$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: 8XxyOyzV1a5/naBSnQ4FN5i8wlod4+taeBtYasDWkBU= Subject key identifier: 10:F6:A7:38:A9:7E:21:D7:AF:A9:84:46:0B:F4:EF:5B:D1:87:4C:8D Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: F7 Signing time: Fri 25 Apr 2025 04:19:16 +0000 Manifest this update: Fri 25 Apr 2025 04:19:16 +0000 Manifest next update: Fri 02 May 2025 04:19:16 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: hpp9XooFTglGNcpP9wTdfARdyGKWXZ50yFUlzNPf5tg=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: 8zPxRe7MaH+hS0FNXaje7YOQ+Hnyx7RIa4mbg2ZFLUE=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Oms7A+5CbFEtaIgmT8kB8Ycz88DQ95dp9Wjdw3xeV+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Apr 25 04:19:16 2025 GMT Not After : May 2 04:19:16 2025 GMT Subject: CN=680b0d44-82cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:a8:1c:df:e4:93:01:9b:38:52:cb:df:65: 86:7f:44:b1:31:11:24:3d:36:de:2e:6f:f3:e5:8f: 33:5e:60:ab:43:44:21:5b:da:de:e5:f2:8c:59:6a: ed:12:46:a3:4f:01:28:de:f4:f8:fe:d5:eb:9a:8d: 98:b2:f1:e5:a9:e8:cb:54:7c:08:99:a1:f4:5e:e1: 47:36:f1:e1:77:35:e6:1f:83:7c:39:ff:42:c7:b7: f9:45:f7:ef:b5:bc:d1:c0:ac:c4:8e:1b:6b:9d:9d: 9d:05:e2:2d:e9:2b:e2:fe:2d:49:14:02:ab:db:5d: ce:55:a7:26:9b:f9:5f:ad:d8:7a:7d:bf:ba:fb:a4: 2f:82:4e:48:a0:00:6b:7c:97:e2:7d:63:8a:10:b3: f2:ee:02:04:65:13:75:5c:43:4c:f7:bd:3e:8e:61: cc:d0:07:ea:d9:03:f2:2d:3d:0c:c8:0a:d4:07:26: aa:0c:7b:05:ab:d0:e7:18:f3:d3:9b:7b:cd:03:b6: 79:ee:6e:ac:71:37:d5:81:0c:d2:65:28:3b:d9:98: 14:61:e9:ff:90:f4:0e:68:de:59:a4:bc:8b:09:48: 34:c3:e9:b2:ba:e8:58:79:a1:20:d1:d2:fd:f7:93: 08:fc:69:33:0f:8a:65:e1:17:ad:fb:91:7e:76:e0: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F6:A7:38:A9:7E:21:D7:AF:A9:84:46:0B:F4:EF:5B:D1:87:4C:8D X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:65:fb:92:d8:48:8d:b7:fe:48:24:32:9e:a3:be:12:3a:59: 18:0b:e9:41:14:3f:f7:58:8c:f1:00:fc:c4:70:cf:e8:47:da: 0c:a0:9a:c4:39:3e:fb:3c:19:2b:ae:ab:7c:a2:34:65:d0:26: 9e:08:27:c5:84:d0:12:ad:b2:09:ca:f6:5e:b5:78:b0:ed:09: d8:b5:bb:71:79:6a:80:df:27:14:36:3e:22:00:a2:c1:04:45: 19:23:34:dd:70:49:91:dc:28:e5:a5:ea:c0:31:34:8e:5e:16: 66:62:48:6e:7f:44:30:66:89:e9:d7:78:ad:6b:60:8a:ea:3c: 9c:6a:54:3e:15:48:a9:b2:d4:a8:0a:dc:f5:7e:e1:ca:8c:ea: 9f:ec:bf:09:90:b7:01:a0:4c:41:b9:65:77:ec:8d:1f:22:9d: e2:13:b4:42:25:7b:a1:fa:ab:08:67:f5:11:b0:57:36:f0:c3: 85:14:97:0f:e6:4c:a7:5d:26:de:fe:74:6b:bb:8f:4a:0e:80: 01:c0:12:35:6d:5e:8f:29:03:c8:32:a5:ca:31:ae:9e:37:ed: a5:86:f4:4c:29:0e:b3:78:01:b2:35:f6:7e:4f:a4:a0:ef:d2: cd:00:35:75:46:02:74:36:67:b1:ac:c3:09:bb:f4:4f:87:3e: 9b:0e:96:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwNDI1MDQxOTE2WhcNMjUwNTAyMDQxOTE2WjAYMRYwFAYD VQQDEw02ODBiMGQ0NC04MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7eoHN/kkwGbOFLL32WGf0SxMREkPTbeLm/z5Y8zXmCrQ0QhW9re5fKMWWrt EkajTwEo3vT4/tXrmo2YsvHlqejLVHwImaH0XuFHNvHhdzXmH4N8Of9Cx7f5Rffv tbzRwKzEjhtrnZ2dBeIt6Svi/i1JFAKr213OVacmm/lfrdh6fb+6+6Qvgk5IoABr fJfifWOKELPy7gIEZRN1XENM970+jmHM0Afq2QPyLT0MyArUByaqDHsFq9DnGPPT m3vNA7Z57m6scTfVgQzSZSg72ZgUYen/kPQOaN5ZpLyLCUg0w+myuuhYeaEg0dL9 95MI/GkzD4pl4Ret+5F+duALjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD2pzip fiHXr6mERgv071vRh0yNMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAZfuS2EiNt/5IJDKeo74SOlkYC+lBFD/3WIzxAPzEcM/oR9oMoJrE OT77PBkrrqt8ojRl0CaeCCfFhNASrbIJyvZetXiw7QnYtbtxeWqA3ycUNj4iAKLB BEUZIzTdcEmR3CjlperAMTSOXhZmYkhuf0QwZonp13ita2CK6jycalQ+FUipstSo Ctz1fuHKjOqf7L8JkLcBoExBuWV37I0fIp3iE7RCJXuh+qsIZ/URsFc28MOFFJcP 5kynXSbe/nRru49KDoABwBI1bV6PKQPIMqXKMa6eN+2lhvRMKQ6zeAGyNfZ+T6Sg 79LNADV1RgJ0NmexrMMJu/RPhz6bDpYh -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:20 2025 by rpki-client