$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: LEk5bVfQQb7+vaMvtJKRcZiTB3JBBzWnnWFXwFShzd8= Subject key identifier: 68:47:F7:23:66:83:1A:F6:74:40:EC:C6:5D:10:89:F1:39:5F:CC:5E Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 0667 Signing time: Thu 24 Apr 2025 22:09:56 +0000 Manifest this update: Thu 24 Apr 2025 22:09:56 +0000 Manifest next update: Thu 01 May 2025 22:09:56 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: L43jxjOyS2WjMDqQd9Rby5PORv8VxPiQBTT1jcdL6+c=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: CJrC42fEHsl4a4F29xS9BQgj5clgqDLXG0TYmKNYKAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4, serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: Apr 24 22:09:56 2025 GMT Not After : May 1 22:09:56 2025 GMT Subject: CN=680ab6b4-4b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ff:55:13:1e:c0:a8:33:3c:0f:b2:34:b2:a3: 70:62:e9:ec:d8:c2:4f:58:2d:bd:48:3e:e1:14:5e: 56:7d:15:84:bb:47:aa:67:d7:f1:a9:72:33:cd:b8: 95:4d:b8:88:46:59:f7:50:2f:1b:dc:9f:69:89:3e: f8:12:9c:2a:4b:68:c3:fb:d8:38:82:e3:cb:34:0b: 12:d5:11:b8:f8:f5:9b:f8:c4:7d:61:00:01:f2:7b: 37:97:3c:7f:5a:4d:59:db:91:62:57:79:85:5a:5c: 4c:af:1b:3e:df:d6:2a:0c:a1:a2:8e:b7:cd:c2:01: 64:87:9f:37:a6:00:ea:10:76:8d:0d:ce:2f:68:c0: 67:b9:cb:b9:b2:11:33:c5:67:70:01:44:3c:9b:a5: e6:35:9e:1b:13:b8:6f:b3:db:cc:d3:46:9a:0c:33: 2a:86:bd:a3:ca:27:27:8b:45:75:87:65:b5:e8:83: 81:4d:9a:99:20:5f:16:62:8b:5f:5b:f1:54:a6:3a: 32:64:21:85:b0:28:ac:50:df:e1:ba:be:29:b5:2d: 15:e3:16:d4:da:be:ad:ba:b1:3a:0b:0f:d0:a4:bd: b8:82:66:d4:40:27:3f:63:08:82:76:f1:a9:07:aa: dd:db:21:35:80:fb:43:03:96:70:4e:7c:41:6e:ca: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:F7:23:66:83:1A:F6:74:40:EC:C6:5D:10:89:F1:39:5F:CC:5E X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:22:86:02:cf:96:ee:59:0b:cd:37:a3:ba:7f:a0:7e:5f:15: 04:56:08:ee:54:59:54:05:76:71:89:4d:01:f2:34:35:de:47: de:70:08:47:bc:12:c2:50:27:8a:81:88:ce:bc:4e:db:6b:20: 54:6f:22:47:5a:90:2e:11:9d:1f:d4:86:cb:c0:44:5f:b0:d0: a7:b1:4e:62:7a:20:4f:9b:b6:41:b9:de:b6:df:53:cd:a1:88: 42:35:74:c8:84:9d:e3:61:97:b4:ea:68:36:fe:b8:73:8f:4e: f5:46:49:eb:d7:f5:a0:42:08:e4:d3:4e:1f:42:63:45:8e:95: 11:e9:a6:71:45:1a:d2:a2:85:87:f9:97:28:70:3d:7e:a7:f0: aa:c2:80:55:f5:c7:be:61:3c:ad:35:3a:08:59:0f:40:2e:98: 9c:7c:ea:a6:a5:25:a3:78:e7:5c:99:58:0b:a6:ec:af:a2:bb: 25:d3:78:92:f4:41:3b:99:b1:43:d9:8b:50:a3:82:d5:bb:4a: 09:77:89:6c:c6:1d:96:2f:37:70:1f:d4:69:d5:93:81:b3:f8: 9b:19:e2:0c:54:05:4d:d8:99:2a:e7:03:36:f3:03:ed:a1:da: 92:68:c7:47:ed:91:3e:ab:ac:10:57:91:1e:05:e2:6a:cf:4d: c7:74:a6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjUwNDI0MjIwOTU2WhcNMjUwNTAxMjIwOTU2WjAYMRYwFAYD VQQDEw02ODBhYjZiNC00Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7v9VEx7AqDM8D7I0sqNwYuns2MJPWC29SD7hFF5WfRWEu0eqZ9fxqXIzzbiV TbiIRln3UC8b3J9piT74EpwqS2jD+9g4guPLNAsS1RG4+PWb+MR9YQAB8ns3lzx/ Wk1Z25FiV3mFWlxMrxs+39YqDKGijrfNwgFkh583pgDqEHaNDc4vaMBnucu5shEz xWdwAUQ8m6XmNZ4bE7hvs9vM00aaDDMqhr2jyicni0V1h2W16IOBTZqZIF8WYotf W/FUpjoyZCGFsCisUN/hur4ptS0V4xbU2r6turE6Cw/QpL24gmbUQCc/YwiCdvGp B6rd2yE1gPtDA5ZwTnxBbsqlKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhH9yNm gxr2dEDsxl0QifE5X8xeMB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVIoYCz5buWQvNN6O6f6B+XxUEVgjuVFlUBXZxiU0B8jQ13kfecAhH vBLCUCeKgYjOvE7bayBUbyJHWpAuEZ0f1IbLwERfsNCnsU5ieiBPm7ZBud6231PN oYhCNXTIhJ3jYZe06mg2/rhzj071Rknr1/WgQgjk004fQmNFjpUR6aZxRRrSooWH +ZcocD1+p/CqwoBV9ce+YTytNToIWQ9ALpicfOqmpSWjeOdcmVgLpuyvorsl03iS 9EE7mbFD2YtQo4LVu0oJd4lsxh2WLzdwH9Rp1ZOBs/ibGeIMVAVN2Jkq5wM28wPt odqSaMdH7ZE+q6wQV5EeBeJqz03HdKZN -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:39 2025 by rpki-client