$ rpki-client -vvf rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft File: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft (raw, json) Hash identifier: BmLCcNEzLqchCynoi9lYAy+Uiivuyuojtgwb/DLgXCA= Subject key identifier: 2F:F7:77:7E:96:B2:77:09:86:79:9D:47:E3:8B:1F:00:7B:59:59:2F Authority key identifier: 5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E Certificate issuer: /CN=A9145418/serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft Manifest number: 047F Signing time: Thu 24 Apr 2025 23:50:04 +0000 Manifest this update: Thu 24 Apr 2025 23:50:03 +0000 Manifest next update: Thu 01 May 2025 23:50:03 +0000 Files and hashes: 1: X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl (hash: wq252AnIZKAvtN6Z3Fa+uPrH68oIgDmzJs2YlxbNCJY=) 2: FA5399BC3AE211ECA119BA68C4F9AE02.roa (hash: M598nPRIqsJS/K52Ut9/vCkEatFaGNrs9FvUNDB8rmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145418, serialNumber=5FE1543C85B06530A164CF90E1A27DA8DB72450E Validity Not Before: Apr 24 23:50:03 2025 GMT Not After : May 1 23:50:03 2025 GMT Subject: CN=680ace2b-b816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:47:6b:7e:9a:71:87:03:54:7f:80:81:a7: c0:5f:5c:e7:44:eb:29:c0:8b:00:57:a6:95:28:19: d4:d2:e3:66:89:85:f1:b4:22:7a:cd:61:ea:0d:d4: f5:2c:8a:70:5a:21:ab:47:1c:c9:5d:c9:ae:ef:66: bc:88:72:9b:af:e5:ef:0d:11:18:f1:b1:6c:5f:ec: fd:3b:f4:01:06:63:16:bd:a9:5c:62:33:88:c1:92: 02:a4:cc:e7:f9:d0:91:34:9d:79:1a:ba:4b:24:ed: 3e:b0:1a:20:4a:06:34:2f:13:ca:33:62:78:bc:33: 79:ca:ae:80:5b:39:b6:cc:a0:54:13:38:4d:b0:18: 3d:90:2e:71:85:f4:68:05:9b:a0:26:dd:7a:db:94: 40:d0:aa:2c:77:21:c1:b3:1f:8b:9f:ea:4d:bb:63: 3e:07:ee:8e:18:24:9b:bf:bc:13:7c:f6:c1:48:47: d8:c7:84:3b:0b:40:a7:ca:62:38:77:94:6f:af:b6: 16:e2:bc:4e:41:8e:f1:cc:d7:d3:b9:6b:6c:bd:a4: 74:a7:f9:c8:6d:41:c7:20:f2:3a:84:29:6f:81:5b: 08:91:3f:07:5a:44:e0:9f:12:0e:2e:94:38:b4:ba: 30:c2:79:45:8f:c2:38:a2:7e:07:2c:51:eb:ea:09: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F7:77:7E:96:B2:77:09:86:79:9D:47:E3:8B:1F:00:7B:59:59:2F X509v3 Authority Key Identifier: keyid:5F:E1:54:3C:85:B0:65:30:A1:64:CF:90:E1:A2:7D:A8:DB:72:45:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145418/771931803AE011EC93728D66C4F9AE02/X-FUPIWwZTChZM-Q4aJ9qNtyRQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:06:57:e1:7c:98:9b:92:13:ca:fd:d4:99:f0:a0:46:a3:4a: 66:5a:74:9f:d2:5f:d5:7d:5f:94:82:81:90:15:2c:4e:8a:ea: 62:5d:ab:e3:bf:61:50:2e:54:09:ad:e7:63:1f:92:4f:fb:0c: 5a:2f:6d:92:0b:cd:8f:5d:57:26:98:0d:5c:a9:75:81:2f:dd: d4:a2:c8:b7:11:66:58:f9:ce:fd:68:45:44:5a:08:cc:3b:26: 69:4f:d4:bb:93:a0:40:8c:d5:d4:87:7e:48:e0:17:3a:9f:36: 75:4f:63:f0:68:f6:fe:03:60:0d:6f:49:0c:e2:33:0a:68:be: 49:ba:10:26:db:19:21:fd:4c:19:0f:b8:7e:74:27:e8:4f:54: 95:80:e6:54:f2:81:8a:16:c4:b4:5d:ad:e3:96:ec:4d:c2:a0: d2:42:85:73:e8:dd:28:07:ed:ff:92:7e:b7:9c:77:88:43:b0: 24:24:7c:35:0a:29:bd:b1:9a:a6:54:88:1d:5e:05:16:81:05: da:5e:f6:7f:b6:4f:38:b8:f5:d4:38:16:98:a8:d0:f2:45:5a: 53:bd:55:88:f4:17:7f:88:86:cc:57:a2:4a:45:9d:32:64:67: e8:14:20:85:17:0b:8e:6c:c2:85:17:32:37:92:a8:f3:e5:40: af:e5:ef:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MTgxMTAvBgNVBAUTKDVGRTE1NDNDODVCMDY1MzBBMTY0Q0Y5MEUxQTI3REE4 REI3MjQ1MEUwHhcNMjUwNDI0MjM1MDAzWhcNMjUwNTAxMjM1MDAzWjAYMRYwFAYD VQQDEw02ODBhY2UyYi1iODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EJHa36acYcDVH+AgafAX1znROspwIsAV6aVKBnU0uNmiYXxtCJ6zWHqDdT1 LIpwWiGrRxzJXcmu72a8iHKbr+XvDREY8bFsX+z9O/QBBmMWvalcYjOIwZICpMzn +dCRNJ15GrpLJO0+sBogSgY0LxPKM2J4vDN5yq6AWzm2zKBUEzhNsBg9kC5xhfRo BZugJt1625RA0KosdyHBsx+Ln+pNu2M+B+6OGCSbv7wTfPbBSEfYx4Q7C0CnymI4 d5Rvr7YW4rxOQY7xzNfTuWtsvaR0p/nIbUHHIPI6hClvgVsIkT8HWkTgnxIOLpQ4 tLowwnlFj8I4on4HLFHr6gmZ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/3d36W sncJhnmdR+OLHwB7WVkvMB8GA1UdIwQYMBaAFF/hVDyFsGUwoWTPkOGifajbckUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxOC83NzE5MzE4MDNB RTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pUQ2haTS1RNGFKOXFOdHlS UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtRlVQSVd3WlRDaFpNLVE0YUo5cU50eVJRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQxOC83NzE5MzE4MDNBRTAxMUVDOTM3MjhENjZDNEY5QUUwMi9YLUZVUElXd1pU Q2haTS1RNGFKOXFOdHlSUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgBlfhfJibkhPK/dSZ8KBGo0pmWnSf0l/VfV+UgoGQFSxOiupiXavj v2FQLlQJredjH5JP+wxaL22SC82PXVcmmA1cqXWBL93Uosi3EWZY+c79aEVEWgjM OyZpT9S7k6BAjNXUh35I4Bc6nzZ1T2PwaPb+A2ANb0kM4jMKaL5JuhAm2xkh/UwZ D7h+dCfoT1SVgOZU8oGKFsS0Xa3jluxNwqDSQoVz6N0oB+3/kn63nHeIQ7AkJHw1 Cim9sZqmVIgdXgUWgQXaXvZ/tk84uPXUOBaYqNDyRVpTvVWI9Bd/iIbMV6JKRZ0y ZGfoFCCFFwuObMKFFzI3kqjz5UCv5e+c -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:22 2025 by rpki-client