$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: 1/lAwVA9P8a9RMJ8VUiraR9BpXlN1Fm6TyebEDLI11U= Subject key identifier: 05:03:50:07:93:A8:B1:BF:45:6B:10:E4:CA:57:26:FD:35:13:04:FF Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 01FC Signing time: Fri 25 Apr 2025 01:49:35 +0000 Manifest this update: Fri 25 Apr 2025 01:49:35 +0000 Manifest next update: Fri 02 May 2025 01:49:35 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: R3lhJ3LJ/9Fe8yorRwsdDdQT1OMGjlCvkTdtfz76RKY=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Apr 25 01:49:35 2025 GMT Not After : May 2 01:49:35 2025 GMT Subject: CN=680aea2f-9041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:11:0d:e7:5f:ed:47:9a:e6:fc:22:7c:65: 77:35:4b:31:ea:98:36:89:ae:c9:3b:f5:0c:a4:21: bb:ae:70:39:e9:c4:a4:7d:0e:df:04:5a:ad:fe:d0: 5a:dc:8a:54:3c:19:9e:23:82:57:39:63:98:c0:ca: e2:88:62:22:0d:03:68:81:46:ea:a7:48:ca:27:cc: 16:eb:59:8a:db:89:df:7d:96:32:c0:e0:56:4c:90: 24:7e:0e:ef:11:59:70:28:50:fe:fc:a7:65:96:15: cc:ea:37:06:79:21:0e:10:83:56:81:45:b6:bb:4e: 22:84:1a:d8:2a:18:fb:7b:40:cb:ea:62:78:29:57: 22:1c:e2:d2:08:59:36:2b:c3:37:ed:98:98:d8:a4: a3:c4:d7:ce:19:c5:2a:c6:f1:d2:3a:99:01:8b:a9: 93:19:47:d4:da:4b:22:5d:42:2a:25:00:0d:67:d0: 82:6f:a7:f8:1e:36:f4:70:10:7b:af:85:41:a8:1b: b2:87:ae:c2:2e:6b:b7:e9:72:f6:58:c6:b0:2a:08: 75:1d:86:80:32:25:0c:6b:11:bd:04:8c:6b:0c:6a: 78:21:a9:53:1d:d1:5b:2a:08:dd:69:52:1b:ce:67: 8c:01:34:80:14:bc:89:4e:7e:d0:9e:fa:19:72:cb: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:50:07:93:A8:B1:BF:45:6B:10:E4:CA:57:26:FD:35:13:04:FF X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:53:1a:e9:b8:1e:54:0b:b3:f6:10:15:eb:10:94:0a:53:a1: 7f:ee:f3:1f:c8:b6:fb:37:d2:90:d1:0d:38:fa:7d:a9:6e:3b: 22:18:20:6c:19:a3:e0:86:62:d9:0f:d3:d4:ec:10:dc:a6:2c: 3e:4e:58:ba:68:b0:7d:b9:1c:b7:18:18:bb:2a:f6:03:6c:e4: 81:a6:15:de:67:03:cb:50:15:c5:43:c3:de:e9:72:f6:aa:50: 64:c7:50:3b:13:ad:25:92:01:3d:51:f2:3d:bd:0c:d1:b9:76: 12:8e:94:03:66:39:32:ed:d9:e6:79:6b:64:b3:b1:93:0e:5d: 6a:3f:b6:69:9e:65:f8:08:a9:f2:4d:9c:c6:3d:ca:c2:b8:9f: 36:68:2e:c4:9e:22:06:34:62:59:fc:de:2e:14:09:1c:8e:83: a9:38:b5:79:49:c4:13:e0:9a:de:1f:d0:90:74:64:80:d8:c2: bf:4e:5d:ce:42:db:84:93:c8:3f:02:6f:91:9a:a4:5b:63:7d: d0:48:a5:05:ed:3e:a1:01:48:2f:ed:16:ea:69:8f:24:65:9c: 9f:1c:f4:6e:e6:28:70:9d:2b:e2:69:9e:6f:c7:b2:47:ce:30: db:b7:fc:e7:84:55:67:a5:f7:b5:ab:86:9f:4d:5c:27:25:f1: 57:21:26:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwNDI1MDE0OTM1WhcNMjUwNTAyMDE0OTM1WjAYMRYwFAYD VQQDEw02ODBhZWEyZi05MDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulYRDedf7Uea5vwifGV3NUsx6pg2ia7JO/UMpCG7rnA56cSkfQ7fBFqt/tBa 3IpUPBmeI4JXOWOYwMriiGIiDQNogUbqp0jKJ8wW61mK24nffZYywOBWTJAkfg7v EVlwKFD+/KdllhXM6jcGeSEOEINWgUW2u04ihBrYKhj7e0DL6mJ4KVciHOLSCFk2 K8M37ZiY2KSjxNfOGcUqxvHSOpkBi6mTGUfU2ksiXUIqJQANZ9CCb6f4Hjb0cBB7 r4VBqBuyh67CLmu36XL2WMawKgh1HYaAMiUMaxG9BIxrDGp4IalTHdFbKgjdaVIb zmeMATSAFLyJTn7QnvoZcsveGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUDUAeT qLG/RWsQ5MpXJv01EwT/MB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnUxrpuB5UC7P2EBXrEJQKU6F/7vMfyLb7N9KQ0Q04+n2pbjsiGCBs GaPghmLZD9PU7BDcpiw+Tli6aLB9uRy3GBi7KvYDbOSBphXeZwPLUBXFQ8Pe6XL2 qlBkx1A7E60lkgE9UfI9vQzRuXYSjpQDZjky7dnmeWtks7GTDl1qP7ZpnmX4CKny TZzGPcrCuJ82aC7EniIGNGJZ/N4uFAkcjoOpOLV5ScQT4JreH9CQdGSA2MK/Tl3O QtuEk8g/Am+RmqRbY33QSKUF7T6hAUgv7RbqaY8kZZyfHPRu5ihwnSviaZ5vx7JH zjDbt/znhFVnpfe1q4afTVwnJfFXISZK -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:23 2025 by rpki-client