$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: TuGkRl7rzNwONulJHpN4yWP8Xd5MZvZ1bdV7bcbZoYc= Subject key identifier: 47:8E:2F:09:3F:66:60:A9:96:EC:4E:F6:1B:12:AC:11:FD:B5:FC:7D Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 06F4 Signing time: Thu 24 Apr 2025 21:47:38 +0000 Manifest this update: Thu 24 Apr 2025 21:47:38 +0000 Manifest next update: Thu 01 May 2025 21:47:38 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: Wthgc+0hvSN8gsgjwo2VhaCLJDd4lTshVHo0JaLTYX0=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Apr 24 21:47:38 2025 GMT Not After : May 1 21:47:38 2025 GMT Subject: CN=680ab17a-5dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:93:d0:dc:2f:03:2b:df:a0:bd:0b:5d:1c: 59:4d:a2:47:7f:f8:d6:98:58:cc:9e:5c:6a:5e:fe: 9d:d3:72:df:b8:53:dd:01:59:81:25:5f:b7:de:b5: df:ec:a1:4e:ef:8d:dd:e5:3b:b1:43:97:96:3d:81: de:ee:eb:b0:14:20:68:dc:4d:97:05:3a:7d:0d:a8: 9a:25:72:b8:74:20:9e:37:67:bd:22:62:c4:41:68: 11:ef:6c:9a:08:1e:77:c9:73:22:60:47:99:ea:68: 49:82:76:03:8e:b3:dc:e9:29:64:74:9f:b6:08:f5: 5f:61:39:e2:a8:18:b5:30:e0:59:0d:3c:b8:d4:55: 25:35:34:67:98:d4:95:36:e1:ce:31:f3:a4:4c:3f: 46:ae:92:9f:fe:20:01:1b:8e:41:7c:de:4e:d5:26: 11:c8:d5:33:8f:b3:61:30:2d:b0:45:e5:68:f4:cd: 4a:f5:5e:5b:2e:9d:ff:77:28:67:36:1d:ca:e8:ef: fa:ef:d5:7a:db:16:0a:c0:08:eb:bd:0d:9e:ff:53: bc:fd:b6:d4:aa:e4:01:17:99:7b:87:05:0e:19:0f: 94:32:1c:bb:ab:ca:9e:24:cb:0c:34:05:54:9e:b7: b9:e5:f0:67:9b:02:5c:44:75:f8:ff:bf:72:b0:46: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:2F:09:3F:66:60:A9:96:EC:4E:F6:1B:12:AC:11:FD:B5:FC:7D X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4c:8e:60:03:31:fb:a1:a4:28:62:8a:af:29:ad:4c:87:3d: 3f:17:fe:52:e1:e6:9b:a4:95:d1:11:d5:6c:28:eb:40:a8:45: c3:04:be:cd:a1:74:45:bc:6d:a0:a7:77:73:be:0a:ee:e8:d1: c9:38:4d:e8:8d:c2:77:de:f1:7a:98:07:5a:a2:3d:d8:0c:89: 03:32:69:13:99:38:06:d8:12:19:33:53:3c:bf:87:25:e6:c8: 64:03:de:5c:f2:53:d7:04:90:91:0b:fb:d5:a7:1b:ba:fd:68: cf:a8:c3:2d:69:e2:8e:36:d1:14:08:45:9e:e8:09:b9:91:58: 5a:4c:8b:43:98:71:5b:cc:35:86:06:d7:c0:a6:a3:78:fc:70: db:40:f6:d8:c4:f3:a5:e4:ee:93:dd:95:48:0b:6c:b0:65:cf: 17:b0:e8:21:fd:e6:63:82:5b:3f:cd:85:b2:0c:9a:2c:c5:65: 3b:ba:f8:d9:1b:bd:c2:7a:85:90:8b:08:cf:38:45:9a:0d:cd: 3a:e6:13:df:ec:f2:a8:a5:aa:fa:3e:2b:31:17:8b:f6:a4:b6: 8e:72:d9:a7:b8:9a:d0:f1:cd:d4:61:95:2f:62:46:fe:48:1f: af:12:a5:05:b2:a5:19:d4:bb:76:90:e5:15:7c:bd:15:b0:4e: 2e:ab:04:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNDI0MjE0NzM4WhcNMjUwNTAxMjE0NzM4WjAYMRYwFAYD VQQDEw02ODBhYjE3YS01ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmuT0NwvAyvfoL0LXRxZTaJHf/jWmFjMnlxqXv6d03LfuFPdAVmBJV+33rXf 7KFO743d5TuxQ5eWPYHe7uuwFCBo3E2XBTp9DaiaJXK4dCCeN2e9ImLEQWgR72ya CB53yXMiYEeZ6mhJgnYDjrPc6SlkdJ+2CPVfYTniqBi1MOBZDTy41FUlNTRnmNSV NuHOMfOkTD9GrpKf/iABG45BfN5O1SYRyNUzj7NhMC2wReVo9M1K9V5bLp3/dyhn Nh3K6O/679V62xYKwAjrvQ2e/1O8/bbUquQBF5l7hwUOGQ+UMhy7q8qeJMsMNAVU nre55fBnmwJcRHX4/79ysEZLSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeOLwk/ ZmCpluxO9hsSrBH9tfx9MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9TI5gAzH7oaQoYoqvKa1Mhz0/F/5S4eabpJXREdVsKOtAqEXDBL7N oXRFvG2gp3dzvgru6NHJOE3ojcJ33vF6mAdaoj3YDIkDMmkTmTgG2BIZM1M8v4cl 5shkA95c8lPXBJCRC/vVpxu6/WjPqMMtaeKONtEUCEWe6Am5kVhaTItDmHFbzDWG BtfApqN4/HDbQPbYxPOl5O6T3ZVIC2ywZc8XsOgh/eZjgls/zYWyDJosxWU7uvjZ G73CeoWQiwjPOEWaDc065hPf7PKopar6PisxF4v2pLaOctmnuJrQ8c3UYZUvYkb+ SB+vEqUFsqUZ1Lt2kOUVfL0VsE4uqwTp -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:41 2025 by rpki-client