$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: BX6u7BoyznrxvoLxQOO0+X/b1nE/fSeYBqOqh55jwQA= Subject key identifier: 67:86:07:45:48:39:C0:07:62:BD:4E:E3:E4:14:6C:75:87:F9:38:16 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 050E Signing time: Thu 24 Apr 2025 23:31:25 +0000 Manifest this update: Thu 24 Apr 2025 23:31:25 +0000 Manifest next update: Thu 01 May 2025 23:31:25 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: RopXl9oqJ8RjyaDlicMMOg67tLRJSgAYL82vvBkQqU4=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Apr 24 23:31:25 2025 GMT Not After : May 1 23:31:25 2025 GMT Subject: CN=680ac9cd-9f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:a3:43:41:c6:3a:16:3b:59:88:81:63:ad: a1:67:3d:16:65:8c:93:f8:44:9c:1f:1e:fd:a1:e7: 5b:fe:ba:0a:06:3d:2d:1b:41:34:ac:a6:8e:f5:9a: 6f:22:8d:7d:46:5a:bc:a6:35:b3:11:53:9d:ce:bd: 7a:da:e4:55:ac:ec:9c:f4:83:ae:5b:60:43:f6:2a: dc:16:ea:18:96:14:48:70:7d:e8:57:80:29:ef:6a: ca:ef:bc:7b:85:fe:69:d6:8a:07:08:e9:fa:8e:02: ab:04:ae:56:33:2a:80:49:f6:7d:c1:ce:74:b8:fc: f7:df:4c:3c:5a:8a:f9:db:2d:7e:f4:9f:8f:6a:bc: b8:e6:22:59:3a:7a:b5:14:6f:b7:11:13:1b:04:9a: 16:87:3a:f5:9e:73:da:a2:56:8b:08:13:02:11:3f: 25:33:f6:2d:01:23:f5:be:89:79:7d:14:5f:88:d4: f6:e9:b2:b6:07:22:a7:44:7a:d1:f8:f4:68:c9:93: 2e:ec:ad:cf:86:07:4d:76:82:00:2d:b7:36:9e:9d: 96:ee:0e:02:80:1d:c0:d3:78:8f:50:0f:19:2e:c1: a2:8f:54:e7:56:a0:ec:e9:8b:5f:d4:d8:fc:40:eb: 33:be:e0:72:9a:95:36:36:31:94:73:dc:1d:f3:fc: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:86:07:45:48:39:C0:07:62:BD:4E:E3:E4:14:6C:75:87:F9:38:16 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ff:9a:f4:f9:86:3b:54:63:a3:b6:5e:6c:67:8f:cf:74:23: 74:8c:23:7b:90:1a:18:80:8f:50:63:b8:5f:ae:0d:98:f6:70: bd:1e:57:04:1b:41:7d:86:74:32:36:08:02:8e:98:fb:27:f0: af:bf:37:69:cb:02:88:40:be:4e:3c:36:6b:f1:dd:11:23:f4: 83:bb:4a:b1:28:11:11:0e:cb:0e:02:74:5a:d9:98:b0:42:69: 0a:25:cf:f6:c6:d4:86:ec:81:e1:0e:ba:ad:9d:b9:b5:fa:ff: 75:c3:3a:4c:f3:8f:db:7d:eb:3b:14:75:09:a3:3e:bf:51:33: ff:8a:8b:fb:22:1b:26:a8:08:9b:cc:2a:62:98:00:a1:d8:d4: 40:38:93:5d:4e:0b:d8:ce:63:7b:1e:95:97:7d:30:54:73:54: 74:16:2a:c7:4a:f2:88:ed:98:d3:fe:ef:93:74:b8:8b:b9:97: 7c:c7:2e:f7:fb:49:d0:90:bd:41:ce:23:7c:96:43:6d:ff:47: da:6e:4c:1b:90:cb:2d:ef:18:b4:35:e2:00:c1:dd:8d:2c:58: aa:3c:82:43:75:1a:61:5c:00:01:6c:6a:c3:13:a0:47:97:97: a6:6f:0f:46:90:52:7f:6a:f0:72:8f:bb:dd:95:d8:48:6c:34: e8:90:26:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNDI0MjMzMTI1WhcNMjUwNTAxMjMzMTI1WjAYMRYwFAYD VQQDEw02ODBhYzljZC05ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApj2jQ0HGOhY7WYiBY62hZz0WZYyT+EScHx79oedb/roKBj0tG0E0rKaO9Zpv Io19Rlq8pjWzEVOdzr162uRVrOyc9IOuW2BD9ircFuoYlhRIcH3oV4Ap72rK77x7 hf5p1ooHCOn6jgKrBK5WMyqASfZ9wc50uPz330w8Wor52y1+9J+Pary45iJZOnq1 FG+3ERMbBJoWhzr1nnPaolaLCBMCET8lM/YtASP1vol5fRRfiNT26bK2ByKnRHrR +PRoyZMu7K3PhgdNdoIALbc2np2W7g4CgB3A03iPUA8ZLsGij1TnVqDs6Ytf1Nj8 QOszvuBympU2NjGUc9wd8/wUZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeGB0VI OcAHYr1O4+QUbHWH+TgWMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/5r0+YY7VGOjtl5sZ4/PdCN0jCN7kBoYgI9QY7hfrg2Y9nC9HlcE G0F9hnQyNggCjpj7J/CvvzdpywKIQL5OPDZr8d0RI/SDu0qxKBERDssOAnRa2Ziw QmkKJc/2xtSG7IHhDrqtnbm1+v91wzpM84/bfes7FHUJoz6/UTP/iov7IhsmqAib zCpimACh2NRAOJNdTgvYzmN7HpWXfTBUc1R0FirHSvKI7ZjT/u+TdLiLuZd8xy73 +0nQkL1BziN8lkNt/0fabkwbkMst7xi0NeIAwd2NLFiqPIJDdRphXAABbGrDE6BH l5embw9GkFJ/avByj7vdldhIbDTokCZ9 -----END CERTIFICATE-----Generated at Sat Apr 26 18:21:03 2025 by rpki-client