$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json) Hash identifier: UH+aUw62HGbseun5/obyzgG4jqG7YzXY/ZDF2AuN8LI= Subject key identifier: 9F:43:01:08:4F:FD:FE:F6:AC:74:03:FB:97:58:B7:96:EB:0C:5F:47 Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft Manifest number: 0BA0 Signing time: Thu 24 Apr 2025 18:52:38 +0000 Manifest this update: Thu 24 Apr 2025 18:52:37 +0000 Manifest next update: Thu 01 May 2025 18:52:37 +0000 Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: jahRRKSBjICrw2t65cjbnlhfZ1WQzgz4hUkg8o4JcnA=) 2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: Apr 24 18:52:37 2025 GMT Not After : May 1 18:52:37 2025 GMT Subject: CN=680a8876-aa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:49:d5:79:ca:7a:77:d4:e5:06:87:19:e5: a7:97:7e:7f:dc:5d:79:c9:8f:56:ed:d9:5f:b3:7a: cc:1e:ee:a2:e6:c3:a6:93:16:57:d8:84:20:c3:1f: 2c:c5:fa:ea:45:6a:5a:68:bd:b4:62:d2:b9:be:9d: 84:28:a7:ea:d5:78:a6:4a:57:46:54:b6:b7:92:b9: 5c:6c:63:8b:54:5e:cc:0e:9e:1e:8b:f4:8f:a1:3c: 00:62:f7:e0:42:d0:44:13:57:6a:ce:d5:5f:94:87: bf:c8:ad:0a:4d:c7:1d:5f:2a:86:e6:18:43:c3:16: e8:51:46:c6:71:9d:08:6c:7a:e5:98:e7:2a:7d:52: c4:bf:29:11:ec:a2:38:33:ab:c4:3d:c2:d9:a7:35: e5:b9:81:75:d4:26:be:ec:4f:12:ac:13:de:2b:5f: 69:b2:e8:92:db:92:4f:29:42:8c:45:c3:28:e7:2c: c4:47:b6:f4:28:a3:9b:ed:ba:71:53:7f:83:b4:58: 63:62:fa:f9:82:8c:df:aa:de:c3:4f:9f:2e:80:d4: 6f:71:e9:bf:9e:5d:b0:b4:56:c6:e9:b2:6b:ef:46: 7f:0b:df:fa:51:f3:8f:66:36:9e:0b:77:fb:b2:01: 30:77:6c:e6:67:3a:24:89:98:70:1b:ef:15:30:94: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:01:08:4F:FD:FE:F6:AC:74:03:FB:97:58:B7:96:EB:0C:5F:47 X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:04:14:91:93:d0:15:07:9a:5c:ef:ed:84:d6:fb:9c:73:fd: 91:1e:4f:07:de:a7:e7:04:9c:2c:3f:17:40:c5:26:be:e5:a2: f1:34:3d:08:df:5f:3d:f5:50:2c:74:7d:de:8c:a8:b9:00:64: 21:8e:02:b6:e5:8d:1a:7e:d0:45:57:cd:c0:a9:6d:97:f2:18: 2a:5c:1a:ea:72:33:e2:17:f1:b6:f8:d1:65:5c:60:ff:b9:6a: b9:83:c7:d1:b8:7a:b3:3e:0e:90:17:ef:a5:c7:64:d4:7a:4a: 4c:61:e0:51:21:24:74:a0:f4:88:f9:4f:30:e6:cb:58:8d:d2: 27:12:94:4a:fa:60:07:3b:f7:64:fe:ce:8f:de:49:9a:4c:c0: ae:4e:e3:80:a3:eb:80:d6:e1:d4:17:fe:8f:bf:21:2a:31:3d: 1c:e6:51:45:03:85:7f:5c:1b:a9:7a:2f:11:2f:f3:4e:1c:53: ac:13:30:4a:b2:16:c6:ac:85:36:26:6c:e3:7d:45:d6:93:c2: 3f:00:17:71:4e:d8:52:b7:66:0a:24:c3:4b:85:bf:22:c1:7c: 28:d1:f6:10:18:57:39:8e:b5:14:ed:8c:2f:4f:3a:b2:fa:62: 07:cf:78:80:93:12:7c:59:97:6d:d1:f9:cc:a2:1b:0a:45:9b: ee:42:94:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUwNDI0MTg1MjM3WhcNMjUwNTAxMTg1MjM3WjAYMRYwFAYD VQQDEw02ODBhODg3Ni1hYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DJJ1XnKenfU5QaHGeWnl35/3F15yY9W7dlfs3rMHu6i5sOmkxZX2IQgwx8s xfrqRWpaaL20YtK5vp2EKKfq1XimSldGVLa3krlcbGOLVF7MDp4ei/SPoTwAYvfg QtBEE1dqztVflIe/yK0KTccdXyqG5hhDwxboUUbGcZ0IbHrlmOcqfVLEvykR7KI4 M6vEPcLZpzXluYF11Ca+7E8SrBPeK19psuiS25JPKUKMRcMo5yzER7b0KKOb7bpx U3+DtFhjYvr5gozfqt7DT58ugNRvcem/nl2wtFbG6bJr70Z/C9/6UfOPZjaeC3f7 sgEwd2zmZzokiZhwG+8VMJQl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9DAQhP /f72rHQD+5dYt5brDF9HMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaBBSRk9AVB5pc7+2E1vucc/2RHk8H3qfnBJwsPxdAxSa+5aLxND0I 31899VAsdH3ejKi5AGQhjgK25Y0aftBFV83AqW2X8hgqXBrqcjPiF/G2+NFlXGD/ uWq5g8fRuHqzPg6QF++lx2TUekpMYeBRISR0oPSI+U8w5stYjdInEpRK+mAHO/dk /s6P3kmaTMCuTuOAo+uA1uHUF/6PvyEqMT0c5lFFA4V/XBupei8RL/NOHFOsEzBK shbGrIU2JmzjfUXWk8I/ABdxTthSt2YKJMNLhb8iwXwo0fYQGFc5jrUU7YwvTzqy +mIHz3iAkxJ8WZdt0fnMohsKRZvuQpR+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:57:26 2025 by rpki-client