$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: yCKhGT7beLsH7fmodzsPLEwKJpaEh6m4I9P2HewN7q8= Subject key identifier: 48:FD:6D:7C:9F:48:C7:80:25:9B:B1:9D:6C:C6:7A:A1:62:52:2F:8E Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B51 Signing time: Thu 24 Apr 2025 19:26:36 +0000 Manifest this update: Thu 24 Apr 2025 19:26:35 +0000 Manifest next update: Thu 01 May 2025 19:26:35 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: FfgiNgo2iTwizLAl9ExBo1qPsk/vH7plHccgCEegB6I=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Apr 24 19:26:35 2025 GMT Not After : May 1 19:26:35 2025 GMT Subject: CN=680a906b-e3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:85:2c:2d:1f:f6:fb:07:e6:82:e0:64:a8: f9:b2:7b:5e:e1:df:d3:d4:b3:64:06:77:71:80:e3: f3:00:58:23:54:ef:2f:48:71:ee:b4:0e:05:f2:a9: 8e:2a:1f:6c:8c:ef:40:25:64:58:4d:64:64:fd:0e: 94:47:dd:0f:c9:77:06:bc:64:4a:c1:4c:39:6d:c9: 07:51:53:6e:69:d5:57:e8:96:06:fe:a4:68:36:96: ab:7c:f0:54:9c:d9:92:2c:75:7a:11:b9:b8:81:ab: 62:dd:9f:0a:be:99:20:23:00:fc:82:9e:76:64:0c: 25:e3:b9:96:c3:9c:7f:d6:b8:46:60:0c:6b:9a:a4: 43:e8:ab:5e:16:2a:e9:92:f4:49:fe:81:8f:9d:b4: dd:93:8b:ce:bd:0d:33:96:5b:dd:a8:81:d0:8f:af: 7f:60:4c:84:d9:1d:65:37:e2:cf:29:83:49:ac:f8: 5a:0d:59:3a:46:60:43:dc:3c:9e:1a:00:0d:d9:78: 2a:af:b5:cd:f8:8c:f5:fa:bd:c1:10:ae:49:50:d1: c1:07:94:51:56:a8:2c:22:91:45:1a:2e:32:df:e9: 99:28:39:f6:a3:0b:59:17:f0:40:d3:99:e5:cc:d0: 70:0d:f3:30:ce:31:0a:52:91:7e:d2:80:66:8f:ac: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FD:6D:7C:9F:48:C7:80:25:9B:B1:9D:6C:C6:7A:A1:62:52:2F:8E X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:18:e8:6c:36:c4:dc:55:36:12:29:14:8b:2a:0f:97:ef:ba: 68:a7:e2:5c:bd:2a:6c:74:0a:98:fe:c4:20:34:8f:2d:0f:f9: ab:7d:c6:65:49:58:18:b5:43:60:1e:fe:b0:d0:71:a6:4d:5f: ea:bb:1b:b4:94:74:5c:a9:9e:7b:06:22:4a:ec:a4:c1:b3:9b: 0e:b3:ff:be:1a:d8:1a:67:0b:02:3d:bf:17:7c:8f:c2:f2:a5: ab:75:2f:13:d1:9d:26:2b:76:90:a9:c5:24:f8:28:0b:ac:05: 4a:2e:eb:e8:ac:48:87:be:20:8a:d2:76:78:b5:7c:f0:ce:3c: a9:46:e9:29:0e:55:2b:96:53:22:f1:2d:6e:a1:be:f0:42:93: 9a:dc:25:ac:31:5e:42:7d:8a:9a:51:50:0e:1b:e0:7a:7d:1e: cb:a5:fe:54:35:6e:7e:b7:4c:96:2e:c2:08:28:1e:f5:22:61: 9c:80:68:eb:ba:dc:6f:d5:ae:f1:9c:75:76:fd:69:35:7a:64: 0f:be:b4:3c:d1:7a:85:ec:ae:cd:c5:92:a8:fe:32:2a:69:90: ff:35:b2:29:9b:68:ad:ee:c7:d7:c8:eb:65:4a:b1:9e:49:70: 97:c4:db:5b:1c:2e:a2:7a:a6:4c:86:d0:63:9d:8d:de:78:f9: 0e:8b:b3:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNDI0MTkyNjM1WhcNMjUwNTAxMTkyNjM1WjAYMRYwFAYD VQQDEw02ODBhOTA2Yi1lM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VOFLC0f9vsH5oLgZKj5snte4d/T1LNkBndxgOPzAFgjVO8vSHHutA4F8qmO Kh9sjO9AJWRYTWRk/Q6UR90PyXcGvGRKwUw5bckHUVNuadVX6JYG/qRoNparfPBU nNmSLHV6Ebm4gati3Z8KvpkgIwD8gp52ZAwl47mWw5x/1rhGYAxrmqRD6KteFirp kvRJ/oGPnbTdk4vOvQ0zllvdqIHQj69/YEyE2R1lN+LPKYNJrPhaDVk6RmBD3Dye GgAN2Xgqr7XN+Iz1+r3BEK5JUNHBB5RRVqgsIpFFGi4y3+mZKDn2owtZF/BA05nl zNBwDfMwzjEKUpF+0oBmj6yLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj9bXyf SMeAJZuxnWzGeqFiUi+OMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABGOhsNsTcVTYSKRSLKg+X77pop+JcvSpsdAqY/sQgNI8tD/mrfcZl SVgYtUNgHv6w0HGmTV/quxu0lHRcqZ57BiJK7KTBs5sOs/++GtgaZwsCPb8XfI/C 8qWrdS8T0Z0mK3aQqcUk+CgLrAVKLuvorEiHviCK0nZ4tXzwzjypRukpDlUrllMi 8S1uob7wQpOa3CWsMV5CfYqaUVAOG+B6fR7Lpf5UNW5+t0yWLsIIKB71ImGcgGjr utxv1a7xnHV2/Wk1emQPvrQ80XqF7K7NxZKo/jIqaZD/NbIpm2it7sfXyOtlSrGe SXCXxNtbHC6ieqZMhtBjnY3eePkOi7P9 -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:19 2025 by rpki-client