$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: 3fvb2FBe4AhW05GHD1WBdLHM2juiCeZN0bgs6fc/lBc= Subject key identifier: 2E:4F:03:C2:27:EF:50:D3:9B:05:F8:6C:65:C5:1F:28:9C:A8:85:8B Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 0780 Signing time: Thu 24 Apr 2025 21:13:19 +0000 Manifest this update: Thu 24 Apr 2025 21:13:18 +0000 Manifest next update: Thu 01 May 2025 21:13:18 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: XfjpYmgaHe1aUZWx4j0MBO+w/YxcPTc4scuqBKGKmz0=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Apr 24 21:13:18 2025 GMT Not After : May 1 21:13:18 2025 GMT Subject: CN=680aa96e-9c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:7e:12:0b:76:8f:4c:47:f5:2c:09:3a:d2: 02:a9:8e:12:c1:d5:f8:77:ec:1a:03:35:80:82:4f: d7:5e:89:27:29:c1:4b:3c:66:21:02:19:0a:a9:0c: 0c:c2:63:33:af:07:35:4c:ab:33:28:60:e9:50:56: ec:23:2e:bd:fc:c5:cc:2b:d8:64:49:44:35:b2:d1: 88:07:8b:7f:51:dc:47:e1:a6:15:2e:ad:c3:ea:3d: 94:e8:cf:a4:09:b2:b7:2f:d2:ab:41:1d:d4:39:29: d2:49:6e:3e:b0:fe:c2:a6:ee:92:e5:76:41:54:fc: 27:da:83:8a:bf:a7:fd:c5:48:df:6d:70:22:42:16: 10:c9:43:66:f3:78:32:da:bf:a9:30:d0:07:8f:a0: c0:3c:b7:2f:9f:64:db:55:23:5f:c6:db:44:97:9b: dd:b9:72:20:1a:05:57:68:fb:41:c7:43:f5:bf:ab: b6:d2:8e:ec:94:f6:c6:d0:d8:96:04:a6:71:81:b0: b3:82:77:ed:1a:90:be:55:96:fd:c6:7e:35:5a:46: 9d:f1:ad:d8:b6:18:87:d6:33:f4:6b:ff:e2:89:ed: d3:ec:be:d1:fb:7a:d8:7e:b3:75:d2:8e:66:a8:f3: dc:a8:34:de:2f:2a:30:78:39:05:9e:53:84:15:38: f8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:03:C2:27:EF:50:D3:9B:05:F8:6C:65:C5:1F:28:9C:A8:85:8B X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:96:66:8f:f9:06:5a:cf:09:e7:4d:fd:36:f0:20:cc:04: 6d:b7:1e:c4:74:66:ce:83:a7:4d:03:66:7b:f8:53:c5:22:e7: b9:2d:64:14:5f:70:b5:c0:46:ad:b3:2b:ae:55:f7:7e:b8:90: 0f:cc:5d:35:d2:f5:c3:98:b9:fd:45:c4:06:68:df:d6:68:7b: d6:4e:bb:fb:af:84:05:68:12:db:c6:38:9a:d3:f5:93:5d:bb: 6a:75:ad:bb:e9:46:f4:06:94:f3:3f:72:6b:87:20:02:74:f0: ac:7d:c2:e2:fc:b4:1b:81:24:d5:66:0e:38:df:c8:a6:17:2f: 36:c9:75:17:d9:c3:13:12:17:cc:a7:16:6e:6d:37:b9:11:8e: b9:a8:14:93:76:65:a6:de:20:de:6d:22:08:7a:23:db:c6:64: 2b:d4:1d:75:2d:67:94:db:2a:f6:a5:16:4c:fb:72:4b:b5:6f: 7c:a0:f6:bc:2f:c8:0a:2c:e1:88:58:e4:49:45:3c:18:ee:9d: 67:16:b1:64:f1:ea:41:05:4b:08:6e:47:42:75:52:77:ae:6a: da:8e:cf:7a:93:a7:ff:01:43:3b:1b:9e:48:76:dc:d3:21:ae: d9:1c:d8:c7:a2:de:7a:88:b1:85:b4:e2:a5:96:00:a4:82:e2: 5f:d0:d6:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUwNDI0MjExMzE4WhcNMjUwNTAxMjExMzE4WjAYMRYwFAYD VQQDEw02ODBhYTk2ZS05YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzJ+Egt2j0xH9SwJOtICqY4SwdX4d+waAzWAgk/XXoknKcFLPGYhAhkKqQwM wmMzrwc1TKszKGDpUFbsIy69/MXMK9hkSUQ1stGIB4t/UdxH4aYVLq3D6j2U6M+k CbK3L9KrQR3UOSnSSW4+sP7Cpu6S5XZBVPwn2oOKv6f9xUjfbXAiQhYQyUNm83gy 2r+pMNAHj6DAPLcvn2TbVSNfxttEl5vduXIgGgVXaPtBx0P1v6u20o7slPbG0NiW BKZxgbCzgnftGpC+VZb9xn41Wkad8a3YthiH1jP0a//iie3T7L7R+3rYfrN10o5m qPPcqDTeLyoweDkFnlOEFTj4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5PA8In 71DTmwX4bGXFHyicqIWLMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA86pZmj/kGWs8J5039NvAgzARttx7EdGbOg6dNA2Z7+FPFIue5LWQU X3C1wEatsyuuVfd+uJAPzF010vXDmLn9RcQGaN/WaHvWTrv7r4QFaBLbxjia0/WT Xbtqda276Ub0BpTzP3JrhyACdPCsfcLi/LQbgSTVZg4438imFy82yXUX2cMTEhfM pxZubTe5EY65qBSTdmWm3iDebSIIeiPbxmQr1B11LWeU2yr2pRZM+3JLtW98oPa8 L8gKLOGIWORJRTwY7p1nFrFk8epBBUsIbkdCdVJ3rmrajs96k6f/AUM7G55IdtzT Ia7ZHNjHot56iLGFtOKllgCkguJf0Na5 -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:35 2025 by rpki-client