$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: sXYMcL3sDvAoaoOOV0pjy5/1j4X4DlcTsQcPWKknZc0= Subject key identifier: 02:35:94:42:87:8C:C2:CA:F2:D8:0A:27:BB:27:CE:59:56:2F:87:F5 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C52 Signing time: Thu 24 Apr 2025 18:19:57 +0000 Manifest this update: Thu 24 Apr 2025 18:19:57 +0000 Manifest next update: Thu 01 May 2025 18:19:57 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: dOJ4KbVtVGMeDCKftWz76oUZuXNq9YWswKCZzH4NrtM=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Apr 24 18:19:57 2025 GMT Not After : May 1 18:19:57 2025 GMT Subject: CN=680a80cd-3264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:fe:8d:40:7e:64:e0:a9:9e:0e:ef:f0:3a: 3a:de:2e:ad:4c:0f:f2:1b:03:d6:5a:3b:5c:bc:a7: 4f:f8:fa:8e:74:db:dd:fe:b0:aa:4b:06:ac:09:dc: 11:6f:ea:c5:f5:26:8a:34:57:d4:85:fd:94:9f:ea: ef:65:47:a8:94:f3:11:67:21:e8:85:f3:2c:3f:e0: e8:51:3b:d0:c5:a1:7a:f1:df:db:02:36:8e:0c:e1: 25:1b:79:2a:59:de:c3:37:25:ad:14:33:ae:8e:d4: e4:09:ef:94:f0:0b:f3:9a:9b:3a:ca:c4:18:43:eb: 05:13:3a:d8:aa:39:5f:56:95:e2:88:98:d1:dc:fb: 75:ac:e3:8a:f7:60:09:ee:95:4c:38:a0:b6:f5:b3: 97:43:e3:98:b6:ae:2d:27:1d:6d:ad:c9:52:96:1f: 79:5c:61:58:d6:52:1d:c4:53:83:a8:59:45:01:2c: 51:e7:03:e5:c1:bd:33:58:ab:32:30:ea:80:6f:d9: 53:49:67:5c:4e:0c:04:6e:51:d3:3f:1f:57:81:ff: b6:67:6d:9a:eb:26:71:9b:68:79:d2:72:f0:5a:4e: 78:df:e9:a2:8a:96:47:a9:b8:67:71:43:b1:0a:95: 7e:9a:8b:12:78:57:81:42:cb:7d:e8:4d:fe:62:c3: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:35:94:42:87:8C:C2:CA:F2:D8:0A:27:BB:27:CE:59:56:2F:87:F5 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b8:1c:0c:1a:4e:fa:df:48:69:7f:e0:bd:4d:a6:13:43:68: c1:ee:ac:93:81:cf:7b:7a:19:31:7e:6a:c9:d1:42:2d:41:85: 1d:b8:19:e5:be:20:81:69:71:07:d9:12:4e:a1:59:30:e4:14: d1:93:a8:f3:8c:b2:20:fe:96:9c:ad:09:26:07:ab:6b:98:a1: 28:51:b1:fc:5a:ba:4a:20:56:13:53:2c:b0:ce:e3:5c:3d:3a: d4:a7:a3:1e:2d:e4:a7:b2:cb:68:fe:0d:ce:f9:bc:13:6c:de: 47:d4:47:31:58:d8:64:78:1f:8d:5c:3e:02:4a:fb:8b:ac:16: 29:49:41:b4:8b:5e:1c:86:0b:1e:b5:76:48:e5:7e:57:fa:75: 64:ae:a5:09:6e:38:a6:c5:88:a9:a2:a1:c2:76:d3:d3:f0:0f: a0:83:10:d3:33:c6:3e:83:30:44:78:19:4e:00:8b:f6:e1:09: f4:24:bc:b0:d6:02:e0:0e:ed:6d:83:ba:df:af:f5:4a:3f:c5: cf:83:03:5e:b6:da:93:a3:15:ff:54:5e:d2:a5:27:80:f5:33: c7:ee:95:70:7c:12:12:01:45:78:33:11:7c:6b:b0:fb:fc:f0: 07:91:b8:a4:ab:e1:04:65:8c:f6:06:3a:23:16:d6:a1:7a:46: 14:45:27:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwNDI0MTgxOTU3WhcNMjUwNTAxMTgxOTU3WjAYMRYwFAYD VQQDEw02ODBhODBjZC0zMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0If+jUB+ZOCpng7v8Do63i6tTA/yGwPWWjtcvKdP+PqOdNvd/rCqSwasCdwR b+rF9SaKNFfUhf2Un+rvZUeolPMRZyHohfMsP+DoUTvQxaF68d/bAjaODOElG3kq Wd7DNyWtFDOujtTkCe+U8Avzmps6ysQYQ+sFEzrYqjlfVpXiiJjR3Pt1rOOK92AJ 7pVMOKC29bOXQ+OYtq4tJx1trclSlh95XGFY1lIdxFODqFlFASxR5wPlwb0zWKsy MOqAb9lTSWdcTgwEblHTPx9Xgf+2Z22a6yZxm2h50nLwWk543+miipZHqbhncUOx CpV+mosSeFeBQst96E3+YsPkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI1lEKH jMLK8tgKJ7snzllWL4f1MB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLuBwMGk7630hpf+C9TaYTQ2jB7qyTgc97ehkxfmrJ0UItQYUduBnl viCBaXEH2RJOoVkw5BTRk6jzjLIg/pacrQkmB6trmKEoUbH8WrpKIFYTUyywzuNc PTrUp6MeLeSnssto/g3O+bwTbN5H1EcxWNhkeB+NXD4CSvuLrBYpSUG0i14chgse tXZI5X5X+nVkrqUJbjimxYipoqHCdtPT8A+ggxDTM8Y+gzBEeBlOAIv24Qn0JLyw 1gLgDu1tg7rfr/VKP8XPgwNettqToxX/VF7SpSeA9TPH7pVwfBISAUV4MxF8a7D7 /PAHkbikq+EEZYz2BjojFtahekYURSdi -----END CERTIFICATE-----Generated at Sat Apr 26 17:07:08 2025 by rpki-client