$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft File: FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json) Hash identifier: UnsXtkiRb59AiqeJJg/jtHKCb3ftxAVXTUbdU5uo4so= Subject key identifier: 0C:F3:36:69:AF:9A:37:D8:53:96:A4:CC:B6:36:23:39:93:95:93:82 Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF Certificate issuer: /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF Certificate serial: 06C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft Manifest number: 11A6 Signing time: Thu 24 Apr 2025 19:16:19 +0000 Manifest this update: Thu 24 Apr 2025 19:16:19 +0000 Manifest next update: Thu 01 May 2025 19:16:19 +0000 Files and hashes: 1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: S+tfKjLEMOa+MCo/XkiCMXez9gSJRkKXr05uqEnG4Ck=) 2: A6E61B8A5A0811EB817D2420C4F9AE02.roa (hash: Sgs7DcEq+j0wnDyUx8P1vrAXIvVvC0UqJgxrSkK3xTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF Validity Not Before: Apr 24 19:16:19 2025 GMT Not After : May 1 19:16:19 2025 GMT Subject: CN=680a8e03-b3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:eb:ff:31:1c:56:ec:6f:59:e6:cc:a9:30: 5c:56:20:72:6c:4d:89:cf:2f:bc:f0:3f:96:09:97: e3:68:e9:04:c5:27:52:56:45:dc:34:00:ef:12:47: 63:13:07:44:96:4b:06:73:99:db:5e:26:92:a0:d8: 21:1b:1d:96:43:44:f9:e4:5a:98:62:df:82:15:89: d4:fc:1e:08:68:fa:53:ea:95:36:52:cb:85:64:60: e7:52:04:5c:7c:26:76:99:21:50:47:11:a1:b4:51: 13:9c:92:7b:36:15:8c:d6:36:53:58:b8:2a:38:67: 71:75:8e:e2:1c:ec:92:b6:4f:74:8b:8d:8a:37:4c: 4d:55:1b:a4:77:24:46:52:86:5b:29:c5:c7:6b:9b: 9c:53:ae:b7:24:25:e8:99:f6:3b:72:04:f9:7b:0a: 14:81:1d:81:18:7d:f7:2f:14:a8:8a:16:56:be:52: 5d:05:f9:89:ab:01:c3:73:58:39:07:4e:c1:57:82: 9d:7b:97:d1:7d:4d:5f:a5:72:28:93:10:b4:4c:47: 69:82:4f:08:56:f7:79:ed:3e:d8:ad:9e:87:f6:e9: 1b:65:cc:93:63:04:23:86:c6:f3:08:98:93:c0:9a: 00:6a:00:40:67:4d:12:12:4a:2e:d0:46:c0:d1:d5: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F3:36:69:AF:9A:37:D8:53:96:A4:CC:B6:36:23:39:93:95:93:82 X509v3 Authority Key Identifier: keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3a:d4:a4:18:8b:f0:0a:33:d9:12:a9:6c:06:19:19:7f:29: 43:25:63:53:a3:d4:c3:b5:f3:08:0c:89:a1:35:bf:96:2e:f7: 21:2b:92:d8:bb:d3:23:6a:8c:27:97:e9:8f:ac:29:0e:d5:76: a8:4d:88:3a:c8:d3:ea:42:78:2c:b0:f4:d2:4e:74:6f:f6:3e: 9c:e3:42:d1:a3:a0:7c:0c:a2:39:b9:4b:28:18:69:af:c6:ac: e0:65:da:61:86:8f:64:c6:96:72:72:5e:ac:51:38:cf:6b:6b: 63:03:63:54:78:15:1c:75:26:c5:56:47:b4:a6:20:2e:db:f4: 72:d3:6c:f7:e7:77:02:fe:77:86:10:ad:55:33:58:c0:8e:15: 83:37:3f:1a:14:b7:60:70:6e:f4:33:18:30:98:17:b1:3c:9a: fc:10:68:5a:74:02:ff:91:67:4e:e6:15:64:64:df:e6:74:0f: b7:70:8a:e9:e8:57:b5:95:27:0f:7a:1b:85:ef:6d:56:af:80: 78:e8:32:ab:3c:32:cc:fa:75:24:ea:e8:95:9c:d8:20:f6:cd: 65:53:02:e0:13:15:52:b1:e4:30:34:63:9b:f3:a0:94:74:93: 81:00:fd:ae:4d:5d:f4:ed:51:6c:70:6d:64:36:c9:46:2c:41: 9f:ee:f0:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDE2NzU3MDIwQ0ZCNDlBOEMxRjdCRTFGN0M0OEQ0NTQ3 REZDOTY2RUYwHhcNMjUwNDI0MTkxNjE5WhcNMjUwNTAxMTkxNjE5WjAYMRYwFAYD VQQDEw02ODBhOGUwMy1iM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugTr/zEcVuxvWebMqTBcViBybE2Jzy+88D+WCZfjaOkExSdSVkXcNADvEkdj EwdElksGc5nbXiaSoNghGx2WQ0T55FqYYt+CFYnU/B4IaPpT6pU2UsuFZGDnUgRc fCZ2mSFQRxGhtFETnJJ7NhWM1jZTWLgqOGdxdY7iHOyStk90i42KN0xNVRukdyRG UoZbKcXHa5ucU663JCXomfY7cgT5ewoUgR2BGH33LxSoihZWvlJdBfmJqwHDc1g5 B07BV4Kde5fRfU1fpXIokxC0TEdpgk8IVvd57T7YrZ6H9ukbZcyTYwQjhsbzCJiT wJoAagBAZ00SEkou0EbA0dU77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzzNmmv mjfYU5akzLY2IzmTlZOCMB8GA1UdIwQYMBaAFBZ1cCDPtJqMH3vh98SNRUffyWbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1vd2ZlLUgzeEkxRlI5X0pa dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuVndJTS0wbW93ZmUtSDN4STFGUjlfSlp1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1v d2ZlLUgzeEkxRlI5X0padTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfOtSkGIvwCjPZEqlsBhkZfylDJWNTo9TDtfMIDImhNb+WLvchK5LY u9Mjaownl+mPrCkO1XaoTYg6yNPqQngssPTSTnRv9j6c40LRo6B8DKI5uUsoGGmv xqzgZdphho9kxpZycl6sUTjPa2tjA2NUeBUcdSbFVke0piAu2/Ry02z353cC/neG EK1VM1jAjhWDNz8aFLdgcG70MxgwmBexPJr8EGhadAL/kWdO5hVkZN/mdA+3cIrp 6Fe1lScPehuF721Wr4B46DKrPDLM+nUk6uiVnNgg9s1lUwLgExVSseQwNGOb86CU dJOBAP2uTV307VFscG1kNslGLEGf7vBS -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:30 2025 by rpki-client