$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json) Hash identifier: 3ryzabZt2jqbJRim44DPRLSN/yPIjI43HaZvRvxqTF0= Subject key identifier: 0C:70:2E:12:96:8E:03:51:D1:D5:5B:48:5E:18:F1:69:C8:26:58:5F Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft Manifest number: 024F Signing time: Fri 25 Apr 2025 01:36:37 +0000 Manifest this update: Fri 25 Apr 2025 01:36:37 +0000 Manifest next update: Fri 02 May 2025 01:36:37 +0000 Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: dUazORt9NAKneiA3G2CcwZQAGv5ycSpPimfWnfD8Exo=) 2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uux+o2sOdsirWh/aoHrxCjsCKmrUczbEHaZJtHyFOgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D Validity Not Before: Apr 25 01:36:37 2025 GMT Not After : May 2 01:36:37 2025 GMT Subject: CN=680ae725-32e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:8b:4b:11:10:10:28:12:3e:62:0c:0d:8a: 31:81:6b:31:17:53:39:fd:37:bd:19:9a:b7:4d:47: 1b:a9:0b:b4:d3:c6:5c:1f:19:7c:69:df:25:98:d6: 5a:5f:89:e6:8e:d5:36:4d:3e:70:f6:41:b4:74:20: fb:da:27:0d:e4:32:96:2d:26:5d:a3:b0:5c:2b:2d: 78:3c:11:1e:24:f8:6a:fa:15:4c:42:4a:89:87:cc: f9:de:9d:a5:36:c7:3f:b5:d2:e5:07:77:10:5b:f7: ed:ae:ba:28:b8:0c:c4:d7:94:c5:c1:26:7e:2a:1f: 9d:35:d3:fc:ac:27:c6:d8:dd:e8:75:9f:23:00:a1: 19:a4:08:b2:aa:ea:c3:25:43:75:29:6a:4d:69:c6: 25:27:19:3a:55:32:df:e8:27:18:04:20:1a:39:82: 66:80:81:40:39:87:d7:58:36:d9:6c:30:cf:72:63: b5:78:da:e5:13:04:e3:08:2a:84:d6:95:ab:a0:3d: fa:2d:b2:f1:e2:03:f7:91:9a:f2:03:1f:d1:40:ca: e3:70:f1:5b:c1:82:39:b4:44:cc:8c:a0:1e:6f:8c: b3:de:9a:ac:8f:7d:ca:30:40:95:f5:42:0b:d7:05: a9:c3:e7:67:5f:d5:b1:f6:82:99:a2:e7:13:0d:05: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:2E:12:96:8E:03:51:D1:D5:5B:48:5E:18:F1:69:C8:26:58:5F X509v3 Authority Key Identifier: keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e7:16:95:ba:6b:d1:de:d2:33:36:ff:21:81:c7:51:9a:fe: f9:5c:51:61:70:88:4d:c8:33:6e:93:b7:75:9a:55:17:1a:7b: 64:d3:d2:b5:47:dc:24:6d:d3:ce:80:13:da:35:03:08:b6:92: 00:42:3c:cb:b7:84:fd:dc:75:92:c3:2e:6a:8e:f0:42:26:39: a6:f4:3f:c9:0d:ee:2a:a1:91:1b:86:95:7f:5d:35:c8:90:4b: 74:6c:de:79:66:29:5c:99:fc:7a:70:3b:04:ba:c8:06:08:03: 7d:8f:09:7d:64:a0:6d:3c:03:fe:91:d8:1f:36:dd:76:b5:70: 68:26:14:51:2a:14:78:7b:e4:13:dc:68:a7:90:01:5a:59:8c: 85:66:ac:ab:6a:70:9d:3c:d2:c0:8c:f2:71:0b:3c:e7:36:53: c0:7b:d4:c3:e8:95:ae:c3:d2:da:ea:04:78:ed:18:4d:c4:58: 28:81:00:de:ad:66:44:32:6a:9d:1a:00:5f:c8:df:4b:f6:bc: 3a:fe:b2:79:77:1f:c5:89:e6:b1:db:b2:f1:f2:60:08:93:4a: ab:7f:49:fd:f0:f8:d3:39:e1:80:17:ea:ad:8f:77:13:ba:20: d6:18:66:ef:a7:6e:96:2c:78:49:73:e1:cf:b0:bf:fb:2f:f7: c5:ee:79:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwQjQxMTAvBgNVBAUTKDE1M0I2M0E5Mzc3M0IyNTg5ODgyMTg2NjU1REVGMzA0 NDZERDg2MEQwHhcNMjUwNDI1MDEzNjM3WhcNMjUwNTAyMDEzNjM3WjAYMRYwFAYD VQQDEw02ODBhZTcyNS0zMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9uLSxEQECgSPmIMDYoxgWsxF1M5/Te9GZq3TUcbqQu008ZcHxl8ad8lmNZa X4nmjtU2TT5w9kG0dCD72icN5DKWLSZdo7BcKy14PBEeJPhq+hVMQkqJh8z53p2l Nsc/tdLlB3cQW/ftrroouAzE15TFwSZ+Kh+dNdP8rCfG2N3odZ8jAKEZpAiyqurD JUN1KWpNacYlJxk6VTLf6CcYBCAaOYJmgIFAOYfXWDbZbDDPcmO1eNrlEwTjCCqE 1pWroD36LbLx4gP3kZryAx/RQMrjcPFbwYI5tETMjKAeb4yz3pqsj33KMECV9UIL 1wWpw+dnX9Wx9oKZoucTDQVoUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxwLhKW jgNR0dVbSF4Y8WnIJlhfMB8GA1UdIwQYMBaAFBU7Y6k3c7JYmIIYZlXe8wRG3YYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBCNC83N0Q1MkFBMDE2 QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNsaVlnaGhtVmQ3ekJFYmRo ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUdGpxVGR6c2xpWWdoaG1WZDd6QkViZGhnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBCNC83N0Q1MkFBMDE2QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNs aVlnaGhtVmQ3ekJFYmRoZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC25xaVumvR3tIzNv8hgcdRmv75XFFhcIhNyDNuk7d1mlUXGntk09K1 R9wkbdPOgBPaNQMItpIAQjzLt4T93HWSwy5qjvBCJjmm9D/JDe4qoZEbhpV/XTXI kEt0bN55Zilcmfx6cDsEusgGCAN9jwl9ZKBtPAP+kdgfNt12tXBoJhRRKhR4e+QT 3GinkAFaWYyFZqyranCdPNLAjPJxCzznNlPAe9TD6JWuw9La6gR47RhNxFgogQDe rWZEMmqdGgBfyN9L9rw6/rJ5dx/Fieax27Lx8mAIk0qrf0n98PjTOeGAF+qtj3cT uiDWGGbvp26WLHhJc+HPsL/7L/fF7nnE -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client