$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: p3zZz7hn+qG+DGL4tYof0gtSJpCV8Sh7ItcesMUVRVg= Subject key identifier: EF:F6:A2:3B:BB:1E:79:08:B8:0B:0B:E9:BC:3B:23:16:47:08:5B:7C Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1BFB Signing time: Thu 24 Apr 2025 16:16:13 +0000 Manifest this update: Thu 24 Apr 2025 16:16:13 +0000 Manifest next update: Thu 01 May 2025 16:16:13 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: NAnnqUaf9S6gaJRLR2WCpw7wtWqZV/UZaEpBXLbaAPE=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: VAwS5Uo7Cqi7lzXCRRZhfVVXN11Han/DThkDiW77C6s=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 5LMPCnmgpvXAYsKyuhBhkB3oiO6C+fnzS1hbGMCTiQQ=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Lee0UxrUp18WPeigcCSZbHFswfN4jnUwW80ZCAROV3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7244 (0x1c4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Apr 24 16:16:13 2025 GMT Not After : May 1 16:16:13 2025 GMT Subject: CN=680a63cd-0831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:0d:69:4d:f2:9e:4f:58:04:20:6d:5e:d6: 57:c8:68:ff:ab:51:b8:ec:fb:ba:40:6c:09:fd:34: b2:b8:5d:77:82:52:5c:13:37:cd:e0:0d:54:1e:50: 29:7b:d8:cd:b3:33:74:66:46:0b:3b:ed:b6:ff:fd: a2:4e:83:19:60:a5:03:40:d4:94:85:53:0a:a1:e6: 1d:71:67:25:cb:bc:47:40:5c:22:af:2f:b9:e9:b5: 5b:a3:be:1b:ed:c0:fc:ad:f2:8e:6b:d7:65:af:8a: 30:89:a6:d9:98:81:54:3a:63:a0:da:0a:31:5d:42: 0e:03:35:1f:62:e5:79:07:80:cb:38:17:9c:52:59: 6d:3a:2f:c3:fc:7e:50:12:7b:82:79:7e:1a:68:a9: 05:2f:34:cd:08:24:67:d3:d7:3a:b2:cd:84:5c:3c: 15:3e:67:1a:d4:40:36:23:1e:9a:f8:9b:ef:ca:62: f6:db:20:b1:10:8f:f5:45:97:ef:72:db:52:4b:88: f5:1f:a1:2e:41:4c:20:bd:04:be:af:d7:72:46:66: 23:4f:cb:e6:e5:24:a7:ae:ad:08:4e:6a:c9:83:a3: 9d:ee:1f:a1:72:af:e3:c8:f6:fb:23:0b:02:d3:83: 20:a2:67:5f:da:cd:f5:7e:43:f9:d8:6d:eb:62:5c: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F6:A2:3B:BB:1E:79:08:B8:0B:0B:E9:BC:3B:23:16:47:08:5B:7C X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d3:0a:ba:0e:e1:6f:e5:15:6f:d5:51:2c:0e:1b:ce:62:e1: 6b:1c:f5:0a:1e:3e:8a:35:f3:33:3d:22:35:cc:9c:69:8a:b8: 0a:11:b7:27:e2:a4:ad:e7:6b:d3:f9:8b:a9:56:ff:9a:c7:d0: a3:4c:c8:2e:9d:b4:7d:5b:45:76:1b:4d:8f:12:3b:c4:e4:1b: c2:5e:6b:32:75:99:81:d1:6f:85:11:ed:c3:74:f7:34:3a:7f: 86:7e:e0:82:5a:ee:77:34:03:6f:35:a2:9e:38:6e:f5:3e:ce: 98:80:4d:25:f9:70:c8:1f:e7:e5:07:2e:a6:42:dc:48:f1:65: 04:17:f7:f2:ef:fa:47:d0:6e:7a:28:ac:92:a6:90:21:89:1b: e1:33:93:b4:94:89:09:d6:1b:43:b1:9b:7a:81:98:d8:36:bf: ac:a2:46:2d:6c:81:e4:66:6a:6e:52:7e:52:26:60:04:76:81: 5e:e3:de:42:a6:9c:54:a9:12:53:e1:3f:73:64:dc:74:56:ed: 2d:03:68:d8:7f:79:0c:af:dc:1f:b0:6a:d2:40:38:ee:a2:46: 29:50:db:cf:90:9f:56:8c:d1:4a:6e:70:55:bd:db:aa:ae:5a: e8:fb:53:ba:bd:dd:36:8d:d3:3f:84:e2:7c:81:11:a7:06:40: 39:53:3d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUwNDI0MTYxNjEzWhcNMjUwNTAxMTYxNjEzWjAYMRYwFAYD VQQDEw02ODBhNjNjZC0wODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrgNaU3ynk9YBCBtXtZXyGj/q1G47Pu6QGwJ/TSyuF13glJcEzfN4A1UHlAp e9jNszN0ZkYLO+22//2iToMZYKUDQNSUhVMKoeYdcWcly7xHQFwiry+56bVbo74b 7cD8rfKOa9dlr4owiabZmIFUOmOg2goxXUIOAzUfYuV5B4DLOBecUlltOi/D/H5Q EnuCeX4aaKkFLzTNCCRn09c6ss2EXDwVPmca1EA2Ix6a+JvvymL22yCxEI/1RZfv cttSS4j1H6EuQUwgvQS+r9dyRmYjT8vm5SSnrq0ITmrJg6Od7h+hcq/jyPb7IwsC 04Mgomdf2s31fkP52G3rYlzxbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/2oju7 HnkIuAsL6bw7IxZHCFt8MB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB0wq6DuFv5RVv1VEsDhvOYuFrHPUKHj6KNfMzPSI1zJxpirgKEbcn 4qSt52vT+YupVv+ax9CjTMgunbR9W0V2G02PEjvE5BvCXmsydZmB0W+FEe3DdPc0 On+GfuCCWu53NANvNaKeOG71Ps6YgE0l+XDIH+flBy6mQtxI8WUEF/fy7/pH0G56 KKySppAhiRvhM5O0lIkJ1htDsZt6gZjYNr+sokYtbIHkZmpuUn5SJmAEdoFe495C ppxUqRJT4T9zZNx0Vu0tA2jYf3kMr9wfsGrSQDjuokYpUNvPkJ9WjNFKbnBVvduq rlro+1O6vd02jdM/hOJ8gRGnBkA5Uz0i -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:25 2025 by rpki-client