$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: DHzww15dpRJ7o3Lg/ffx78Q1XaeUhPocuI/+tihDj+k= Subject key identifier: C7:7D:65:65:BC:5D:20:5F:88:AF:20:28:7B:90:F0:C1:F9:D0:37:93 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C20 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C13 Signing time: Thu 24 Apr 2025 17:36:01 +0000 Manifest this update: Thu 24 Apr 2025 17:36:00 +0000 Manifest next update: Thu 01 May 2025 17:36:00 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: vjDKoFQuTp3ydcORFlUuo3jUypOTOrjyesHu1AL8dGs=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Apr 24 17:36:00 2025 GMT Not After : May 1 17:36:00 2025 GMT Subject: CN=680a7681-c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:ed:77:9e:60:2f:5f:3b:fb:da:e2:26:52: 26:2b:b3:4e:63:96:6e:d8:be:26:6f:bc:3c:3c:8c: 03:18:42:de:d0:8e:d8:47:f4:fd:55:ca:5b:a5:ec: 34:bf:40:8d:24:a4:d4:d5:c6:26:37:54:2f:98:d5: f9:03:bd:98:db:d1:b1:92:8b:86:07:8c:69:02:4a: c2:01:44:14:99:f7:29:07:82:49:ec:c1:90:6a:5f: 46:4e:b7:e4:66:fd:fc:1f:59:48:cd:ca:1e:da:ec: e9:06:6f:a8:ce:79:33:c9:53:5f:a1:3e:6c:b7:7a: c0:7b:f7:95:c2:35:f1:fb:67:da:44:9b:83:23:f9: 37:dd:e8:54:cb:91:c5:34:e8:a3:76:63:5c:7b:8a: ad:1e:f8:66:3b:30:c6:0b:8e:0b:b4:44:67:77:67: e6:c9:da:11:63:d6:4a:e7:a9:88:37:fe:d2:6c:e6: 5e:71:49:63:b7:32:60:75:08:35:d2:51:9c:10:45: 45:6a:64:52:42:7e:c9:61:cf:77:ca:a0:ed:16:99: d3:97:8d:97:4e:f9:a4:09:ea:b3:38:d8:55:87:e4: 68:c8:dd:69:a7:ae:f2:94:d7:51:d9:8d:c9:28:50: f9:47:67:e6:b1:ab:db:1a:65:ed:ec:ec:32:b8:64: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7D:65:65:BC:5D:20:5F:88:AF:20:28:7B:90:F0:C1:F9:D0:37:93 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a0:4f:a0:da:7d:42:e1:4b:89:c4:27:8d:81:9d:0d:73:ec: 74:5d:86:89:0b:eb:11:c1:28:ff:5a:ce:d7:86:54:0f:33:6b: 79:b8:7e:c3:c8:89:aa:eb:e9:27:f9:7b:1b:3c:2d:32:e7:5f: d6:a4:ed:64:c8:81:78:05:dc:74:44:63:82:70:c9:d8:e4:5c: 7f:77:2f:15:32:6d:ee:83:8b:e4:54:d3:58:88:3f:be:79:45: d2:ab:7b:eb:0d:fb:a4:0a:68:bc:11:c8:3a:8b:0e:d1:fe:db: 00:46:43:6a:58:62:82:a5:b8:43:84:2d:c8:3f:06:32:9e:0f: e2:e7:ec:16:31:3e:99:77:44:55:73:25:17:7b:8b:4e:23:4d: c9:92:b7:46:ae:e1:2d:69:83:0a:10:3a:26:49:48:96:49:25: bc:ce:96:0e:02:b3:de:e4:0c:f0:73:3d:7f:43:b3:35:20:9a: 90:0d:2b:90:f2:74:64:a0:04:a4:be:6f:1a:d5:97:60:5d:79: ea:77:c7:a0:ef:96:79:72:5a:f1:dd:fa:86:8e:f4:a4:36:7a: b7:86:dc:87:46:6d:69:6c:72:3b:8f:d3:ee:a2:87:98:77:4f: 6f:e8:9a:ea:8a:a1:d7:bd:3e:4d:34:8b:26:ea:11:19:15:d7: 52:ef:61:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNDI0MTczNjAwWhcNMjUwNTAxMTczNjAwWjAYMRYwFAYD VQQDEw02ODBhNzY4MS1jM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Entd55gL187+9riJlImK7NOY5Zu2L4mb7w8PIwDGELe0I7YR/T9Vcpbpew0 v0CNJKTU1cYmN1QvmNX5A72Y29GxkouGB4xpAkrCAUQUmfcpB4JJ7MGQal9GTrfk Zv38H1lIzcoe2uzpBm+oznkzyVNfoT5st3rAe/eVwjXx+2faRJuDI/k33ehUy5HF NOijdmNce4qtHvhmOzDGC44LtERnd2fmydoRY9ZK56mIN/7SbOZecUljtzJgdQg1 0lGcEEVFamRSQn7JYc93yqDtFpnTl42XTvmkCeqzONhVh+RoyN1pp67ylNdR2Y3J KFD5R2fmsavbGmXt7OwyuGRgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd9ZWW8 XSBfiK8gKHuQ8MH50DeTMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXoE+g2n1C4UuJxCeNgZ0Nc+x0XYaJC+sRwSj/Ws7XhlQPM2t5uH7D yImq6+kn+XsbPC0y51/WpO1kyIF4Bdx0RGOCcMnY5Fx/dy8VMm3ug4vkVNNYiD++ eUXSq3vrDfukCmi8Ecg6iw7R/tsARkNqWGKCpbhDhC3IPwYyng/i5+wWMT6Zd0RV cyUXe4tOI03JkrdGruEtaYMKEDomSUiWSSW8zpYOArPe5Azwcz1/Q7M1IJqQDSuQ 8nRkoASkvm8a1ZdgXXnqd8eg75Z5clrx3fqGjvSkNnq3htyHRm1pbHI7j9PuooeY d09v6JrqiqHXvT5NNIsm6hEZFddS72E2 -----END CERTIFICATE-----Generated at Sat Apr 26 14:15:47 2025 by rpki-client