$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: NbSvzTRWrTuk2IsewKg3Ffe1SwSw5NBNuBeTKB0ifSY= Subject key identifier: E7:DB:49:5C:67:52:6C:1E:EE:7A:B6:99:EB:31:06:D1:39:4F:C0:49 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B2C Signing time: Thu 24 Apr 2025 19:06:15 +0000 Manifest this update: Thu 24 Apr 2025 19:06:15 +0000 Manifest next update: Thu 01 May 2025 19:06:15 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: fTmt4eUO8YqKZEVeMEIYXdqMH6+A1YfCHbKwbzqnhpU=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Apr 24 19:06:15 2025 GMT Not After : May 1 19:06:15 2025 GMT Subject: CN=680a8ba7-0e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:0e:3b:fa:3d:c3:83:b6:d8:e8:35:4e:c7: 98:03:b3:47:9b:89:81:21:ef:e2:74:89:ab:09:58: 47:49:47:2c:c4:44:f6:dd:ba:f8:72:2c:cd:58:9a: 30:69:9f:7e:ab:fc:4a:a7:ef:1e:5b:5d:40:e8:28: 78:07:f2:f6:ef:2e:74:71:b9:44:c6:f6:ef:77:65: 77:a7:0f:75:34:f1:a7:5d:85:b6:fd:28:6e:5c:65: 83:cd:8e:70:25:6b:ff:20:f5:1d:da:7b:4a:ec:38: 23:c1:03:7b:9d:a0:c5:b0:0d:b5:cf:73:47:cd:e6: 83:bf:93:f5:be:ad:9b:01:39:06:c6:7a:6d:99:54: 7a:15:73:8c:37:4d:71:7e:20:f1:fd:28:6e:02:c8: ca:ba:02:a1:0c:be:76:0b:50:0a:7c:6d:ad:16:72: cd:a4:05:14:ce:af:13:31:bf:e8:c6:77:10:8b:1b: 27:31:1d:11:97:ba:1b:e2:1a:99:0f:31:5c:3e:c0: 37:67:34:a3:2d:55:09:6f:bd:85:3d:3c:4b:38:7a: 4e:08:a8:43:f0:3d:7c:0b:67:eb:85:c5:cc:f8:f1: fc:fc:6d:46:32:f4:ec:a5:76:e8:79:90:92:b8:d3: 38:70:15:2b:f5:e0:98:9e:13:9e:89:1e:aa:01:13: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DB:49:5C:67:52:6C:1E:EE:7A:B6:99:EB:31:06:D1:39:4F:C0:49 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:62:fb:4c:b7:56:ee:0f:da:ff:36:da:51:8e:99:16:20:41: a9:82:70:77:e2:14:11:50:10:3a:69:e3:8d:be:01:66:aa:41: a5:dc:66:19:68:df:96:07:a1:6b:68:4c:82:dc:71:ff:0a:13: 49:b4:ba:e7:e5:a9:17:50:a4:b8:22:3e:a9:3f:48:18:e0:7c: bb:e1:e2:04:8a:ae:e2:9a:e1:f6:64:8d:0b:f4:0e:e0:85:8b: a3:3c:9f:8c:ee:c2:a9:6e:17:db:27:53:28:34:79:14:4a:08: a5:2d:70:ac:d9:d5:1e:0b:c9:69:4b:a4:3d:36:f1:d3:69:c9: ad:0f:2e:47:03:19:87:0a:ea:a3:e1:a3:7d:ec:2b:87:f4:0c: aa:0c:f3:08:ca:a4:e7:e7:bf:8e:21:b9:ac:ae:12:ad:05:e0: 43:6c:4d:b5:cf:fd:c3:3e:6c:3b:08:34:db:25:8f:76:9a:96: e9:f5:17:7e:6e:e1:c5:11:eb:5a:e4:8c:e0:dd:9a:a4:76:71: 93:37:2b:71:8f:da:92:8a:5b:04:70:a3:4c:cc:5b:cd:73:64: 78:4d:12:6c:f4:1e:e3:e2:a8:98:33:0a:52:da:16:a2:0c:4c: b9:66:ef:af:9f:00:a8:2f:f2:fd:18:d0:fe:93:fe:d9:1c:4e: 44:b5:32:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUwNDI0MTkwNjE1WhcNMjUwNTAxMTkwNjE1WjAYMRYwFAYD VQQDEw02ODBhOGJhNy0wZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV8OO/o9w4O22Og1TseYA7NHm4mBIe/idImrCVhHSUcsxET23br4cizNWJow aZ9+q/xKp+8eW11A6Ch4B/L27y50cblExvbvd2V3pw91NPGnXYW2/ShuXGWDzY5w JWv/IPUd2ntK7DgjwQN7naDFsA21z3NHzeaDv5P1vq2bATkGxnptmVR6FXOMN01x fiDx/ShuAsjKugKhDL52C1AKfG2tFnLNpAUUzq8TMb/oxncQixsnMR0Rl7ob4hqZ DzFcPsA3ZzSjLVUJb72FPTxLOHpOCKhD8D18C2frhcXM+PH8/G1GMvTspXboeZCS uNM4cBUr9eCYnhOeiR6qARO1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfbSVxn Umwe7nq2mesxBtE5T8BJMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1YvtMt1buD9r/NtpRjpkWIEGpgnB34hQRUBA6aeONvgFmqkGl3GYZ aN+WB6FraEyC3HH/ChNJtLrn5akXUKS4Ij6pP0gY4Hy74eIEiq7imuH2ZI0L9A7g hYujPJ+M7sKpbhfbJ1MoNHkUSgilLXCs2dUeC8lpS6Q9NvHTacmtDy5HAxmHCuqj 4aN97CuH9AyqDPMIyqTn57+OIbmsrhKtBeBDbE21z/3DPmw7CDTbJY92mpbp9Rd+ buHFEeta5Izg3ZqkdnGTNytxj9qSilsEcKNMzFvNc2R4TRJs9B7j4qiYMwpS2hai DEy5Zu+vnwCoL/L9GND+k/7ZHE5EtTL+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:09:39 2025 by rpki-client