$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: zp6mWNeKLZVasQ/nIufAQD6S306qzAV0WoqUueAA47w= Subject key identifier: E1:1C:11:94:9D:CE:AC:99:1A:38:A0:31:44:B8:03:FB:59:59:A8:51 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 064F Signing time: Thu 24 Apr 2025 22:17:46 +0000 Manifest this update: Thu 24 Apr 2025 22:17:46 +0000 Manifest next update: Thu 01 May 2025 22:17:46 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: OSt+N9f/uCisLERmsBHq4vz+nGGzBHcThmvHnMQKTBs=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: ZbglDjurwe6qJhjv9yc/alHsSUDwI/+N2E8sYgdY/Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Apr 24 22:17:46 2025 GMT Not After : May 1 22:17:46 2025 GMT Subject: CN=680ab88a-b191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:82:79:7e:0f:f4:9e:24:fa:fd:c0:5c:14: 75:1e:0a:1a:14:41:e5:8b:74:eb:6b:ab:7c:42:71: 20:97:3c:21:24:a9:6d:51:0f:0d:9c:e9:4c:f9:22: dd:ba:53:85:1f:6f:74:74:0a:14:c3:94:65:ed:90: 52:83:23:a4:de:25:d1:5d:b5:ed:1c:6b:5c:5a:6f: 8a:7a:b6:e9:1b:b6:52:cd:91:20:f0:7f:2f:aa:84: ae:f4:1d:80:25:36:0a:e9:6f:13:f6:f5:e4:d8:71: 7b:f5:2c:2e:c5:26:a1:25:cf:ed:03:31:65:0a:15: b8:4d:f1:e3:94:69:88:23:33:90:fd:a3:fa:c2:42: 01:31:20:c7:71:27:20:44:16:7b:cc:d7:09:97:3c: e3:53:0c:1c:ac:47:ab:47:0b:b2:67:a8:66:46:ba: 31:f1:1c:f8:76:16:f8:d7:a4:e0:eb:73:8e:3e:f5: 6e:6d:81:a9:63:fd:e4:49:5f:f3:2c:fd:54:1a:95: 68:1b:e3:58:20:3e:61:c5:ba:db:74:4a:76:41:61: 1d:a3:76:81:b8:95:d3:3e:65:9b:68:2d:14:11:0a: 0a:98:2c:5d:3b:78:68:07:fd:0d:26:6b:c7:78:f7: 50:42:c3:4f:12:61:eb:87:6d:f8:00:c0:6f:66:5d: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:11:94:9D:CE:AC:99:1A:38:A0:31:44:B8:03:FB:59:59:A8:51 X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4e:30:fd:d9:3e:95:9e:21:b7:e0:fe:a3:c8:24:e8:84:b9: 8e:ce:ca:50:2a:5d:f9:10:83:c5:31:47:f5:04:bd:d6:42:f1: ad:43:b9:53:49:6b:dd:3e:cb:a7:03:aa:77:94:c8:70:4f:a7: 10:5e:23:1f:ad:2f:5d:9b:48:22:6b:ab:f0:fd:9b:b7:a1:ec: ef:5e:f9:87:a2:c9:1f:b0:07:cc:5a:1f:b4:54:62:91:7c:bf: a3:ce:53:e8:22:b0:36:25:9f:c3:c9:36:91:f2:a9:f7:22:e9: f8:62:58:06:94:27:cf:48:52:be:c7:29:44:1b:b1:fb:97:9e: 71:30:64:c7:25:71:99:04:b4:ba:83:83:3c:20:d4:f6:23:b4: d0:17:8f:96:92:45:a5:de:3d:92:60:ad:0b:c0:92:d5:53:47: cc:86:99:d3:31:cd:69:87:06:b0:18:cc:20:e1:fa:78:da:b8: 71:58:9a:9f:f8:ea:34:6d:ef:ec:60:ff:85:19:ae:60:de:88: e6:03:78:7d:47:14:14:d6:5e:8d:a7:83:ac:e0:95:7e:eb:41: a4:d4:af:f2:66:a4:fe:bb:94:d1:b4:fc:12:d6:54:9f:2b:72: e5:ba:4d:4f:2a:05:f9:bc:97:cb:62:ab:5d:bf:47:0d:3c:a5: 2e:63:56:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjUwNDI0MjIxNzQ2WhcNMjUwNTAxMjIxNzQ2WjAYMRYwFAYD VQQDEw02ODBhYjg4YS1iMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn72CeX4P9J4k+v3AXBR1HgoaFEHli3Tra6t8QnEglzwhJKltUQ8NnOlM+SLd ulOFH290dAoUw5Rl7ZBSgyOk3iXRXbXtHGtcWm+KerbpG7ZSzZEg8H8vqoSu9B2A JTYK6W8T9vXk2HF79SwuxSahJc/tAzFlChW4TfHjlGmIIzOQ/aP6wkIBMSDHcScg RBZ7zNcJlzzjUwwcrEerRwuyZ6hmRrox8Rz4dhb416Tg63OOPvVubYGpY/3kSV/z LP1UGpVoG+NYID5hxbrbdEp2QWEdo3aBuJXTPmWbaC0UEQoKmCxdO3hoB/0NJmvH ePdQQsNPEmHrh234AMBvZl2jGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEcEZSd zqyZGjigMUS4A/tZWahRMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8TjD92T6VniG34P6jyCTohLmOzspQKl35EIPFMUf1BL3WQvGtQ7lT SWvdPsunA6p3lMhwT6cQXiMfrS9dm0gia6vw/Zu3oezvXvmHoskfsAfMWh+0VGKR fL+jzlPoIrA2JZ/DyTaR8qn3Iun4YlgGlCfPSFK+xylEG7H7l55xMGTHJXGZBLS6 g4M8INT2I7TQF4+WkkWl3j2SYK0LwJLVU0fMhpnTMc1phwawGMwg4fp42rhxWJqf +Oo0be/sYP+FGa5g3ojmA3h9RxQU1l6Np4Os4JV+60Gk1K/yZqT+u5TRtPwS1lSf K3Lluk1PKgX5vJfLYqtdv0cNPKUuY1au -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:10 2025 by rpki-client