$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: NTI2ZNRCQldeBNH5LcjaMpr9m2qbQ+W8NNjrwQy2KuM= Subject key identifier: C3:0B:94:DC:A8:9F:9E:0B:62:F3:03:29:F2:8D:B4:3D:63:E1:55:C9 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 043A Signing time: Fri 25 Apr 2025 00:04:42 +0000 Manifest this update: Fri 25 Apr 2025 00:04:42 +0000 Manifest next update: Fri 02 May 2025 00:04:42 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: kNoThkvzzX8OzpfmWz77kXccwXfbXyl4BtCQCLmYkUA=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: EJYgzer8+vXx8u7MJTCTkYBHErTwzRTpiwQcsCSE90E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Apr 25 00:04:42 2025 GMT Not After : May 2 00:04:42 2025 GMT Subject: CN=680ad19a-27f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:cc:ae:ed:9d:a0:5d:84:4a:6a:7f:13:a3: 43:ff:55:38:6c:13:0d:1e:08:12:c9:b1:df:b0:2b: ea:f2:83:aa:8d:53:d5:d7:33:2f:74:2f:d3:b4:77: 80:3c:f3:c7:8a:4f:4b:94:f6:0d:b6:6b:e6:83:64: e9:ba:f7:e5:fd:51:67:77:90:6e:29:73:bb:0e:f2: 1b:33:09:b0:46:d7:b9:98:0c:93:b6:93:de:08:91: bf:b4:b8:de:c5:90:25:96:62:4b:74:4e:71:53:65: 97:a5:bb:5a:6d:1b:cb:67:0d:be:d9:89:b4:85:85: d4:4b:4b:aa:77:54:6e:27:31:83:37:9d:3c:32:59: ab:18:e2:b4:13:43:d0:e3:22:a0:8a:92:d0:97:4b: 0f:ec:25:be:34:19:39:ac:65:43:34:20:45:a9:c0: f3:a7:13:23:4f:d2:bc:90:0f:ba:40:9d:65:8b:bc: ee:20:c2:f8:32:53:75:6a:7d:a7:b8:cc:7b:99:26: d7:d4:3a:9e:15:62:ef:2f:86:01:c8:8e:58:c7:cb: 97:96:b7:59:38:f7:b7:97:0f:86:60:d0:d7:6b:ef: b2:f7:58:28:e0:2d:86:eb:a6:cd:93:e6:e6:ca:1e: 00:93:ac:14:88:a5:c1:4a:34:41:69:33:f5:27:19: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0B:94:DC:A8:9F:9E:0B:62:F3:03:29:F2:8D:B4:3D:63:E1:55:C9 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:aa:3c:d0:90:b2:ff:ec:af:a0:a4:70:8f:eb:59:b4:4e:1b: c7:0f:ef:db:a7:d2:50:d8:1a:7d:eb:8e:1b:23:8b:17:b0:c1: ba:5c:a7:71:10:97:75:c1:d9:6e:a4:34:f5:aa:4a:d6:fd:1e: 8d:6e:b9:17:90:5c:13:73:1c:26:4c:70:12:0c:51:3b:2f:2a: 1f:b2:b9:71:6d:a8:4d:24:f6:9c:ee:13:bc:19:f8:46:a3:45: f1:52:9e:ef:f3:61:7d:40:b7:84:62:f4:a1:9a:ba:f2:9e:c5: 35:a7:a1:d6:98:d9:e4:7d:53:7a:15:bb:af:f5:b7:7c:b1:4a: 10:fc:1c:27:6f:43:31:b8:f0:04:0a:c2:b1:f7:65:22:88:41: f2:6d:ee:f7:58:05:6b:6f:91:b1:7b:0c:db:e4:30:ad:db:08: 3a:86:dd:05:28:d7:74:06:46:04:87:0d:d5:af:8a:8b:56:37: 5b:74:3b:1d:ee:89:73:3f:51:47:bd:7a:e4:e0:e5:d8:24:c6: 42:c1:b7:c1:02:72:26:33:55:1e:4b:82:33:39:29:b4:46:88: 03:d1:f8:aa:d7:18:61:3a:fa:c7:37:d7:df:76:78:d5:b1:e3: 79:6e:41:05:b3:4e:08:bc:d3:86:51:3e:15:0d:9f:7c:3b:ba: 38:8a:64:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwNDI1MDAwNDQyWhcNMjUwNTAyMDAwNDQyWjAYMRYwFAYD VQQDEw02ODBhZDE5YS0yN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JHMru2doF2ESmp/E6ND/1U4bBMNHggSybHfsCvq8oOqjVPV1zMvdC/TtHeA PPPHik9LlPYNtmvmg2Tpuvfl/VFnd5BuKXO7DvIbMwmwRte5mAyTtpPeCJG/tLje xZAllmJLdE5xU2WXpbtabRvLZw2+2Ym0hYXUS0uqd1RuJzGDN508MlmrGOK0E0PQ 4yKgipLQl0sP7CW+NBk5rGVDNCBFqcDzpxMjT9K8kA+6QJ1li7zuIML4MlN1an2n uMx7mSbX1DqeFWLvL4YByI5Yx8uXlrdZOPe3lw+GYNDXa++y91go4C2G66bNk+bm yh4Ak6wUiKXBSjRBaTP1JxnW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMLlNyo n54LYvMDKfKNtD1j4VXJMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJqjzQkLL/7K+gpHCP61m0ThvHD+/bp9JQ2Bp9644bI4sXsMG6XKdx EJd1wdlupDT1qkrW/R6NbrkXkFwTcxwmTHASDFE7LyofsrlxbahNJPac7hO8GfhG o0XxUp7v82F9QLeEYvShmrrynsU1p6HWmNnkfVN6Fbuv9bd8sUoQ/Bwnb0MxuPAE CsKx92UiiEHybe73WAVrb5Gxewzb5DCt2wg6ht0FKNd0BkYEhw3Vr4qLVjdbdDsd 7olzP1FHvXrk4OXYJMZCwbfBAnImM1UeS4IzOSm0RogD0fiq1xhhOvrHN9ffdnjV seN5bkEFs04IvNOGUT4VDZ98O7o4imT1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:09 2025 by rpki-client