$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json) Hash identifier: Wfc8RCKrsS4Ww8N/Iyu9Mm0FNq/B1mkqKkn755VooXQ= Subject key identifier: 12:F7:13:8B:03:AA:B6:60:5B:B1:C2:B0:CD:EF:43:33:C3:FB:FA:FA Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D Certificate issuer: /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft Manifest number: ED Signing time: Fri 25 Apr 2025 03:34:33 +0000 Manifest this update: Fri 25 Apr 2025 03:34:32 +0000 Manifest next update: Fri 02 May 2025 03:34:32 +0000 Files and hashes: 1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: QGznic/lySKcEkHouZa+wtki3ipNkG5XZnzlob5pSv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Validity Not Before: Apr 25 03:34:32 2025 GMT Not After : May 2 03:34:32 2025 GMT Subject: CN=680b02c8-1d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6e:12:60:37:ed:c8:02:5e:66:93:93:49:3a: 55:63:2f:4f:db:dc:a0:93:94:13:48:44:51:5a:53: 8e:66:ac:66:2a:93:3e:ec:dc:3a:69:49:3d:32:75: aa:56:6b:1c:cb:02:3e:18:c4:a1:b9:f1:5a:d1:f6: 74:da:20:c7:66:33:f3:55:6d:6a:90:65:65:88:e5: 95:b6:8a:29:1d:02:a4:16:9f:c2:a6:cc:1f:26:a5: 19:2d:fb:73:df:dd:8e:3a:37:a8:d4:5b:ce:c1:eb: a9:05:43:be:3f:30:63:5d:29:79:a2:d6:57:97:30: e7:c3:67:5d:c4:f7:59:19:0a:73:3d:d6:51:18:27: 8d:de:7d:35:46:8b:cc:67:9d:b0:22:60:ac:70:bf: d5:78:3c:7a:a0:73:95:4e:43:5d:ee:0f:1f:6e:1d: 12:f5:aa:21:62:68:96:07:f2:c9:57:67:d4:55:7f: 27:79:3d:af:e2:8b:db:56:b1:29:d9:61:a6:61:74: 09:1c:1c:be:85:53:a2:98:6d:e6:f3:e9:ce:b5:f6: 5c:b9:31:32:0e:6c:6e:30:aa:fb:56:b7:9a:75:9d: e0:19:ca:d1:de:2b:56:33:45:18:07:8f:f2:7d:70: 5e:97:e3:69:66:81:aa:05:d0:47:07:6e:1d:2c:62: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:13:8B:03:AA:B6:60:5B:B1:C2:B0:CD:EF:43:33:C3:FB:FA:FA X509v3 Authority Key Identifier: keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a1:eb:52:fb:ef:fb:47:3e:55:a0:e2:b2:20:24:be:c4:87: 8b:b7:40:0f:d5:ad:07:9b:9e:b4:9d:a9:53:1d:9b:3c:90:35: 80:f8:97:04:f6:e2:15:20:e3:1a:e7:32:68:ce:c5:65:43:d6: 19:64:66:d3:7a:eb:79:3b:01:6c:57:e2:1e:b5:0a:4e:6f:a0: 82:f8:79:84:6b:84:69:1f:42:a3:35:e4:d5:0c:f5:a1:4d:fc: 6a:31:40:48:04:ed:d0:49:0e:27:02:40:bc:cb:9d:9c:99:10: e6:ab:48:cc:2b:93:87:25:ce:d4:20:34:3f:bb:58:6f:6c:d8: 7d:b4:5b:1b:75:68:73:b8:09:81:b0:9c:c9:3b:d7:90:ac:b1: dd:c2:59:64:a1:2c:9f:6f:c0:d8:cf:8d:7b:c6:83:6b:47:e8: f0:c2:3f:fa:38:b4:6f:dd:a5:8e:48:81:a5:35:4a:97:5f:51: 8e:c6:10:bb:76:1b:2a:7d:b3:0c:4b:77:42:06:33:2b:12:5b: 64:7e:30:a5:49:91:bb:23:c8:a8:84:2c:35:94:5a:12:70:21: 96:25:9a:e7:ce:b7:e9:44:3d:7c:f0:69:cb:69:b7:52:08:a0: 15:8c:2a:e2:04:00:4c:89:87:41:5e:3b:7a:d0:95:75:64:4d: 8c:70:33:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDE0RTU1RUMzNDI4RTNEMkJBNERDNzFDMTU5RTVGNjA2 MUYxNjNDNkQwHhcNMjUwNDI1MDMzNDMyWhcNMjUwNTAyMDMzNDMyWjAYMRYwFAYD VQQDEw02ODBiMDJjOC0xZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+W4SYDftyAJeZpOTSTpVYy9P29ygk5QTSERRWlOOZqxmKpM+7Nw6aUk9MnWq VmscywI+GMShufFa0fZ02iDHZjPzVW1qkGVliOWVtoopHQKkFp/CpswfJqUZLftz 392OOjeo1FvOweupBUO+PzBjXSl5otZXlzDnw2ddxPdZGQpzPdZRGCeN3n01RovM Z52wImCscL/VeDx6oHOVTkNd7g8fbh0S9aohYmiWB/LJV2fUVX8neT2v4ovbVrEp 2WGmYXQJHBy+hVOimG3m8+nOtfZcuTEyDmxuMKr7VreadZ3gGcrR3itWM0UYB4/y fXBel+NpZoGqBdBHB24dLGJUEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBL3E4sD qrZgW7HCsM3vQzPD+/r6MB8GA1UdIwQYMBaAFBTlXsNCjj0rpNxxwVnl9gYfFjxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8zQUU3MzlBRUI5 N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BTdWszSEhCV2VYMkJoOFdQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZPVmV3MEtPUFN1azNISEJXZVgyQmg4V1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8zQUU3MzlBRUI5N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BT dWszSEhCV2VYMkJoOFdQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZoetS++/7Rz5VoOKyICS+xIeLt0AP1a0Hm560nalTHZs8kDWA+JcE 9uIVIOMa5zJozsVlQ9YZZGbTeut5OwFsV+IetQpOb6CC+HmEa4RpH0KjNeTVDPWh TfxqMUBIBO3QSQ4nAkC8y52cmRDmq0jMK5OHJc7UIDQ/u1hvbNh9tFsbdWhzuAmB sJzJO9eQrLHdwllkoSyfb8DYz417xoNrR+jwwj/6OLRv3aWOSIGlNUqXX1GOxhC7 dhsqfbMMS3dCBjMrEltkfjClSZG7I8iohCw1lFoScCGWJZrnzrfpRD188GnLabdS CKAVjCriBABMiYdBXjt60JV1ZE2McDO+ -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:34 2025 by rpki-client