$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: rqCK0Ou13mMDWbZ1IjLX51ddbNecrSpD3BNlNr/m03E= Subject key identifier: DF:16:4D:C5:35:90:78:78:30:C2:BE:04:66:10:8D:1D:71:EA:55:DA Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 05DB Signing time: Thu 24 Apr 2025 22:47:57 +0000 Manifest this update: Thu 24 Apr 2025 22:47:57 +0000 Manifest next update: Thu 01 May 2025 22:47:57 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: tYRHTt7QjaVdNH6W79XXRujpPC790iLDM7u0Xasc7G4=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Apr 24 22:47:57 2025 GMT Not After : May 1 22:47:57 2025 GMT Subject: CN=680abf9d-2b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:cf:02:f7:80:5a:1e:3c:2c:1d:ea:82:55: 63:9b:31:25:52:4a:e7:38:00:d2:f7:a1:de:8a:cf: be:85:da:e5:40:c8:3e:33:af:45:96:ed:4d:65:af: 3e:4a:f8:bf:a2:84:1e:43:21:01:e8:21:a2:4c:e8: 6b:ef:82:e5:33:c3:58:11:15:21:73:d3:85:cf:c8: a3:40:92:2e:05:99:16:cd:8d:a5:90:d8:6e:9d:30: 3b:a3:49:5b:73:16:89:f4:97:9e:81:2b:2c:05:cf: 4c:76:94:6a:ab:36:37:2a:bb:9c:b1:d3:54:8a:3a: 7f:ee:cf:f7:14:2a:61:67:00:be:9f:60:a7:4a:a7: 77:65:61:10:1a:da:2a:11:67:80:de:7e:fa:03:a6: 3c:37:1d:10:2d:23:71:4b:1a:34:05:ce:2a:f3:09: 1b:92:bd:42:90:f5:13:2b:6b:88:8f:7d:76:2e:5f: 97:4c:fd:1f:03:2e:7e:80:c0:d6:57:7f:cc:ae:83: 34:bc:6e:55:1e:27:dc:2e:c1:4a:a2:ed:35:06:7c: 95:1f:c0:1d:08:18:b9:b5:e3:0f:25:f9:69:57:da: af:d7:39:53:10:19:a2:95:23:7a:5f:22:32:55:5e: fd:c1:3e:01:bf:39:65:91:9a:a2:80:f3:f8:35:7f: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:16:4D:C5:35:90:78:78:30:C2:BE:04:66:10:8D:1D:71:EA:55:DA X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c1:b8:ce:09:8e:ec:b6:a0:a6:ad:98:60:b6:46:9c:04:1f: bf:d4:9a:3e:6f:20:dd:4b:a7:b1:99:d3:05:66:17:0d:f9:85: a8:26:bc:79:e1:39:3f:c5:f0:67:96:ad:9e:06:cc:a2:cd:35: 8d:56:c2:a2:e7:ad:b1:e3:48:5a:95:9d:ed:63:fa:bb:83:28: a4:e9:87:04:7e:f6:4f:90:d2:91:56:7e:4a:68:a7:44:c0:7b: 86:75:ef:56:bb:0d:c0:10:c2:bc:92:83:19:62:b1:29:3f:ec: c9:2a:f4:a4:1d:e9:80:2b:89:66:62:fe:8e:54:0e:70:d3:e8: 89:a8:ce:9d:f0:f9:ce:b2:1a:d1:e9:52:5f:07:37:2b:4a:dc: 73:75:c8:e4:0e:19:f9:8d:73:8f:62:89:70:43:c8:36:25:47: b7:87:83:24:c5:5a:e9:38:53:20:25:e8:87:31:97:05:eb:36: 18:b0:a0:87:7c:56:ce:3c:86:5b:a9:eb:6a:c6:04:bc:36:b1: 4e:30:cd:c9:38:65:9e:6a:54:5c:1d:f6:c1:39:4d:8c:cb:97: 79:80:32:9c:d0:c1:69:f3:4a:19:3c:39:a7:21:73:5c:b1:f6: d7:1c:8c:23:d6:b0:f1:1f:08:95:f0:ca:f4:0c:6d:e2:43:f5: 20:6b:c4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwNDI0MjI0NzU3WhcNMjUwNTAxMjI0NzU3WjAYMRYwFAYD VQQDEw02ODBhYmY5ZC0yYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vnPAveAWh48LB3qglVjmzElUkrnOADS96Heis++hdrlQMg+M69Flu1NZa8+ Svi/ooQeQyEB6CGiTOhr74LlM8NYERUhc9OFz8ijQJIuBZkWzY2lkNhunTA7o0lb cxaJ9JeegSssBc9MdpRqqzY3KrucsdNUijp/7s/3FCphZwC+n2CnSqd3ZWEQGtoq EWeA3n76A6Y8Nx0QLSNxSxo0Bc4q8wkbkr1CkPUTK2uIj312Ll+XTP0fAy5+gMDW V3/MroM0vG5VHifcLsFKou01BnyVH8AdCBi5teMPJflpV9qv1zlTEBmilSN6XyIy VV79wT4BvzllkZqigPP4NX9nLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8WTcU1 kHh4MMK+BGYQjR1x6lXaMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwbjOCY7stqCmrZhgtkacBB+/1Jo+byDdS6exmdMFZhcN+YWoJrx5 4Tk/xfBnlq2eBsyizTWNVsKi562x40halZ3tY/q7gyik6YcEfvZPkNKRVn5KaKdE wHuGde9Wuw3AEMK8koMZYrEpP+zJKvSkHemAK4lmYv6OVA5w0+iJqM6d8PnOshrR 6VJfBzcrStxzdcjkDhn5jXOPYolwQ8g2JUe3h4MkxVrpOFMgJeiHMZcF6zYYsKCH fFbOPIZbqetqxgS8NrFOMM3JOGWealRcHfbBOU2My5d5gDKc0MFp80oZPDmnIXNc sfbXHIwj1rDxHwiV8Mr0DG3iQ/Uga8Ri -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:03 2025 by rpki-client