7d:a5:94:e8:9c:f3: 25:44:b9:ea:c2:12:2f:c8:0e:9f:0a:bb:60:b1:81: 49:5b:2d:0d:2c:21:70:2a:03:2b:e0:bf:11:87:ea: ec:ea:f8:c0:98:95:6b:f0:4f:51:b6:b5:c3:77:bb: 18:6e:5e:6f:4b:1a:14:6c:7e:6d:21:2f:0e:31:04: e3:f0:ce:03:ac:cd:0b:f2:3e:a4:59:a1:9b:60:fe: b4:41:17:7a:dc:e0:3e:4a:40:4d:9e:df:d2:67:19: 5d:a9:51:d3:41:36:a0:73:71:a3:52:ee:a4:63:fb: 3b:2f:2b:df:89:63:bd:24:f5:d7:37:1d:02:27:94: 6f:7b:00:91:ec:d1:1b:74:f3:de:f6:85:d4:9b:09: a5:6c:b6:af:d3:7b:b5:4d:bd:2e:a8:49:bd:08:bb: ec:53:c7:73:91:47:e9:88:a9:d9:5a:a4:da:d3:57: 8f:4d:c6:48:63:38:e0:ef:5f:79:20:4b:93:b0:a0: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:B2:5E:58:22:5C:C0:95:40:07:75:36:D7:1B:78:0B:B8:18:86 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1c:86:a0:f9:84:c8:df:d2:99:81:06:1a:d0:ea:ff:2c:00: 3a:8c:de:b3:4c:c8:52:4d:8f:9c:b7:d9:cf:f8:ca:0d:18:6c: d9:6d:ab:57:74:00:42:e9:0f:91:59:8f:ad:49:6e:14:ff:3d: 93:b5:34:bc:24:e3:dc:c2:11:c5:17:03:7d:fe:9f:d3:27:91: c5:b8:69:26:f2:dc:af:d2:cf:4c:29:94:65:63:18:c7:8c:be: 71:ea:e0:a0:a7:4e:4e:c8:f2:cb:e1:a9:6c:26:91:4e:a1:b6: 37:de:37:c7:a5:0d:98:48:db:71:79:5b:cb:c5:72:a5:f6:5e: 4e:44:00:1d:45:50:ec:ba:ba:3e:17:cb:88:99:11:c7:be:b8: 27:13:a5:24:0f:7b:8e:74:64:85:2e:8b:eb:7a:22:3a:18:76: 20:8b:b1:97:ca:2f:b4:da:8e:2a:ca:ad:c1:c5:5e:7d:2b:d1: ba:bc:be:85:6c:da:5f:7b:00:c2:82:49:74:ed:38:f1:b0:9d: 5f:76:75:55:c2:c7:98:c0:0c:12:7e:45:d1:cd:97:5e:6f:79: 4d:2e:e9:89:bc:ff:9e:c0:5c:61:8f:6b:56:1a:3d:10:84:34: c9:65:4e:cb:a1:12:32:62:4d:e3:c4:9b:0c:68:03:9e:c5:98: fd:1b:98:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwNDI0MTkzMzQ4WhcNMjUwNTAxMTkzMzQ4WjAYMRYwFAYD VQQDEw02ODBhOTIxYy1jNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3S1GLwFBuG+1IwiO0ltzoV05HcHbzLzvJmXEgjmOePA3ygUIahyIdy/AfB3 UztBTTZBj6aMKstuXyu1eZLYodJ0Hlh9pZTonPMlRLnqwhIvyA6fCrtgsYFJWy0N LCFwKgMr4L8Rh+rs6vjAmJVr8E9RtrXDd7sYbl5vSxoUbH5tIS8OMQTj8M4DrM0L 8j6kWaGbYP60QRd63OA+SkBNnt/SZxldqVHTQTagc3GjUu6kY/s7LyvfiWO9JPXX Nx0CJ5RvewCR7NEbdPPe9oXUmwmlbLav03u1Tb0uqEm9CLvsU8dzkUfpiKnZWqTa 01ePTcZIYzjg7195IEuTsKDKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQXsl5Y IlzAlUAHdTbXG3gLuBiGMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqHIag+YTI39KZgQYa0Or/LAA6jN6zTMhSTY+ct9nP+MoNGGzZbatX dABC6Q+RWY+tSW4U/z2TtTS8JOPcwhHFFwN9/p/TJ5HFuGkm8tyv0s9MKZRlYxjH jL5x6uCgp05OyPLL4alsJpFOobY33jfHpQ2YSNtxeVvLxXKl9l5ORAAdRVDsuro+ F8uImRHHvrgnE6UkD3uOdGSFLovreiI6GHYgi7GXyi+02o4qyq3BxV59K9G6vL6F bNpfewDCgkl07TjxsJ1fdnVVwseYwAwSfkXRzZdeb3lNLumJvP+ewFxhj2tWGj0Q hDTJZU7LoRIyYk3jxJsMaAOexZj9G5j2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:36 2025 by rpki-client