$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: ntGS9TD8BYdQUIL4jjaSQ9vmicJXPfPqxYkR1yrp1j4= Subject key identifier: 58:C6:80:21:3F:7B:97:43:61:98:0F:13:5B:56:5B:E4:50:7C:AF:27 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 82 Signing time: Fri 25 Apr 2025 05:37:12 +0000 Manifest this update: Fri 25 Apr 2025 05:37:12 +0000 Manifest next update: Fri 02 May 2025 05:37:12 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: AAkcJL3PsQ8IW2LMIMvgU/7gqklkdrCBQAUDZGhsCOo=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Apr 25 05:37:12 2025 GMT Not After : May 2 05:37:12 2025 GMT Subject: CN=680b1f88-1773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:4a:0a:4d:f3:86:23:bc:8a:7c:83:8a:1c: d3:1e:94:79:dd:46:d2:9c:7d:5c:99:cb:0b:50:0f: 55:5d:4b:6e:c9:c6:37:3d:ca:2a:c2:ab:ea:15:3b: 0c:45:65:de:dc:d0:37:b7:3d:45:76:0c:47:74:fc: a4:13:78:ac:01:c1:72:d4:00:67:79:12:a0:7a:40: 8d:27:37:b5:b8:1c:21:70:a3:9a:62:e5:1a:32:22: a1:5d:f8:e6:6a:8b:fc:b0:97:0f:65:38:67:26:88: d0:86:bb:b0:f1:d5:16:56:9c:1b:42:41:cf:d1:ea: 9b:b0:ab:43:c0:88:a8:7d:d1:7b:70:49:18:5a:64: 2e:6a:b7:26:f3:37:6c:8e:d7:ec:c8:6b:82:cf:49: c1:5b:3a:88:21:ac:c0:00:aa:8b:3a:99:4d:03:35: 4b:54:34:3c:4e:94:8e:b8:92:ec:9d:60:15:e2:3b: 3e:42:b7:9b:37:c4:23:e4:1f:63:29:97:2a:2d:e2: 28:d1:d2:0f:46:d6:32:de:02:41:53:24:38:42:e1: 69:63:af:1a:1d:c9:ca:d5:c5:78:85:39:11:ad:13: 06:af:e1:e6:39:ae:6c:f9:be:57:5c:0e:67:b7:19: 4c:9e:6d:67:e4:21:d7:f6:cd:2e:ce:a7:33:d1:6c: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C6:80:21:3F:7B:97:43:61:98:0F:13:5B:56:5B:E4:50:7C:AF:27 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:61:b3:3c:84:26:25:6d:6c:0d:88:35:d5:38:fa:84:a4:f6: de:6a:ec:9c:f8:66:f8:1b:1d:d7:a0:67:d9:04:3b:a4:ac:c8: f0:bb:ec:7c:73:89:80:69:af:48:88:01:af:8c:c9:cb:74:2d: 26:3d:fa:f3:68:63:8b:9e:28:10:72:92:bb:42:9c:05:07:9f: 24:30:8e:15:b8:52:a1:36:32:c6:31:9d:7b:ea:cf:87:92:97: 7b:5e:41:8f:cf:ee:7e:fd:14:96:b4:65:7a:4f:2e:3e:59:c6: 97:be:2c:f6:e8:ed:a4:5f:77:80:56:08:8d:a1:18:07:fa:be: a5:dd:fe:53:c4:fd:b6:58:d5:bd:8a:85:f6:89:5c:3d:97:c8: 01:19:32:00:72:40:81:44:bc:85:6d:37:06:5b:fd:14:5b:9b: 87:4e:2c:35:91:a2:62:4d:cf:77:3d:04:23:7c:79:46:4b:a8: d9:ab:4b:55:31:0b:03:e9:68:94:75:57:04:78:ea:92:9e:30: 44:56:77:f0:66:87:61:f4:db:88:f6:25:6e:9d:1e:a7:a4:cf: ad:45:27:e8:fb:54:b0:30:7a:48:7b:3e:21:7a:d3:4a:a2:af: d3:fe:c8:90:cc:42:83:a7:98:d4:79:7a:24:8f:d2:e1:c3:00: 8d:de:27:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwNDI1MDUzNzEyWhcNMjUwNTAyMDUzNzEyWjAYMRYwFAYD VQQDEw02ODBiMWY4OC0xNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsBKCk3zhiO8inyDihzTHpR53UbSnH1cmcsLUA9VXUtuycY3PcoqwqvqFTsM RWXe3NA3tz1FdgxHdPykE3isAcFy1ABneRKgekCNJze1uBwhcKOaYuUaMiKhXfjm aov8sJcPZThnJojQhruw8dUWVpwbQkHP0eqbsKtDwIiofdF7cEkYWmQuarcm8zds jtfsyGuCz0nBWzqIIazAAKqLOplNAzVLVDQ8TpSOuJLsnWAV4js+QrebN8Qj5B9j KZcqLeIo0dIPRtYy3gJBUyQ4QuFpY68aHcnK1cV4hTkRrRMGr+HmOa5s+b5XXA5n txlMnm1n5CHX9s0uzqcz0WwW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjGgCE/ e5dDYZgPE1tWW+RQfK8nMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtYbM8hCYlbWwNiDXVOPqEpPbeauyc+Gb4Gx3XoGfZBDukrMjwu+x8 c4mAaa9IiAGvjMnLdC0mPfrzaGOLnigQcpK7QpwFB58kMI4VuFKhNjLGMZ176s+H kpd7XkGPz+5+/RSWtGV6Ty4+WcaXviz26O2kX3eAVgiNoRgH+r6l3f5TxP22WNW9 ioX2iVw9l8gBGTIAckCBRLyFbTcGW/0UW5uHTiw1kaJiTc93PQQjfHlGS6jZq0tV MQsD6WiUdVcEeOqSnjBEVnfwZodh9NuI9iVunR6npM+tRSfo+1SwMHpIez4hetNK oq/T/siQzEKDp5jUeXokj9LhwwCN3iel -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:56 2025 by rpki-client