$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: jcKPIPOE+UfqZ78GOC5miqO3rw8eSoBaCQ8F/v7mCno= Subject key identifier: A6:64:EA:10:47:27:CC:B4:31:B1:A4:F4:5F:26:51:BD:96:47:56:86 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 02F2 Signing time: Fri 25 Apr 2025 01:03:26 +0000 Manifest this update: Fri 25 Apr 2025 01:03:25 +0000 Manifest next update: Fri 02 May 2025 01:03:25 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: fX0SgeFdZWORcXRbu84o9Pvm/9sm2YpaMvrzr1iA0PU=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: 70Ak7XUB7BzXLnPmthZhxV5PKsUoGnrCyTGpT6zqlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Apr 25 01:03:25 2025 GMT Not After : May 2 01:03:25 2025 GMT Subject: CN=680adf5e-067b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:12:83:0a:04:71:8c:e6:30:2a:69:55:92: 64:3e:ab:65:a3:c6:02:9e:c2:61:9d:86:3a:47:15: 32:07:e2:4a:61:87:ab:c3:6c:ef:a5:1b:05:3e:68: db:a8:70:fd:e0:11:61:12:a9:3e:7c:6d:46:df:ea: a5:58:e7:9c:86:58:81:52:2b:3d:06:4b:f0:7c:68: 5f:31:a5:a2:af:f0:14:69:20:0b:21:2c:3e:03:7b: 4f:ad:1d:c4:6f:d1:8c:83:c9:20:ec:dd:31:a1:78: d9:78:b5:cf:54:11:7d:ad:ac:76:1a:11:4f:98:bb: 3c:a9:bd:89:6a:5c:a5:7e:ec:fa:9f:95:a9:de:4f: ea:d2:19:6b:1f:2c:e3:6a:23:6c:70:87:e1:10:d8: ae:6b:6b:e6:66:03:53:00:86:19:e8:6d:e0:f9:b2: 50:7f:d2:ff:b1:6c:68:bf:73:a6:7d:69:8a:f3:7c: b9:dc:25:d5:79:eb:19:74:bb:40:05:3c:28:2d:57: 58:bc:da:d4:bd:93:ba:ed:62:02:50:7e:7b:30:53: e5:27:2a:68:2c:18:91:f7:21:f4:d5:50:99:85:fa: ce:4e:4c:3e:a9:53:59:7e:8c:14:47:e5:a4:1b:93: a5:02:b2:0d:de:6b:9b:df:00:6f:36:63:69:c7:ae: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:64:EA:10:47:27:CC:B4:31:B1:A4:F4:5F:26:51:BD:96:47:56:86 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:86:b8:7a:58:35:66:7b:a5:07:00:94:5c:ae:56:13:b2:63: 97:9a:22:ab:07:79:8b:5b:d3:b8:01:75:88:ce:09:c1:ba:e0: a9:1a:bc:df:8d:6d:e2:21:23:e5:0b:6f:23:0a:c0:ea:19:23: fe:c1:57:44:53:86:2d:70:b4:25:b0:94:72:3b:cd:e1:67:4a: ef:c5:68:37:7f:1d:16:82:98:40:e2:4a:ff:d6:6b:9d:26:0b: fa:a5:54:69:c7:f3:52:b9:05:b6:2d:40:4d:8a:4e:f3:72:b8: 3b:46:d9:24:d6:22:41:e2:d1:de:2b:86:81:0f:47:b1:81:3e: 98:dd:6b:9e:04:d2:8a:7d:c5:f9:59:4a:9a:0f:a2:d4:13:cd: fd:18:8c:e9:1e:3f:c4:b4:d1:24:8e:c9:f6:8f:2c:0e:e6:8a: 17:13:33:65:f1:78:13:88:65:58:c9:79:08:19:9b:a9:52:f2: c1:13:d7:54:3c:fe:7f:82:0f:5b:65:c0:d5:36:03:56:e3:0d: 76:0a:18:a3:75:85:47:b7:30:39:25:7d:e2:33:3b:b5:c7:36: 4c:f9:04:e9:bc:b3:d9:0d:79:af:5d:75:f1:ec:1a:18:06:f5: c1:5b:ef:6e:13:ae:53:8e:05:87:57:1b:f7:f8:f0:fd:a3:e2: 9c:95:0b:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUwNDI1MDEwMzI1WhcNMjUwNTAyMDEwMzI1WjAYMRYwFAYD VQQDEw02ODBhZGY1ZS0wNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVgSgwoEcYzmMCppVZJkPqtlo8YCnsJhnYY6RxUyB+JKYYerw2zvpRsFPmjb qHD94BFhEqk+fG1G3+qlWOechliBUis9BkvwfGhfMaWir/AUaSALISw+A3tPrR3E b9GMg8kg7N0xoXjZeLXPVBF9rax2GhFPmLs8qb2Jalylfuz6n5Wp3k/q0hlrHyzj aiNscIfhENiua2vmZgNTAIYZ6G3g+bJQf9L/sWxov3OmfWmK83y53CXVeesZdLtA BTwoLVdYvNrUvZO67WICUH57MFPlJypoLBiR9yH01VCZhfrOTkw+qVNZfowUR+Wk G5OlArIN3mub3wBvNmNpx665DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZk6hBH J8y0MbGk9F8mUb2WR1aGMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAghrh6WDVme6UHAJRcrlYTsmOXmiKrB3mLW9O4AXWIzgnBuuCpGrzf jW3iISPlC28jCsDqGSP+wVdEU4YtcLQlsJRyO83hZ0rvxWg3fx0WgphA4kr/1mud Jgv6pVRpx/NSuQW2LUBNik7zcrg7Rtkk1iJB4tHeK4aBD0exgT6Y3WueBNKKfcX5 WUqaD6LUE839GIzpHj/EtNEkjsn2jywO5ooXEzNl8XgTiGVYyXkIGZupUvLBE9dU PP5/gg9bZcDVNgNW4w12ChijdYVHtzA5JX3iMzu1xzZM+QTpvLPZDXmvXXXx7BoY BvXBW+9uE65TjgWHVxv3+PD9o+KclQuM -----END CERTIFICATE-----Generated at Sat Apr 26 05:26:18 2025 by rpki-client