$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: 5LDqM+vS3iDkDu7/qdnUogFXxuHf3iFSaeEujAqyenQ= Subject key identifier: 7D:22:43:27:44:52:F5:AF:2A:15:E9:12:23:FC:E5:D1:47:98:34:1C Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F21 Signing time: Thu 24 Apr 2025 17:36:49 +0000 Manifest this update: Thu 24 Apr 2025 17:36:49 +0000 Manifest next update: Thu 01 May 2025 17:36:49 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: ODgL2c4zypO/jxO1XJph/ti2dTbS42l1Nt7KVtb/eO8=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Apr 24 17:36:49 2025 GMT Not After : May 1 17:36:49 2025 GMT Subject: CN=680a76b1-996d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:13:cc:98:84:bd:36:ac:3a:24:e5:5e:56: 34:9b:32:98:25:3c:5c:cf:e5:2f:14:11:53:dc:7d: c4:1b:69:a2:b2:fb:45:aa:6c:e0:11:c3:1b:76:30: 41:0e:24:3a:48:90:bf:25:b0:91:4f:50:59:5e:1d: 9a:67:d0:2a:2d:9a:94:d6:bd:32:0f:64:5e:1d:59: b9:e7:7e:c2:07:83:b3:34:01:13:22:95:71:2b:c8: 4f:c4:5b:ca:b8:39:74:be:64:bc:c4:92:7a:6a:da: be:55:c7:85:a9:c4:2b:ad:08:4f:9f:ad:ca:79:51: fd:ec:11:7d:c2:a8:13:7c:ef:7a:9a:e0:dd:99:6d: 36:23:1d:56:5a:24:08:11:5f:16:7e:0f:f5:4d:c0: 59:2e:9f:89:7c:82:ac:ed:06:b0:c2:87:c9:bd:25: ba:3e:e4:c8:e9:e5:fd:3f:61:dd:1e:d6:bc:db:40: 68:86:6e:c4:3e:49:5e:6b:15:c4:22:54:2a:e4:50: e2:2f:df:ee:90:86:8c:6d:9a:96:83:14:38:a2:60: 6a:ad:14:a7:2b:5d:8c:77:8a:f2:5c:43:f8:56:14: 84:dc:69:24:44:ae:22:f8:31:a4:20:b3:34:b2:df: b4:53:ad:46:08:23:09:bf:ae:7f:24:db:b2:64:40: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:22:43:27:44:52:F5:AF:2A:15:E9:12:23:FC:E5:D1:47:98:34:1C X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:41:3f:8c:84:be:64:25:ea:0a:0b:f0:74:29:c2:52:b5:f9: 71:bb:7b:44:ce:25:51:c2:53:ca:b4:1c:47:0a:ac:e9:a9:00: a8:ab:ac:73:de:24:00:39:21:02:25:89:cd:89:a6:ce:a0:cd: 44:8a:30:8e:1e:ed:1e:ae:b1:e2:a4:f4:bd:2d:1e:92:27:a7: 2d:5c:bb:f2:03:37:f4:40:ad:dc:6a:f3:82:27:96:c0:b3:f5: cd:a2:a5:f6:eb:89:a9:a7:10:61:d7:20:37:a3:00:bb:8e:e4: 29:e7:e6:3e:e5:14:39:5b:94:91:c2:01:28:ba:fc:f4:86:60: 7b:61:89:4e:65:8c:0a:91:51:66:23:85:55:f2:e7:74:60:33: 86:5c:be:64:e5:63:0c:55:fe:4e:ef:8a:27:5f:fd:a8:18:d0: 42:d9:f8:b1:59:57:45:61:28:c1:82:2e:2e:32:a7:76:0b:8d: 3b:e4:ea:bf:80:24:dd:73:03:36:e4:d5:25:5e:e0:d6:55:db: e5:b7:d7:71:20:1a:5c:10:d5:0a:ad:85:77:8e:90:20:46:e6: 6a:8f:7a:70:16:e4:4b:e0:cb:60:35:56:8f:8b:ba:a2:1b:ba: 47:b3:9a:47:36:4c:93:68:b5:36:8f:23:a6:11:7e:56:78:80: db:c3:67:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNDI0MTczNjQ5WhcNMjUwNTAxMTczNjQ5WjAYMRYwFAYD VQQDEw02ODBhNzZiMS05OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+sTzJiEvTasOiTlXlY0mzKYJTxcz+UvFBFT3H3EG2misvtFqmzgEcMbdjBB DiQ6SJC/JbCRT1BZXh2aZ9AqLZqU1r0yD2ReHVm5537CB4OzNAETIpVxK8hPxFvK uDl0vmS8xJJ6atq+VceFqcQrrQhPn63KeVH97BF9wqgTfO96muDdmW02Ix1WWiQI EV8Wfg/1TcBZLp+JfIKs7QawwofJvSW6PuTI6eX9P2HdHta820Bohm7EPkleaxXE IlQq5FDiL9/ukIaMbZqWgxQ4omBqrRSnK12Md4ryXEP4VhSE3GkkRK4i+DGkILM0 st+0U61GCCMJv65/JNuyZEDklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0iQydE UvWvKhXpEiP85dFHmDQcMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2QT+MhL5kJeoKC/B0KcJStflxu3tEziVRwlPKtBxHCqzpqQCoq6xz 3iQAOSECJYnNiabOoM1EijCOHu0errHipPS9LR6SJ6ctXLvyAzf0QK3cavOCJ5bA s/XNoqX264mppxBh1yA3owC7juQp5+Y+5RQ5W5SRwgEouvz0hmB7YYlOZYwKkVFm I4VV8ud0YDOGXL5k5WMMVf5O74onX/2oGNBC2fixWVdFYSjBgi4uMqd2C4075Oq/ gCTdcwM25NUlXuDWVdvlt9dxIBpcENUKrYV3jpAgRuZqj3pwFuRL4MtgNVaPi7qi G7pHs5pHNkyTaLU2jyOmEX5WeIDbw2fq -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:01 2025 by rpki-client