$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: qOlhB0hYp5QswkUYEode1b3mB+DduieRQwB7cm4q/t0= Subject key identifier: A3:88:CB:30:89:92:B8:43:E8:0F:33:63:C5:A5:98:12:E6:E2:DC:EC Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0159 Signing time: Fri 25 Apr 2025 03:14:08 +0000 Manifest this update: Fri 25 Apr 2025 03:14:08 +0000 Manifest next update: Fri 02 May 2025 03:14:08 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: 8qoxD3qtvy3/uX7udTh0ICzQAjN7XO+c2nQ4lMjDabM=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: LI8+/YvVoONLxst6n4BQuIP1sskVexKZgRmcFhR/Qps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Apr 25 03:14:08 2025 GMT Not After : May 2 03:14:08 2025 GMT Subject: CN=680afe00-2cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:84:a8:7e:7d:32:d0:74:9c:06:fa:a8:b4: 9f:69:5c:01:26:36:56:81:ff:51:f7:9d:0d:1e:71: 58:24:77:e3:d7:b4:f2:db:c5:82:19:da:a6:97:b6: 06:9f:25:e5:3a:18:cd:1d:17:bb:56:76:30:06:ce: 44:ca:12:b7:c3:96:88:9e:58:24:72:13:7f:82:5a: 3d:cf:5f:d8:c8:fb:65:04:05:83:21:e4:02:ed:47: 7d:96:cc:04:65:74:1c:57:57:13:aa:43:f6:32:fb: 2d:57:68:e3:7a:86:b8:13:f9:0e:35:54:25:01:ab: 74:4e:6e:82:a0:8d:44:0a:4d:b2:7d:b8:34:7c:9d: f1:4f:23:81:41:e8:de:0a:95:34:3d:94:43:9e:14: c8:9f:e8:64:d3:3b:d1:e1:58:0d:9d:3a:fa:78:c5: ec:a7:2d:ba:85:6e:03:05:44:58:56:cd:ea:db:55: a3:09:87:69:b9:3a:e6:78:20:53:be:51:0d:0e:57: e4:6e:e1:cd:cf:96:f5:cb:08:04:44:61:c2:41:82: e9:ba:ea:55:85:09:de:f6:b2:58:f3:c3:24:bf:3e: 52:98:70:a5:e1:32:e3:e3:57:ce:23:52:0e:b8:b9: 3a:b5:23:34:1e:d1:a4:91:a2:91:26:c1:26:43:72: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:88:CB:30:89:92:B8:43:E8:0F:33:63:C5:A5:98:12:E6:E2:DC:EC X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:58:74:d9:60:a4:1a:00:7f:8e:41:f1:7a:37:f2:ad:b2:d3: e9:20:8a:05:67:88:5c:6a:7b:03:0f:cd:f2:14:23:5d:7b:a4: 9b:e4:c9:e1:b9:e3:a4:83:34:5e:a2:48:c9:fc:d3:78:89:12: 9c:7f:2d:4a:8d:46:f7:ad:5e:f8:0f:2e:1a:f8:89:b6:55:97: 49:5f:9c:bf:c5:32:e7:d0:5b:68:ff:ed:9e:01:07:88:0a:af: b4:55:07:ed:4d:0e:d4:77:6d:a6:c2:f0:78:c7:d0:ce:07:45: e4:3c:8f:56:d3:4d:1c:d5:be:6e:91:17:fa:e1:c3:d8:b4:fe: 21:66:82:1a:c0:cb:be:92:13:b7:af:0f:a8:18:27:90:9a:f6: 38:57:95:66:9f:90:14:0c:8c:5f:cc:c8:3a:5d:e3:20:2f:3b: 27:82:7e:85:a3:26:d1:6a:32:f9:a9:81:1a:5e:05:3f:58:15: c7:15:b4:81:6c:db:e4:17:6a:de:33:fc:78:87:b2:74:f0:2a: 11:ef:c9:65:dc:55:6f:fd:97:16:87:09:2c:62:21:f1:b6:64: f6:f8:ea:de:f9:93:c7:60:50:a4:1d:c6:13:d3:79:69:a3:dd: 76:66:bd:73:9a:04:a6:7a:6b:b4:55:83:86:db:a5:23:c2:15: 86:7a:dd:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwNDI1MDMxNDA4WhcNMjUwNTAyMDMxNDA4WjAYMRYwFAYD VQQDEw02ODBhZmUwMC0yY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdKEqH59MtB0nAb6qLSfaVwBJjZWgf9R950NHnFYJHfj17Ty28WCGdqml7YG nyXlOhjNHRe7VnYwBs5EyhK3w5aInlgkchN/glo9z1/YyPtlBAWDIeQC7Ud9lswE ZXQcV1cTqkP2MvstV2jjeoa4E/kONVQlAat0Tm6CoI1ECk2yfbg0fJ3xTyOBQeje CpU0PZRDnhTIn+hk0zvR4VgNnTr6eMXspy26hW4DBURYVs3q21WjCYdpuTrmeCBT vlENDlfkbuHNz5b1ywgERGHCQYLpuupVhQne9rJY88Mkvz5SmHCl4TLj41fOI1IO uLk6tSM0HtGkkaKRJsEmQ3Jl8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOIyzCJ krhD6A8zY8WlmBLm4tzsMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEWHTZYKQaAH+OQfF6N/KtstPpIIoFZ4hcansDD83yFCNde6Sb5Mnh ueOkgzReokjJ/NN4iRKcfy1KjUb3rV74Dy4a+Im2VZdJX5y/xTLn0Fto/+2eAQeI Cq+0VQftTQ7Ud22mwvB4x9DOB0XkPI9W000c1b5ukRf64cPYtP4hZoIawMu+khO3 rw+oGCeQmvY4V5Vmn5AUDIxfzMg6XeMgLzsngn6FoybRajL5qYEaXgU/WBXHFbSB bNvkF2reM/x4h7J08CoR78ll3FVv/ZcWhwksYiHxtmT2+Ore+ZPHYFCkHcYT03lp o912Zr1zmgSmemu0VYOG26UjwhWGet0Y -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:25 2025 by rpki-client