$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json) Hash identifier: Pj9Z/3p6wYjZT247p07iA9EPSWnQA/TFIPTuj7m6gDQ= Subject key identifier: C4:93:E2:ED:CF:9D:F5:8D:FC:95:FF:30:2B:DC:B1:75:0A:20:6F:C3 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 1348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft Manifest number: 131F Signing time: Thu 24 Apr 2025 17:03:30 +0000 Manifest this update: Thu 24 Apr 2025 17:03:30 +0000 Manifest next update: Thu 01 May 2025 17:03:30 +0000 Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: edN/XdGsW7ilvZls6Esr4XZOAORkRieCNAUWnBZy8jo=) 2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=) 3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=) 4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=) 5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4936 (0x1348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Apr 24 17:03:30 2025 GMT Not After : May 1 17:03:30 2025 GMT Subject: CN=680a6ee2-2ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:64:af:a4:39:88:58:f5:b9:96:b3:28:5b: 74:65:a1:2b:b2:a8:64:1a:ce:55:6e:11:da:95:44: 43:a5:50:79:9e:04:25:44:8a:da:0f:5f:c1:08:76: 5b:77:ed:97:37:95:bc:d9:1e:a0:69:d9:a2:0c:42: 9a:1f:58:3d:bd:65:9b:de:a3:87:a5:0a:f1:c1:57: 77:f9:74:53:17:c7:58:e4:25:e5:83:b5:36:bd:a5: e3:b0:33:ba:57:28:60:13:e6:fc:17:cb:c0:92:3f: 32:bd:df:76:ed:3d:fc:ff:f6:19:56:82:e8:58:d6: 30:22:7e:a2:6a:bf:c8:af:0e:7c:cd:10:f1:9c:63: 5d:1b:6f:1c:66:a8:ce:47:a2:d6:40:79:05:f3:a9: 34:13:2f:1b:03:9a:2e:72:78:71:9f:5a:71:af:0e: fc:7d:81:d9:5c:95:72:7b:a8:2c:74:d0:e2:a0:6a: b3:f0:fd:18:bb:b1:94:06:ea:dd:fd:ab:a1:c2:61: 0a:36:dd:9e:ee:29:9d:66:d3:e6:45:4f:22:d5:1e: 1a:66:14:b4:45:b0:31:b1:9f:f9:d9:0d:85:0a:0e: 70:1d:ca:f8:f5:4f:66:91:bf:0d:4e:39:8d:15:69: fc:2a:50:3d:bd:f6:ff:00:24:7b:5c:d8:c6:43:ae: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:93:E2:ED:CF:9D:F5:8D:FC:95:FF:30:2B:DC:B1:75:0A:20:6F:C3 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6d:4f:18:53:31:34:01:f2:50:50:c5:a8:58:24:9d:dc:e4: 78:9b:10:01:48:cf:5d:c7:82:a6:7e:41:94:34:07:4f:5c:b6: ca:b1:0c:38:f8:03:3d:2a:8a:0e:63:02:16:16:4c:60:bb:12: fd:ae:cf:64:2f:2a:5b:39:49:97:b8:d0:70:8b:fa:5c:18:10: 51:53:ad:aa:d9:0b:3e:c9:79:ea:6e:b7:ab:07:74:b0:13:90: f4:03:0c:0e:79:51:99:9f:aa:83:e9:6f:92:e5:03:51:ef:cc: 71:18:81:a5:8b:ca:39:cf:31:87:dd:b6:a3:d1:f4:4f:88:b7: 21:be:24:8c:bd:20:e5:cb:30:43:83:b4:01:a7:38:ce:98:40: 39:73:15:4f:62:f5:b2:35:65:0f:87:88:13:9f:2d:94:f7:b5: d1:29:6b:be:59:f9:e6:3f:2c:26:68:40:51:bf:a8:1a:2e:e2: dd:86:0f:b8:6d:e2:5e:b3:e0:0e:63:63:d9:8f:26:9f:ce:fb: bf:57:43:f0:83:70:7b:c4:ac:e8:b3:b7:49:dd:00:e7:a4:1f: 3b:fe:d4:c2:88:02:8d:2e:34:82:48:42:67:04:ea:8e:0f:6d: b3:1b:95:7b:38:16:4f:58:6f:71:9f:10:a6:56:60:31:28:78: 8f:ce:09:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjUwNDI0MTcwMzMwWhcNMjUwNTAxMTcwMzMwWjAYMRYwFAYD VQQDEw02ODBhNmVlMi0yZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uBkr6Q5iFj1uZazKFt0ZaErsqhkGs5VbhHalURDpVB5ngQlRIraD1/BCHZb d+2XN5W82R6gadmiDEKaH1g9vWWb3qOHpQrxwVd3+XRTF8dY5CXlg7U2vaXjsDO6 VyhgE+b8F8vAkj8yvd927T38//YZVoLoWNYwIn6iar/Irw58zRDxnGNdG28cZqjO R6LWQHkF86k0Ey8bA5oucnhxn1pxrw78fYHZXJVye6gsdNDioGqz8P0Yu7GUBurd /auhwmEKNt2e7imdZtPmRU8i1R4aZhS0RbAxsZ/52Q2FCg5wHcr49U9mkb8NTjmN FWn8KlA9vfb/ACR7XNjGQ65LRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMST4u3P nfWN/JX/MCvcsXUKIG/DMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQbU8YUzE0AfJQUMWoWCSd3OR4mxABSM9dx4KmfkGUNAdPXLbKsQw4 +AM9KooOYwIWFkxguxL9rs9kLypbOUmXuNBwi/pcGBBRU62q2Qs+yXnqbrerB3Sw E5D0AwwOeVGZn6qD6W+S5QNR78xxGIGli8o5zzGH3baj0fRPiLchviSMvSDlyzBD g7QBpzjOmEA5cxVPYvWyNWUPh4gTny2U97XRKWu+WfnmPywmaEBRv6gaLuLdhg+4 beJes+AOY2PZjyafzvu/V0Pwg3B7xKzos7dJ3QDnpB87/tTCiAKNLjSCSEJnBOqO D22zG5V7OBZPWG9xnxCmVmAxKHiPzgkG -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:42 2025 by rpki-client