$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: FyJX6TE5js3VUdKZcRbkfVYzEIz3at4RoJ42aABWVbs= Subject key identifier: AB:2A:05:E3:C8:BA:24:F5:9D:43:56:0C:04:6F:35:89:99:B2:94:CB Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0AB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0AAC Signing time: Thu 24 Apr 2025 19:23:29 +0000 Manifest this update: Thu 24 Apr 2025 19:23:28 +0000 Manifest next update: Thu 01 May 2025 19:23:28 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: OtxSGoVi9PbK4eTFRSi5SnIrGB5jtLhQMSpdUGRsyjg=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Apr 24 19:23:28 2025 GMT Not After : May 1 19:23:28 2025 GMT Subject: CN=680a8fb0-60b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:81:bd:7a:b6:69:97:67:50:3f:04:2e:1f: 05:76:e9:8e:e3:a3:44:9d:14:a6:a6:16:90:9b:0c: 62:8e:4b:44:ec:a0:d3:7a:9c:4f:4a:fb:eb:ce:93: ca:68:94:23:59:00:f3:d8:14:5a:7b:b9:2a:b1:88: 17:69:f5:fd:bf:a8:2c:cf:cc:ad:07:df:bf:4c:82: 66:ff:e1:b6:61:69:58:16:a5:28:c9:db:12:09:fa: 4e:c0:69:d1:cf:b2:b0:3e:69:76:c1:0b:76:3a:31: 0b:e4:c6:86:c9:94:2d:26:10:ce:ab:de:c1:70:69: 8f:c8:6f:47:6d:7a:77:a1:02:4b:a4:f2:b8:4a:fa: 11:da:9e:a5:43:24:73:70:eb:ae:61:4d:c3:91:63: f1:8e:17:e3:7d:91:65:48:16:36:a5:4c:12:a7:38: 12:38:77:99:bc:c3:fe:15:2c:4d:93:09:13:51:97: 24:86:86:f4:6c:a2:69:77:29:a4:07:a0:09:f4:89: d5:2d:30:2d:52:99:51:9a:c8:17:25:22:66:71:d2: b5:4d:cf:84:17:07:f4:0c:ef:f0:d0:e8:9d:2d:a1: 83:2a:c9:40:5f:3c:79:79:17:03:1c:6f:c4:04:f3: 33:25:73:a9:7d:c8:bd:77:ad:73:c4:b6:e5:28:7b: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:05:E3:C8:BA:24:F5:9D:43:56:0C:04:6F:35:89:99:B2:94:CB X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6b:cf:0f:76:79:ea:a0:6c:3e:86:41:9c:51:f0:16:e5:7e: 3f:70:b1:1d:34:3f:4d:13:71:f7:1e:52:42:5a:1f:00:ac:9c: 16:5d:41:ef:8c:33:d4:08:18:97:ad:0c:82:e0:4a:8b:2a:33: 07:e2:ae:34:c8:84:84:5d:8e:f0:74:8a:83:38:52:61:db:86: a4:3a:aa:dc:56:ac:ec:2f:3e:5a:92:98:18:ee:b7:38:5f:cc: f4:9f:02:27:2e:d4:08:d9:dd:c8:4c:4b:9a:88:23:e2:a1:65: d4:89:04:03:b1:02:d7:cc:19:c7:ca:8a:90:75:80:cd:bb:16: e3:41:9b:7f:95:ec:c0:fd:fa:a1:65:73:c7:c1:db:1f:ef:0a: 23:39:06:bd:b6:15:dc:14:a3:87:be:57:e9:89:55:96:4a:69: cf:52:a6:60:ce:3c:23:60:fd:ea:02:7d:47:73:e1:3c:41:8b: 91:9e:90:57:a2:51:6e:72:5d:b6:67:eb:65:e2:95:01:d7:8a: bc:1e:64:d8:2d:f6:e9:1e:78:47:c3:8b:65:ff:1a:8b:02:f8: 74:d6:4f:0f:05:50:07:0f:a0:2a:f6:ad:89:5b:9b:4f:c1:5a: ae:b2:8f:96:b7:8b:85:e3:30:8d:3c:6e:4c:90:ea:e6:40:62: 09:26:3a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwNDI0MTkyMzI4WhcNMjUwNTAxMTkyMzI4WjAYMRYwFAYD VQQDEw02ODBhOGZiMC02MGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JiBvXq2aZdnUD8ELh8FdumO46NEnRSmphaQmwxijktE7KDTepxPSvvrzpPK aJQjWQDz2BRae7kqsYgXafX9v6gsz8ytB9+/TIJm/+G2YWlYFqUoydsSCfpOwGnR z7KwPml2wQt2OjEL5MaGyZQtJhDOq97BcGmPyG9HbXp3oQJLpPK4SvoR2p6lQyRz cOuuYU3DkWPxjhfjfZFlSBY2pUwSpzgSOHeZvMP+FSxNkwkTUZckhob0bKJpdymk B6AJ9InVLTAtUplRmsgXJSJmcdK1Tc+EFwf0DO/w0OidLaGDKslAXzx5eRcDHG/E BPMzJXOpfci9d61zxLblKHtWYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsqBePI uiT1nUNWDARvNYmZspTLMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+a88PdnnqoGw+hkGcUfAW5X4/cLEdND9NE3H3HlJCWh8ArJwWXUHv jDPUCBiXrQyC4EqLKjMH4q40yISEXY7wdIqDOFJh24akOqrcVqzsLz5akpgY7rc4 X8z0nwInLtQI2d3ITEuaiCPioWXUiQQDsQLXzBnHyoqQdYDNuxbjQZt/lezA/fqh ZXPHwdsf7wojOQa9thXcFKOHvlfpiVWWSmnPUqZgzjwjYP3qAn1Hc+E8QYuRnpBX olFucl22Z+tl4pUB14q8HmTYLfbpHnhHw4tl/xqLAvh01k8PBVAHD6Aq9q2JW5tP wVquso+Wt4uF4zCNPG5MkOrmQGIJJjq4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:39 2025 by rpki-client