$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: HOMSRF25hemhNbTVt/ZKDwnCgB95bi3b+WD+7WB25ow= Subject key identifier: 94:83:0B:35:09:A7:8B:5B:E4:85:F0:B9:7B:B2:94:32:49:BC:17:A0 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 023C Signing time: Fri 25 Apr 2025 01:40:08 +0000 Manifest this update: Fri 25 Apr 2025 01:40:08 +0000 Manifest next update: Fri 02 May 2025 01:40:08 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: y1TsUlOYpAHaT97MFEzhKL7xGP3i5n878tI4N42c6BY=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Apr 25 01:40:08 2025 GMT Not After : May 2 01:40:08 2025 GMT Subject: CN=680ae7f8-3930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:b8:c5:63:19:14:3f:dc:e2:bf:f2:b5:ee: 66:42:1e:9f:01:d2:f5:de:ea:c6:ca:15:16:af:61: a7:16:27:7a:69:e8:52:b8:0d:2c:e5:80:4e:84:e0: f6:58:80:6d:91:c4:44:b6:f5:0e:0c:d2:ec:7b:aa: 82:cb:2e:65:2f:1d:cf:dc:39:00:7e:78:87:33:2a: 7d:bc:1f:af:a7:90:ed:cf:2c:ae:b4:a1:8e:08:19: af:7f:85:df:dd:8b:db:83:13:cd:2b:3a:3f:83:64: 69:81:5d:ef:b2:86:61:c1:cb:8a:13:2e:d4:85:41: 22:b6:bf:47:91:4a:89:91:79:14:7c:11:71:1c:3a: 96:bf:80:3a:25:cc:22:02:1f:ec:39:6e:fa:d9:24: b9:1c:a8:3d:7b:8b:e5:f3:90:4e:97:26:70:08:c5: e6:6e:c8:50:32:c6:a7:55:3b:d6:b1:01:16:cd:ab: 30:7e:92:cb:0d:dd:f6:9b:ac:09:b6:35:04:09:39: 2d:05:40:07:1e:36:1f:3a:f8:c9:0b:21:2c:00:9c: e3:7c:fd:e8:cf:c0:b2:e5:b6:fc:fe:24:64:1f:34: 13:cf:6e:1c:7d:2d:7c:5e:d3:98:e1:62:20:5e:9e: d7:0d:17:38:7a:c5:65:5e:55:7d:4c:71:e4:ed:9b: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:83:0B:35:09:A7:8B:5B:E4:85:F0:B9:7B:B2:94:32:49:BC:17:A0 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:87:6c:87:70:6f:c9:7c:38:88:77:de:55:ac:37:16:40:9b: 72:91:cd:2e:13:48:58:9b:64:f3:d9:16:cf:c2:f0:a9:af:89: e1:8b:ab:15:72:3d:21:9d:67:0c:2a:db:a2:f1:20:4a:4e:72: 8f:84:95:47:67:0f:0b:94:ee:a4:49:99:15:d2:3d:98:e9:5b: c9:79:4a:be:05:c6:ab:2a:ec:f8:59:0e:9d:47:5a:6b:50:9e: 78:50:99:b0:7b:c8:20:dc:c1:1f:37:9b:d1:a3:8a:ed:14:5c: b1:87:74:e0:29:7d:73:2d:af:c5:7c:5a:24:6c:82:b7:75:66: 18:5c:19:e0:5f:c8:2b:77:15:d1:c5:ca:4d:0a:1e:31:2d:2a: 03:36:df:6a:5f:9e:76:dd:77:d4:2b:3f:ba:23:7e:3b:29:ab: 89:78:d6:14:a1:b8:af:a9:1a:73:b1:f3:0c:0f:ed:16:05:f3: ae:60:28:a2:39:10:87:89:95:43:3c:04:0c:f8:27:dc:14:2e: 69:4e:00:6d:cb:b5:eb:a6:6b:c9:fd:71:47:b4:2d:2c:12:52: 39:ee:a6:3d:74:1a:d7:87:20:f9:0f:14:4e:68:7d:54:b7:01: 18:c4:cc:52:6f:d2:fc:79:7a:28:5e:59:f1:5a:fd:5c:6a:e1: db:ff:f1:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwNDI1MDE0MDA4WhcNMjUwNTAyMDE0MDA4WjAYMRYwFAYD VQQDEw02ODBhZTdmOC0zOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqe4xWMZFD/c4r/yte5mQh6fAdL13urGyhUWr2GnFid6aehSuA0s5YBOhOD2 WIBtkcREtvUODNLse6qCyy5lLx3P3DkAfniHMyp9vB+vp5DtzyyutKGOCBmvf4Xf 3YvbgxPNKzo/g2RpgV3vsoZhwcuKEy7UhUEitr9HkUqJkXkUfBFxHDqWv4A6Jcwi Ah/sOW762SS5HKg9e4vl85BOlyZwCMXmbshQMsanVTvWsQEWzaswfpLLDd32m6wJ tjUECTktBUAHHjYfOvjJCyEsAJzjfP3oz8Cy5bb8/iRkHzQTz24cfS18XtOY4WIg Xp7XDRc4esVlXlV9THHk7Zt+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSDCzUJ p4tb5IXwuXuylDJJvBegMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJh2yHcG/JfDiId95VrDcWQJtykc0uE0hYm2Tz2RbPwvCpr4nhi6sV cj0hnWcMKtui8SBKTnKPhJVHZw8LlO6kSZkV0j2Y6VvJeUq+BcarKuz4WQ6dR1pr UJ54UJmwe8gg3MEfN5vRo4rtFFyxh3TgKX1zLa/FfFokbIK3dWYYXBngX8grdxXR xcpNCh4xLSoDNt9qX5523XfUKz+6I347KauJeNYUobivqRpzsfMMD+0WBfOuYCii ORCHiZVDPAQM+CfcFC5pTgBty7XrpmvJ/XFHtC0sElI57qY9dBrXhyD5DxROaH1U twEYxMxSb9L8eXooXlnxWv1cauHb//H3 -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:04 2025 by rpki-client