$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: 4gWmvL46sLqFiisUtmoum761BNESr9TJkr0FAhKxrZA= Subject key identifier: 8C:AC:60:25:05:25:E4:80:79:83:75:DB:FC:FF:F9:A5:C6:D1:52:9E Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 082C Signing time: Thu 24 Apr 2025 20:39:49 +0000 Manifest this update: Thu 24 Apr 2025 20:39:49 +0000 Manifest next update: Thu 01 May 2025 20:39:49 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: qC3xexgauB/XLjuJR8EODXlvl+XD8b/RI6IEFySZBX4=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: Apr 24 20:39:49 2025 GMT Not After : May 1 20:39:49 2025 GMT Subject: CN=680aa195-fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:ef:7c:00:34:42:92:38:72:c2:3b:53:36: 12:07:47:03:ca:26:e0:c5:e5:24:1e:eb:75:e5:f2: 6d:11:4b:66:b3:63:a7:b4:46:d6:ad:33:cc:2d:8b: cb:8a:4c:91:06:24:ac:93:e2:51:3c:45:8f:77:01: 4e:39:e2:a8:c0:16:5c:6e:64:fa:ab:30:09:d7:0e: 31:b2:ee:b3:d0:09:82:10:16:09:0d:32:28:45:db: 63:bf:50:7f:c0:e6:72:d1:a7:31:cd:dd:d1:e0:16: 6e:0e:d4:69:f8:fe:cf:99:e7:1b:e9:db:f3:67:fe: 12:64:95:17:36:d5:3a:3f:ea:fe:cf:c3:a9:9c:4d: 03:d4:3a:8e:43:47:36:3a:0d:db:a6:da:ef:0f:70: 21:dc:5f:6d:da:f7:6a:1a:46:ed:dc:50:f2:98:90: ab:fd:a7:9d:20:b6:12:6e:d8:4b:b6:b3:81:0e:b1: 6c:4c:a0:b2:41:cc:a2:33:49:02:5b:50:b2:83:13: 61:f9:a2:0a:0f:00:1a:d7:6d:3f:ca:d6:f0:b7:6a: 72:9f:b1:f8:5c:7f:8b:7a:b3:9b:21:66:8f:f4:94: 91:ee:cb:51:51:3c:7b:66:b3:74:ae:da:f2:a9:25: 00:eb:60:2f:79:d9:15:44:05:d7:51:c8:af:1d:1a: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AC:60:25:05:25:E4:80:79:83:75:DB:FC:FF:F9:A5:C6:D1:52:9E X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:8a:67:9f:9b:09:79:b3:7b:1b:86:bf:d2:d1:52:67:3d: 78:cb:00:41:c8:30:a3:4d:58:e7:95:ea:9e:b7:cd:0b:71:f0: 83:4d:70:06:7e:c3:fc:14:72:4c:4c:42:5b:a8:70:18:08:a4: 50:35:f8:d3:b4:ad:13:28:ab:c9:00:49:0a:63:3c:78:69:17: 1e:66:0c:02:1c:eb:ac:33:03:5c:a4:cd:6a:ab:a2:e6:4f:08: 2f:16:22:84:22:04:00:0e:35:cc:f0:e0:c9:96:dd:fa:0b:fd: 31:7f:ee:1c:58:cb:52:e4:d2:6f:6d:07:49:45:a9:c0:7a:5f: 14:2b:17:82:e1:9e:2f:05:ea:99:d7:ec:6c:44:90:4e:5b:a9: a2:49:67:c1:27:44:4a:b7:ae:3c:21:b0:25:97:55:4c:c6:4f: 07:61:d3:74:27:2c:79:40:a7:bd:c0:e2:80:99:92:a2:d4:a6: 8f:aa:49:6c:44:a5:d1:41:71:56:82:eb:ac:aa:9a:9f:ed:87: ed:4d:7e:4a:64:ae:ba:65:59:75:10:b7:5e:0f:bf:fd:17:9a: 31:b9:43:c4:13:79:5f:97:06:b3:1b:56:c0:68:08:da:db:e2: 4f:75:ac:5d:1e:71:99:b8:ca:49:07:f3:83:b2:44:24:c6:85: d8:6b:71:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjUwNDI0MjAzOTQ5WhcNMjUwNTAxMjAzOTQ5WjAYMRYwFAYD VQQDEw02ODBhYTE5NS1mZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU3vfAA0QpI4csI7UzYSB0cDyibgxeUkHut15fJtEUtms2OntEbWrTPMLYvL ikyRBiSsk+JRPEWPdwFOOeKowBZcbmT6qzAJ1w4xsu6z0AmCEBYJDTIoRdtjv1B/ wOZy0acxzd3R4BZuDtRp+P7Pmecb6dvzZ/4SZJUXNtU6P+r+z8OpnE0D1DqOQ0c2 Og3bptrvD3Ah3F9t2vdqGkbt3FDymJCr/aedILYSbthLtrOBDrFsTKCyQcyiM0kC W1CygxNh+aIKDwAa120/ytbwt2pyn7H4XH+LerObIWaP9JSR7stRUTx7ZrN0rtry qSUA62AvedkVRAXXUcivHRqg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIysYCUF JeSAeYN12/z/+aXG0VKeMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1Ypnn5sJebN7G4a/0tFSZz14ywBByDCjTVjnleqet80LcfCDTXAG fsP8FHJMTEJbqHAYCKRQNfjTtK0TKKvJAEkKYzx4aRceZgwCHOusMwNcpM1qq6Lm TwgvFiKEIgQADjXM8ODJlt36C/0xf+4cWMtS5NJvbQdJRanAel8UKxeC4Z4vBeqZ 1+xsRJBOW6miSWfBJ0RKt648IbAll1VMxk8HYdN0Jyx5QKe9wOKAmZKi1KaPqkls RKXRQXFWguusqpqf7YftTX5KZK66ZVl1ELdeD7/9F5oxuUPEE3lflwazG1bAaAja 2+JPdaxdHnGZuMpJB/ODskQkxoXYa3E6 -----END CERTIFICATE-----Generated at Sat Apr 26 05:54:58 2025 by rpki-client