$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft File: FvdX-Fv0x3-S-se_sL34aE8QKrE.mft (raw, json) Hash identifier: 8LGfGnSQb2WD8GrsAcYlxecIbb38lCbzpJhZgGU/arE= Subject key identifier: 66:E6:B4:01:60:2E:9F:0F:4E:70:8D:08:88:3B:45:90:5D:5C:E2:0F Authority key identifier: 16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1 Certificate issuer: /CN=A9172999/serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft Manifest number: BE Signing time: Fri 25 Apr 2025 01:22:48 +0000 Manifest this update: Fri 25 Apr 2025 01:22:48 +0000 Manifest next update: Fri 02 May 2025 01:22:48 +0000 Files and hashes: 1: FvdX-Fv0x3-S-se_sL34aE8QKrE.crl (hash: Zn/wjZ5uRh8ojOlL55M/ik5vVdGKk7FfiAdpvwUHVSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=16F757F85BF4C77F92FAC7BFB0BDF8684F102AB1 Validity Not Before: Apr 25 01:22:48 2025 GMT Not After : May 2 01:22:48 2025 GMT Subject: CN=680ae3e8-10fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:80:cd:c8:18:3f:bd:d3:c9:3f:b4:bf:05: 10:c7:04:40:eb:dd:ad:f4:d7:2c:fa:4f:08:26:44: 26:57:9a:72:97:ae:f7:62:1c:1d:d8:55:74:87:ea: d3:eb:66:1f:18:21:31:8b:11:62:8f:22:0e:0b:44: 68:0d:bb:90:be:78:ab:a4:f5:db:77:d6:f2:b0:f0: 3f:e8:17:8e:3e:bf:76:f6:55:40:d4:00:cb:0c:2b: 50:8f:1d:41:09:e7:aa:f0:26:33:4e:d7:05:92:c1: dd:59:99:ee:59:1a:51:a9:1a:fa:72:88:25:e7:49: 8d:36:45:c3:13:30:ee:75:a3:9b:e8:b8:a8:75:1f: 91:d6:05:e9:c6:bb:cf:35:8a:59:c2:8c:a9:2c:1b: 92:70:56:c8:22:93:c9:a9:b1:09:25:3b:90:63:c8: 20:86:aa:20:a3:7d:a8:00:96:7d:3d:b7:ae:b9:d6: ea:b1:8d:24:d5:05:67:29:27:a5:e2:64:a7:fe:01: f9:9d:3d:87:a8:23:c2:6e:6b:bb:dd:f7:cf:c7:34: ba:48:72:7e:73:54:64:4a:fc:27:9a:b8:bd:5f:07: a5:16:49:3c:61:d8:4d:f7:05:16:81:81:ac:c8:52: 5f:db:24:e4:ba:a6:b4:72:e0:16:9b:a3:dc:6a:4f: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E6:B4:01:60:2E:9F:0F:4E:70:8D:08:88:3B:45:90:5D:5C:E2:0F X509v3 Authority Key Identifier: keyid:16:F7:57:F8:5B:F4:C7:7F:92:FA:C7:BF:B0:BD:F8:68:4F:10:2A:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FvdX-Fv0x3-S-se_sL34aE8QKrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/D0700E64FE0311EE998E0C49C4F9AE02/FvdX-Fv0x3-S-se_sL34aE8QKrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6a:57:ff:fc:05:48:49:8e:bc:6c:dd:b4:9d:9d:84:bc:f0: 7f:ba:75:7c:8f:5b:62:c9:1b:c0:a5:b6:10:89:a8:54:e3:ad: b7:25:ea:95:d3:3d:cb:67:33:b9:7d:b8:55:9c:49:96:a0:6c: c4:fa:9d:29:e8:3e:f9:52:6a:7d:53:73:74:79:32:0b:9f:49: 89:49:5a:74:28:f8:e1:38:58:b0:c4:9e:60:e0:7c:7a:bb:d1: f5:0c:76:c8:cb:66:31:f3:48:6a:2d:94:2a:80:a5:92:11:72: d1:03:34:fb:3e:33:32:44:3f:a2:a1:40:32:47:6e:1f:a3:03: ec:eb:b6:0d:13:42:d6:cc:5a:84:ec:c3:fb:61:d6:e5:09:3d: 42:10:2e:85:64:86:aa:4f:3b:10:d9:41:22:b8:79:05:d3:2b: 00:ef:72:ff:8f:5f:6b:12:ca:dc:2b:86:1b:92:f6:19:c8:2f: 2c:20:59:8b:f8:b7:ab:be:f4:bd:65:24:83:d4:58:35:2a:d7: 68:30:04:c8:ac:e9:34:72:a8:00:2e:ba:b5:bb:5a:d1:ba:fd: a9:ff:9f:56:f1:da:d7:24:f0:3c:3f:73:9f:08:52:fd:7e:1c: 65:68:0a:ff:93:ca:18:56:5b:b6:24:9d:c6:5a:3d:f0:b3:49: 18:df:f2:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDE2Rjc1N0Y4NUJGNEM3N0Y5MkZBQzdCRkIwQkRGODY4 NEYxMDJBQjEwHhcNMjUwNDI1MDEyMjQ4WhcNMjUwNTAyMDEyMjQ4WjAYMRYwFAYD VQQDEw02ODBhZTNlOC0xMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JaAzcgYP73TyT+0vwUQxwRA692t9Ncs+k8IJkQmV5pyl673Yhwd2FV0h+rT 62YfGCExixFijyIOC0RoDbuQvnirpPXbd9bysPA/6BeOPr929lVA1ADLDCtQjx1B Ceeq8CYzTtcFksHdWZnuWRpRqRr6cogl50mNNkXDEzDudaOb6LiodR+R1gXpxrvP NYpZwoypLBuScFbIIpPJqbEJJTuQY8gghqogo32oAJZ9PbeuudbqsY0k1QVnKSel 4mSn/gH5nT2HqCPCbmu73ffPxzS6SHJ+c1RkSvwnmri9XwelFkk8YdhN9wUWgYGs yFJf2yTkuqa0cuAWm6Pcak8LwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbmtAFg Lp8PTnCNCIg7RZBdXOIPMB8GA1UdIwQYMBaAFBb3V/hb9Md/kvrHv7C9+GhPECqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9EMDcwMEU2NEZF MDMxMUVFOTk4RTBDNDlDNEY5QUUwMi9GdmRYLUZ2MHgzLVMtc2Vfc0wzNGFFOFFL ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z2ZFgtRnYweDMtUy1zZV9zTDM0YUU4UUtyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9EMDcwMEU2NEZFMDMxMUVFOTk4RTBDNDlDNEY5QUUwMi9GdmRYLUZ2MHgz LVMtc2Vfc0wzNGFFOFFLckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaalf//AVISY68bN20nZ2EvPB/unV8j1tiyRvApbYQiahU4623JeqV 0z3LZzO5fbhVnEmWoGzE+p0p6D75Ump9U3N0eTILn0mJSVp0KPjhOFiwxJ5g4Hx6 u9H1DHbIy2Yx80hqLZQqgKWSEXLRAzT7PjMyRD+ioUAyR24fowPs67YNE0LWzFqE 7MP7YdblCT1CEC6FZIaqTzsQ2UEiuHkF0ysA73L/j19rEsrcK4YbkvYZyC8sIFmL +LervvS9ZSSD1Fg1KtdoMATIrOk0cqgALrq1u1rRuv2p/59W8drXJPA8P3OfCFL9 fhxlaAr/k8oYVlu2JJ3GWj3ws0kY3/Lf -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:17 2025 by rpki-client