$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: 3OW1Xx6fm3OynkDpul5fdU1FW5m2QPhn7JoimKV2mug= Subject key identifier: D1:BA:FC:B5:EF:63:19:E5:3A:29:29:A8:7C:85:95:5D:36:E1:AF:D4 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 028F Signing time: Fri 25 Apr 2025 01:27:57 +0000 Manifest this update: Fri 25 Apr 2025 01:27:57 +0000 Manifest next update: Fri 02 May 2025 01:27:57 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: XWpvwM3KFRXZPgLCwoZN+Inc8q12uXqvLqixp5YcnSI=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: DeTJWRmDeKmiEdEbaqf7bVSh2DO8AXjNSQova+ZvrBU=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Apr 25 01:27:57 2025 GMT Not After : May 2 01:27:57 2025 GMT Subject: CN=680ae51d-d7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:de:4a:80:c9:c5:13:b1:3a:53:a7:f7:cd: 5e:af:36:2f:44:78:3d:a5:a2:2f:9d:2e:1f:36:e6: f6:f8:9d:5d:a3:42:77:a6:00:ed:0e:ed:16:c5:fd: 13:2d:59:2d:9c:99:d1:61:9c:bd:4d:9c:62:ea:74: f7:28:77:bb:b7:5c:72:21:c3:3a:56:b8:34:30:54: e5:71:e1:54:31:f9:84:35:ec:88:39:f0:28:8c:8e: 33:d7:99:12:53:6d:95:f3:d3:7a:0c:19:10:8e:ff: 6d:e4:05:0c:4a:aa:23:52:5d:e6:ec:c0:0d:7a:58: c8:4b:5f:a4:ed:ec:e4:5e:a4:84:a8:7b:23:7d:8a: 90:2b:8b:5f:6d:77:2b:f7:53:20:71:2a:0f:b2:d1: 62:a2:29:b2:02:2d:2a:50:16:96:1a:04:29:26:00: 6b:fe:3f:74:2a:96:71:5f:b4:c4:11:24:8b:6f:ab: 72:38:b7:df:f8:01:86:48:d7:9d:81:e5:1a:f9:33: 4b:41:04:82:28:55:86:49:b3:c0:d3:d0:9c:08:25: af:44:2c:4f:17:9e:3a:60:f8:f1:70:99:e4:da:c7: a8:8b:f1:47:c7:de:24:31:39:45:64:3f:bf:8f:63: 89:15:80:b9:a8:86:9e:bc:f4:30:3c:87:41:d4:b1: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BA:FC:B5:EF:63:19:E5:3A:29:29:A8:7C:85:95:5D:36:E1:AF:D4 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:59:fe:fe:76:7e:6a:96:1a:8b:08:b7:6a:69:45:81:1a: 1a:6f:94:3b:d0:da:e7:ff:e4:9c:0b:52:70:36:cd:ef:f6:82: 52:ab:bc:a2:a3:36:fd:fe:ce:bc:09:c3:0c:45:62:ca:9b:73: 7b:1d:ca:65:b7:e8:41:12:c8:0a:96:4c:56:ba:54:a0:5c:57: f2:ef:66:6a:03:4d:06:9e:2c:ab:1c:81:2a:9d:93:94:60:18: e4:b1:e6:f8:6d:06:f2:82:9e:87:69:c0:fd:6b:9a:f6:0f:62: cf:32:c7:9e:76:ac:e3:3c:aa:d2:bd:f4:c5:d4:88:b6:63:68: bd:95:f3:2f:d0:68:5d:44:be:a0:80:69:a4:d4:b8:ec:5b:b0: e3:eb:9c:c0:9f:f8:e7:11:05:95:93:c7:c3:a9:53:94:6d:ca: 16:fe:71:5b:a3:16:3e:d4:ae:e0:18:59:0b:4c:1c:7b:bc:5f: f9:0e:2a:88:50:a9:bd:cd:a4:a9:69:88:39:e7:38:d8:3c:fe: 97:d9:d0:b1:ed:ec:df:65:69:aa:e2:04:95:e8:22:ce:42:90: 39:62:f1:1d:ec:8a:7a:23:1f:12:4d:01:9a:09:2d:62:b9:97: 96:ea:96:cf:67:31:7d:f5:38:e0:13:e9:5e:41:a7:5f:1c:3f: 01:a7:e1:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwNDI1MDEyNzU3WhcNMjUwNTAyMDEyNzU3WjAYMRYwFAYD VQQDEw02ODBhZTUxZC1kN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5D/eSoDJxROxOlOn981erzYvRHg9paIvnS4fNub2+J1do0J3pgDtDu0Wxf0T LVktnJnRYZy9TZxi6nT3KHe7t1xyIcM6Vrg0MFTlceFUMfmENeyIOfAojI4z15kS U22V89N6DBkQjv9t5AUMSqojUl3m7MANeljIS1+k7ezkXqSEqHsjfYqQK4tfbXcr 91MgcSoPstFioimyAi0qUBaWGgQpJgBr/j90KpZxX7TEESSLb6tyOLff+AGGSNed geUa+TNLQQSCKFWGSbPA09CcCCWvRCxPF546YPjxcJnk2seoi/FHx94kMTlFZD+/ j2OJFYC5qIaevPQwPIdB1LHNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG6/LXv YxnlOikpqHyFlV024a/UMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv6ln+/nZ+apYaiwi3amlFgRoab5Q70Nrn/+ScC1JwNs3v9oJSq7yi ozb9/s68CcMMRWLKm3N7Hcplt+hBEsgKlkxWulSgXFfy72ZqA00GniyrHIEqnZOU YBjkseb4bQbygp6HacD9a5r2D2LPMseedqzjPKrSvfTF1Ii2Y2i9lfMv0GhdRL6g gGmk1LjsW7Dj65zAn/jnEQWVk8fDqVOUbcoW/nFboxY+1K7gGFkLTBx7vF/5DiqI UKm9zaSpaYg55zjYPP6X2dCx7ezfZWmq4gSV6CLOQpA5YvEd7Ip6Ix8STQGaCS1i uZeW6pbPZzF99TjgE+leQadfHD8Bp+HF -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:59 2025 by rpki-client