$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: 1WygBeW/cUlEdSQgpben/si1CScmo/lglgENtowFjd0= Subject key identifier: ED:EC:91:A8:3C:87:DB:30:2C:53:56:09:02:5C:EB:3B:17:6A:53:3A Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3898 Signing time: Sat 26 Apr 2025 14:36:57 +0000 Manifest this update: Sat 26 Apr 2025 14:36:56 +0000 Manifest next update: Sat 03 May 2025 14:36:56 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: xG8HdJHFYFNekAOE7i0jtE2nc7pvgZYqHSXA4WSjgfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Apr 26 14:36:56 2025 GMT Not After : May 3 14:36:56 2025 GMT Subject: CN=680cef88-9d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:00:dd:dd:77:f2:af:b2:21:a6:71:0a:f8: 70:e2:b9:1c:0e:6c:db:f6:c1:35:3b:37:1f:92:bf: 43:80:20:51:31:67:7b:50:0f:b6:17:97:be:ec:aa: 0b:8a:66:55:0d:9b:38:ea:59:b2:8f:d3:13:24:d3: 29:37:33:26:ad:64:a5:7d:9d:b2:f3:31:10:fa:dc: cd:b9:f3:32:6b:0c:90:c6:88:76:47:94:b5:86:2e: 45:30:ea:d1:7e:07:a9:33:a9:ab:59:15:40:05:51: 08:ca:24:e2:3f:4f:92:10:13:b6:9c:24:cd:60:f5: a7:69:01:cd:59:ca:e0:8b:d7:34:63:11:b4:12:8d: 63:80:ef:61:9d:24:f1:41:f8:b1:4f:19:c7:c1:58: 69:77:f2:59:21:24:04:99:ba:b9:d6:77:bb:e7:9d: 9d:22:71:01:a9:6d:e4:ac:76:56:da:66:01:5f:54: df:37:46:5a:2b:de:74:ca:08:af:d8:66:65:7b:da: 4c:35:15:06:31:ea:4c:6c:2a:32:d1:6d:06:24:51: e2:55:d6:63:89:96:0a:06:99:45:99:be:f4:0d:d8: 8c:51:08:20:60:9f:ba:8e:7c:55:40:0f:4a:0e:c4: 72:f8:68:7e:5b:55:ed:31:89:ce:20:38:19:3e:f9: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EC:91:A8:3C:87:DB:30:2C:53:56:09:02:5C:EB:3B:17:6A:53:3A X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f0:95:29:1e:6f:03:37:75:55:eb:41:54:56:e8:6e:2e:f3: b3:09:7a:d8:c3:ec:66:3e:2c:21:33:5c:e6:48:38:ef:27:2d: d3:71:7e:3d:0b:0c:68:bf:b1:16:45:1e:bf:d4:5f:7f:5d:6a: a8:9d:65:b9:71:45:a3:e4:a9:20:bc:47:ec:90:c7:52:20:bc: 24:2e:05:b5:63:f0:fe:bd:31:43:31:fd:a2:42:5a:f5:85:25: ba:a2:8b:ec:43:24:12:e9:50:90:0b:ee:26:f1:3f:98:2a:27: 66:cb:a9:8b:d4:0e:92:21:f9:44:d2:ff:3d:94:e7:b9:74:02: f6:9e:41:b5:54:4c:51:4f:4c:25:f7:00:d9:d4:5b:5d:8e:96: ef:73:d8:6f:11:a8:6c:b3:00:bd:95:2b:f8:71:14:b1:2b:d5: 84:bf:99:ac:06:ce:ff:9b:fd:bf:47:31:bb:96:3f:ef:96:1d: e2:7a:49:42:70:b2:81:dc:a6:4e:da:69:ba:c6:2f:0c:73:d6: ba:f4:57:de:7b:f5:50:9a:c0:58:1a:a4:ed:0a:25:5a:70:fe: bf:04:bb:fd:6a:a7:5b:44:31:39:86:08:e2:e9:32:7e:3d:11: 96:75:f9:cc:00:48:18:f6:e1:ca:0c:aa:4d:eb:46:31:93:ba: c6:82:cd:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwNDI2MTQzNjU2WhcNMjUwNTAzMTQzNjU2WjAYMRYwFAYD VQQDEw02ODBjZWY4OC05ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lAA3d138q+yIaZxCvhw4rkcDmzb9sE1Ozcfkr9DgCBRMWd7UA+2F5e+7KoL imZVDZs46lmyj9MTJNMpNzMmrWSlfZ2y8zEQ+tzNufMyawyQxoh2R5S1hi5FMOrR fgepM6mrWRVABVEIyiTiP0+SEBO2nCTNYPWnaQHNWcrgi9c0YxG0Eo1jgO9hnSTx QfixTxnHwVhpd/JZISQEmbq51ne7552dInEBqW3krHZW2mYBX1TfN0ZaK950ygiv 2GZle9pMNRUGMepMbCoy0W0GJFHiVdZjiZYKBplFmb70DdiMUQggYJ+6jnxVQA9K DsRy+Gh+W1XtMYnOIDgZPvmy6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3skag8 h9swLFNWCQJc6zsXalM6MB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC38JUpHm8DN3VV60FUVuhuLvOzCXrYw+xmPiwhM1zmSDjvJy3TcX49 Cwxov7EWRR6/1F9/XWqonWW5cUWj5KkgvEfskMdSILwkLgW1Y/D+vTFDMf2iQlr1 hSW6oovsQyQS6VCQC+4m8T+YKidmy6mL1A6SIflE0v89lOe5dAL2nkG1VExRT0wl 9wDZ1Ftdjpbvc9hvEahsswC9lSv4cRSxK9WEv5msBs7/m/2/RzG7lj/vlh3ieklC cLKB3KZO2mm6xi8Mc9a69Ffee/VQmsBYGqTtCiVacP6/BLv9aqdbRDE5hgji6TJ+ PRGWdfnMAEgY9uHKDKpN60Yxk7rGgs38 -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:23 2025 by rpki-client