$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: m3SmKyjAYvlhLrUbG7LqsR+/xFKVIj2wzMd2W+Cmyyg= Subject key identifier: 94:DE:8A:CB:45:EB:53:47:32:16:92:B0:FB:BC:DA:B6:1A:EB:11:1E Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 73 Signing time: Fri 25 Apr 2025 05:52:27 +0000 Manifest this update: Fri 25 Apr 2025 05:52:26 +0000 Manifest next update: Fri 02 May 2025 05:52:26 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: /mRp02PH/TOGl2l0rKaamRAltMrYXKqqyRun6GwQtfg=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Apr 25 05:52:26 2025 GMT Not After : May 2 05:52:26 2025 GMT Subject: CN=680b231a-837d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:06:28:1b:54:e9:d2:c0:ca:de:d9:4b:60: fd:bb:e7:b4:c7:16:20:98:70:21:2f:bd:1d:69:b1: 4d:53:62:e8:72:0f:98:13:ec:34:67:ef:3e:cf:94: 09:4d:86:8f:3e:a7:ad:3d:4d:25:bf:e3:07:51:f9: b2:54:ea:5d:d3:cf:45:cb:e6:3f:4d:f3:a9:a9:70: 27:68:c6:b6:ea:ac:49:b5:07:57:94:22:5f:72:3e: 5c:8d:4f:3d:a0:13:d8:ef:c8:73:22:da:d4:34:7e: 64:da:07:88:1b:6a:6e:82:1c:c6:3e:df:ca:94:4f: 7d:f5:ff:ba:8f:7a:1e:1f:38:bb:73:78:6b:25:90: f5:58:f8:a5:a1:33:48:3b:92:ab:e2:21:bd:e6:a8: a6:d3:d0:24:eb:08:da:91:32:7f:af:30:a8:33:04: 6d:c9:6d:91:a9:09:ad:fe:e1:50:e4:32:75:0c:03: d3:0a:35:ea:09:70:8c:a3:75:de:a7:15:42:eb:d9: de:bf:3d:6d:60:0f:e1:ec:3c:f9:41:39:7f:ab:cb: ec:84:44:e5:51:0e:af:28:1f:91:af:c6:e3:ad:cf: 8a:5c:2d:7e:6a:d9:99:b2:71:5a:b2:d5:e1:ff:df: 8b:4c:a0:73:9b:86:9d:15:d6:fb:86:b2:a6:1d:04: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:8A:CB:45:EB:53:47:32:16:92:B0:FB:BC:DA:B6:1A:EB:11:1E X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3e:13:78:7d:5d:4e:3a:b1:60:52:54:0b:00:08:61:ca:ba: ec:98:3b:3e:8f:22:9f:dc:d1:ff:69:f5:97:f3:b7:b3:7d:7d: e2:35:79:0a:90:c5:a6:0a:9a:48:12:aa:0b:00:fd:20:74:a5: 32:b2:01:d1:13:72:c8:42:ad:ac:fa:3f:b0:47:f1:68:2d:a1: 29:1a:06:58:91:bd:79:8e:90:fa:ce:12:28:2e:12:17:6d:88: 23:cb:6b:28:6c:0a:8c:c0:ce:18:a5:bc:73:81:1d:d9:55:43: 45:dd:6d:11:a5:77:55:0a:17:80:9d:6d:41:a8:48:ba:4d:e7: 5d:25:ab:2d:84:0a:1c:75:4b:29:60:4a:cd:86:b8:b9:ea:69: b3:6e:79:83:5a:69:2d:96:03:a8:d1:2e:90:8a:1f:af:68:ba: 25:0d:ae:91:9d:96:57:97:6e:a5:74:51:98:c6:00:74:34:1e: ea:2b:c5:27:ee:b4:17:96:6a:39:12:7d:e3:c8:50:62:3c:55: 76:df:ca:50:fa:29:95:b3:c4:d6:01:51:df:2f:98:e1:f9:96: 6e:97:51:bd:17:25:19:aa:3d:56:21:37:6b:55:a2:b4:76:38: a9:99:12:95:02:80:5f:96:25:58:d1:f6:5d:2f:5f:66:b8:b4: 96:1b:85:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMTRERDg2ODQyOTRGMUIzM0EzMTNBRkI4RjBFQkExQzhB MDAzNzgwOTAeFw0yNTA0MjUwNTUyMjZaFw0yNTA1MDIwNTUyMjZaMBgxFjAUBgNV BAMTDTY4MGIyMzFhLTgzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnwAYoG1Tp0sDK3tlLYP2757THFiCYcCEvvR1psU1TYuhyD5gT7DRn7z7PlAlN ho8+p609TSW/4wdR+bJU6l3Tz0XL5j9N86mpcCdoxrbqrEm1B1eUIl9yPlyNTz2g E9jvyHMi2tQ0fmTaB4gbam6CHMY+38qUT331/7qPeh4fOLtzeGslkPVY+KWhM0g7 kqviIb3mqKbT0CTrCNqRMn+vMKgzBG3JbZGpCa3+4VDkMnUMA9MKNeoJcIyjdd6n FULr2d6/PW1gD+HsPPlBOX+ry+yEROVRDq8oH5GvxuOtz4pcLX5q2ZmycVqy1eH/ 34tMoHObhp0V1vuGsqYdBAD7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlN6Ky0Xr U0cyFpKw+7zathrrER4wHwYDVR0jBBgwFoAUFN2GhClPGzOjE6+48OuhyKADeAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0QxN0M4ODY4N0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRk4yR2hDbFBHek9qRTYtNDhPdWh5S0FEZUFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QTA1L0QxN0M4ODY4N0M4QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pP akU2LTQ4T3VoeUtBRGVBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKA+E3h9XU46sWBSVAsACGHKuuyYOz6PIp/c0f9p9Zfzt7N9feI1eQqQ xaYKmkgSqgsA/SB0pTKyAdETcshCraz6P7BH8WgtoSkaBliRvXmOkPrOEiguEhdt iCPLayhsCozAzhilvHOBHdlVQ0XdbRGld1UKF4CdbUGoSLpN510lqy2EChx1Sylg Ss2GuLnqabNueYNaaS2WA6jRLpCKH69ouiUNrpGdlleXbqV0UZjGAHQ0HuorxSfu tBeWajkSfePIUGI8VXbfylD6KZWzxNYBUd8vmOH5lm6XUb0XJRmqPVYhN2tVorR2 OKmZEpUCgF+WJVjR9l0vX2a4tJYbhZo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:04 2025 by rpki-client