$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: 4injRtKZ3bSG97XLhe6XIRM4wg2O8m01T/nxipk6K14= Subject key identifier: FE:16:E0:F7:46:BD:F5:7B:BD:A4:2D:5A:E6:3B:2F:10:C7:C4:1B:92 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 0431 Signing time: Fri 25 Apr 2025 00:09:00 +0000 Manifest this update: Fri 25 Apr 2025 00:08:59 +0000 Manifest next update: Fri 02 May 2025 00:08:59 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: plHWJgRgUZujWKgAb0Hfg0gcTgCDWpPtSNsSK+ETARE=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Apr 25 00:08:59 2025 GMT Not After : May 2 00:08:59 2025 GMT Subject: CN=680ad29b-4fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:3e:79:32:95:e0:d8:df:aa:0d:dc:7e:94: 20:ad:d8:69:42:c7:05:18:4f:2d:8c:2e:48:0d:05: 39:89:c5:51:10:ae:5e:8e:ea:6f:fb:4c:23:32:a4: ac:85:b0:94:4d:4f:57:5c:cb:c7:6d:48:82:09:0d: 99:fc:3c:eb:a9:18:0e:5e:b7:06:7b:0d:60:25:7c: 01:55:ca:52:60:03:25:b0:42:53:c9:97:3e:46:d4: 35:85:19:78:07:36:08:ab:da:c3:50:6f:da:64:d7: 86:0d:9b:95:11:67:7b:10:98:eb:77:b7:ff:1d:bf: 41:80:e1:1a:12:93:4b:78:82:28:e6:c1:06:7f:45: 87:a1:f6:86:1e:12:b8:b7:17:8b:1d:40:e0:ba:88: 72:c1:aa:91:55:90:20:25:76:cf:e9:83:dc:d5:a0: 7f:ec:50:09:17:32:d8:7a:69:38:a2:c2:c7:68:04: c5:9b:ee:7e:c5:a5:7a:9b:b5:07:ae:37:b9:e9:c9: c7:71:fa:6c:9f:19:82:1d:2e:8e:72:d8:ce:37:a0: 15:85:2e:de:d8:74:a4:f8:b5:ce:0d:30:a3:a6:5d: 7a:65:ea:e9:93:65:2a:45:bf:55:f0:b1:08:b1:2e: 40:37:72:f3:cc:c4:84:83:36:af:85:bc:2b:a8:ae: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:E0:F7:46:BD:F5:7B:BD:A4:2D:5A:E6:3B:2F:10:C7:C4:1B:92 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cd:6d:17:4b:7e:c5:d9:bf:0d:80:d1:a9:1b:55:cd:58:ab: dc:e9:cc:44:24:27:02:8c:2a:36:ce:d7:12:cf:bb:fc:c7:be: bb:97:47:cd:91:be:f5:92:93:db:df:f7:87:bd:64:4a:8a:9e: fb:20:a6:8a:07:f9:b8:5e:01:21:54:ce:eb:82:4f:16:c0:89: fc:7d:f2:e1:93:9c:2e:06:81:1d:14:1b:1f:05:fe:98:c6:73: 05:0d:ca:28:c0:2f:e4:b3:9d:41:71:93:8f:c9:6b:68:06:fb: 36:18:bd:81:79:92:86:dc:e5:c4:12:e7:e6:44:3d:d7:8a:aa: 53:8f:89:7f:9c:46:78:2b:be:94:2c:fa:9f:d4:ee:16:d0:27: 11:ce:37:fd:a4:60:c0:32:1f:08:bd:d9:68:fb:e0:e3:63:84: 3c:4d:3b:8e:b7:c3:8e:32:75:4b:4a:51:42:6d:03:b5:cf:99: f8:78:87:b5:cb:09:db:c1:e3:c5:a5:01:93:56:d0:07:a8:6a: ae:a2:3a:19:6d:b0:22:28:b7:44:4d:fd:22:7b:e8:0a:cc:1d: e8:3a:ab:79:34:5e:96:63:38:9c:4d:80:e6:76:bc:3a:76:dd: fa:08:99:ca:f5:51:60:c2:0c:a0:90:80:e8:1a:cc:b6:39:59: 42:dd:d1:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwNDI1MDAwODU5WhcNMjUwNTAyMDAwODU5WjAYMRYwFAYD VQQDEw02ODBhZDI5Yi00ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c0+eTKV4Njfqg3cfpQgrdhpQscFGE8tjC5IDQU5icVREK5ejupv+0wjMqSs hbCUTU9XXMvHbUiCCQ2Z/DzrqRgOXrcGew1gJXwBVcpSYAMlsEJTyZc+RtQ1hRl4 BzYIq9rDUG/aZNeGDZuVEWd7EJjrd7f/Hb9BgOEaEpNLeIIo5sEGf0WHofaGHhK4 txeLHUDguohywaqRVZAgJXbP6YPc1aB/7FAJFzLYemk4osLHaATFm+5+xaV6m7UH rje56cnHcfpsnxmCHS6OctjON6AVhS7e2HSk+LXODTCjpl16Zerpk2UqRb9V8LEI sS5AN3LzzMSEgzavhbwrqK793wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4W4PdG vfV7vaQtWuY7LxDHxBuSMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbzW0XS37F2b8NgNGpG1XNWKvc6cxEJCcCjCo2ztcSz7v8x767l0fN kb71kpPb3/eHvWRKip77IKaKB/m4XgEhVM7rgk8WwIn8ffLhk5wuBoEdFBsfBf6Y xnMFDcoowC/ks51BcZOPyWtoBvs2GL2BeZKG3OXEEufmRD3XiqpTj4l/nEZ4K76U LPqf1O4W0CcRzjf9pGDAMh8Ivdlo++DjY4Q8TTuOt8OOMnVLSlFCbQO1z5n4eIe1 ywnbwePFpQGTVtAHqGquojoZbbAiKLdETf0ie+gKzB3oOqt5NF6WYzicTYDmdrw6 dt36CJnK9VFgwgygkIDoGsy2OVlC3dFT -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:51 2025 by rpki-client