$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json) Hash identifier: 4LrWIQQD1KMArtgOVIR0VFAHISisfhJ5fqa4DcE/R+o= Subject key identifier: CF:74:17:F0:72:2C:DA:58:CC:AE:15:74:F5:D1:42:B8:71:E1:B5:6B Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft Manifest number: 03C7 Signing time: Fri 25 Apr 2025 00:24:30 +0000 Manifest this update: Fri 25 Apr 2025 00:24:29 +0000 Manifest next update: Fri 02 May 2025 00:24:29 +0000 Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: ieK2HHJ6lnT/uF/gdmGZ20M6xxxuzDXLsKFnNr+Hvi8=) 2: 6F51887283FA11EC9C033067C4F9AE02.roa (hash: XwBfTGBdHYip+l3Cww7cDDqUdig6aiSXjJ7XX34v/4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Validity Not Before: Apr 25 00:24:29 2025 GMT Not After : May 2 00:24:29 2025 GMT Subject: CN=680ad63e-9836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:2f:e3:66:17:fc:c0:80:d4:fa:a0:0c:49: ee:5a:c4:59:c6:c5:e8:73:7e:6e:7e:3a:ca:ba:22: c0:50:5d:bd:f7:ff:bb:b3:91:1d:f2:f9:16:82:52: ba:fa:0d:d9:88:99:12:4f:47:ce:20:cb:b3:30:f6: e6:a3:0d:28:18:2f:6e:72:0c:af:2a:3b:44:c4:4b: cf:eb:f1:36:20:df:17:45:f3:86:5a:5a:5a:ac:df: f0:6a:7f:f9:b2:7e:9e:2b:c4:54:23:58:8c:8d:15: bc:f6:c5:dd:c6:04:27:fe:49:dc:c8:28:63:fc:d1: 28:43:00:42:99:7a:2d:11:45:1f:da:29:d8:4e:3b: c2:f4:7b:65:79:da:2c:e0:a2:b2:f2:2d:35:86:55: f0:46:71:70:5e:f9:5f:86:63:a9:49:cd:74:f1:2b: 2f:97:c8:5d:b6:f3:19:a5:4e:bb:2b:be:4e:f5:e2: af:0f:91:1c:f3:8d:5c:d7:f1:dc:f9:4e:41:9e:85: 95:5d:ef:80:46:80:bb:64:dc:5c:b3:67:47:ba:7a: f9:77:84:6c:49:01:11:da:91:35:79:c0:de:9e:89: 19:71:86:93:6a:74:62:79:d0:e2:da:01:4a:5e:0c: f8:92:0c:cd:69:e7:af:26:96:04:68:5d:76:61:ac: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:17:F0:72:2C:DA:58:CC:AE:15:74:F5:D1:42:B8:71:E1:B5:6B X509v3 Authority Key Identifier: keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:0d:5f:b6:22:8d:33:0d:60:80:f3:c4:6d:5a:1d:8d:44: c6:67:92:9c:aa:f4:6e:cb:d2:1c:2e:e2:63:33:8c:06:26:6c: e4:03:c1:bd:7a:a4:a3:a9:71:36:c7:f0:0f:33:fb:35:6e:a0: 26:22:37:fd:04:f8:e9:29:dd:81:36:f2:46:9d:36:77:68:d9: ee:b0:9c:e4:82:93:25:f8:c6:e0:05:07:e6:82:13:94:52:32: 60:31:e3:1a:ee:bf:af:6f:3d:7d:95:9e:70:14:46:f3:b9:63: ca:e1:e0:0d:05:f3:a2:a7:b4:df:ea:2c:08:4b:a6:10:74:1c: 35:16:a4:39:15:5b:a2:b8:8a:4c:29:b9:62:e8:22:9f:89:0c: 90:b2:cc:6b:29:f1:66:cb:eb:39:8e:06:d9:ad:e9:27:7d:81: 5e:07:09:d4:d5:b1:79:92:e0:8a:67:bb:70:de:5d:f9:a0:a8: 15:b5:34:0b:a0:06:40:6a:9b:7f:5c:46:b2:6e:ac:8f:51:b3: 81:cc:ce:43:d4:41:b1:22:75:52:8e:e1:af:5e:50:c0:5a:89: 47:c8:96:11:33:97:27:03:03:dc:0e:86:ef:e3:44:90:9e:2d: 43:0f:49:a1:0b:b1:71:28:a9:ad:bd:9d:8c:3b:83:2b:1a:8b: e2:49:d4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4 NTREMzZEQzIwHhcNMjUwNDI1MDAyNDI5WhcNMjUwNTAyMDAyNDI5WjAYMRYwFAYD VQQDEw02ODBhZDYzZS05ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts4v42YX/MCA1PqgDEnuWsRZxsXoc35ufjrKuiLAUF299/+7s5Ed8vkWglK6 +g3ZiJkST0fOIMuzMPbmow0oGC9ucgyvKjtExEvP6/E2IN8XRfOGWlparN/wan/5 sn6eK8RUI1iMjRW89sXdxgQn/kncyChj/NEoQwBCmXotEUUf2inYTjvC9Htledos 4KKy8i01hlXwRnFwXvlfhmOpSc108Ssvl8hdtvMZpU67K75O9eKvD5Ec841c1/Hc +U5BnoWVXe+ARoC7ZNxcs2dHunr5d4RsSQER2pE1ecDenokZcYaTanRiedDi2gFK Xgz4kgzNaeevJpYEaF12YaxNLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM90F/By LNpYzK4VdPXRQrhx4bVrMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG2w1ftiKNMw1ggPPEbVodjUTGZ5KcqvRuy9IcLuJjM4wGJmzkA8G9 eqSjqXE2x/APM/s1bqAmIjf9BPjpKd2BNvJGnTZ3aNnusJzkgpMl+MbgBQfmghOU UjJgMeMa7r+vbz19lZ5wFEbzuWPK4eANBfOip7Tf6iwIS6YQdBw1FqQ5FVuiuIpM Kbli6CKfiQyQssxrKfFmy+s5jgbZreknfYFeBwnU1bF5kuCKZ7tw3l35oKgVtTQL oAZAapt/XEaybqyPUbOBzM5D1EGxInVSjuGvXlDAWolHyJYRM5cnAwPcDobv40SQ ni1DD0mhC7FxKKmtvZ2MO4MrGoviSdSA -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:34 2025 by rpki-client