$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: YfTrk6Y1hLBknpEbO4JoRwcEGMzCaYAlKh+Z3yU2ri4= Subject key identifier: C6:CC:15:81:0A:9F:42:3F:0E:3C:DE:59:50:AE:DA:18:FE:AC:C0:52 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0F79 Signing time: Thu 24 Apr 2025 17:50:12 +0000 Manifest this update: Thu 24 Apr 2025 17:50:12 +0000 Manifest next update: Thu 01 May 2025 17:50:12 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: e9EIl3CtVxXK/WXbQtHDX8aRzQ5pqbJIQy7X677ta0Q=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Apr 24 17:50:12 2025 GMT Not After : May 1 17:50:12 2025 GMT Subject: CN=680a79d4-0507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:a8:1f:f3:1e:a0:98:b2:98:e7:9f:a0:c4: 35:9d:bc:b4:02:db:42:ab:09:28:0f:35:57:ae:9b: 51:c6:9a:2e:58:0c:16:72:57:d9:40:59:56:24:1a: 4a:b1:eb:76:4c:fc:09:5c:d8:cc:ea:9b:6e:f2:4d: a8:60:c6:d8:4d:e7:6e:95:75:48:8e:5a:a5:8e:0f: 0f:fd:b3:88:1e:30:c9:da:4e:de:df:ab:56:5b:e5: 3a:0c:f5:e3:63:37:70:2f:dc:5a:14:89:36:c1:a4: a9:ed:b8:7b:44:d4:4e:54:42:54:06:76:db:ff:c0: 36:ee:52:23:17:6b:79:e2:1a:86:37:9d:a1:90:ea: 9a:33:a3:06:fe:b9:8a:80:28:73:16:e4:2e:d3:6e: 58:35:da:1a:38:7e:50:aa:20:a3:00:1e:37:d3:f7: eb:ca:6b:3c:fe:3c:f7:f9:e9:f5:34:02:2f:d7:7d: da:19:04:93:5a:ec:e2:3b:ba:c0:79:db:0f:d4:6e: 3e:ba:2c:d7:be:48:2d:7c:03:c5:e9:5f:11:72:83: 0a:33:05:4b:f7:2b:dd:67:f9:5d:bb:3b:d8:a3:7c: c5:35:f0:8f:b8:8d:7f:76:ee:7b:bc:0a:a4:ff:8f: 86:58:92:b9:02:a2:6a:61:a2:d8:41:20:13:bd:29: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:15:81:0A:9F:42:3F:0E:3C:DE:59:50:AE:DA:18:FE:AC:C0:52 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5b:da:37:55:32:fa:66:75:83:81:d4:62:bb:2a:49:32:77: d4:7c:f8:31:b5:98:f4:fd:0b:65:8a:70:e5:f2:30:15:a0:68: 63:20:c7:7f:62:8b:ff:a5:d7:ec:ff:2d:c4:3d:ca:80:2c:d9: f4:a7:4b:f3:be:77:09:61:5f:3f:76:7d:10:38:d0:89:ef:af: ae:65:a5:9a:93:ff:67:1e:23:ce:5f:7c:1d:5a:e0:8c:65:b4: 02:c1:37:d3:0a:14:1d:92:3d:6b:61:c9:1f:35:9c:09:36:c9: 1b:81:ee:57:1a:b4:25:cf:7b:fc:8c:11:b0:29:7d:ac:37:b7: 29:15:f9:24:8d:21:81:a2:4f:40:d7:64:db:26:d2:06:c1:c2: 65:8a:d4:6f:20:38:80:a6:c9:48:80:35:e6:c4:4f:f2:fb:9c: 1f:d7:ac:a6:27:ae:eb:6d:9b:8d:24:3f:ae:23:0a:28:1b:bd: 56:3e:34:f1:fe:a2:f7:29:06:9e:c2:34:36:12:87:c1:44:cd: 10:e0:b8:21:11:e2:8e:1a:6a:2a:e9:03:0a:b8:6f:92:01:0a: 98:d9:ee:4b:51:f6:23:07:2d:b3:e7:d0:10:a7:82:c4:7a:e3: cc:90:19:60:5d:32:a5:1d:5b:35:69:60:6f:36:61:03:30:1b: 3f:d2:3b:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNDI0MTc1MDEyWhcNMjUwNTAxMTc1MDEyWjAYMRYwFAYD VQQDEw02ODBhNzlkNC0wNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1+oH/MeoJiymOefoMQ1nby0AttCqwkoDzVXrptRxpouWAwWclfZQFlWJBpK set2TPwJXNjM6ptu8k2oYMbYTedulXVIjlqljg8P/bOIHjDJ2k7e36tWW+U6DPXj YzdwL9xaFIk2waSp7bh7RNROVEJUBnbb/8A27lIjF2t54hqGN52hkOqaM6MG/rmK gChzFuQu025YNdoaOH5QqiCjAB430/fryms8/jz3+en1NAIv133aGQSTWuziO7rA edsP1G4+uizXvkgtfAPF6V8RcoMKMwVL9yvdZ/lduzvYo3zFNfCPuI1/du57vAqk /4+GWJK5AqJqYaLYQSATvSku1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbMFYEK n0I/DjzeWVCu2hj+rMBSMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsW9o3VTL6ZnWDgdRiuypJMnfUfPgxtZj0/QtlinDl8jAVoGhjIMd/ Yov/pdfs/y3EPcqALNn0p0vzvncJYV8/dn0QONCJ76+uZaWak/9nHiPOX3wdWuCM ZbQCwTfTChQdkj1rYckfNZwJNskbge5XGrQlz3v8jBGwKX2sN7cpFfkkjSGBok9A 12TbJtIGwcJlitRvIDiApslIgDXmxE/y+5wf16ymJ67rbZuNJD+uIwooG71WPjTx /qL3KQaewjQ2EofBRM0Q4LghEeKOGmoq6QMKuG+SAQqY2e5LUfYjBy2z59AQp4LE euPMkBlgXTKlHVs1aWBvNmEDMBs/0jvE -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:09 2025 by rpki-client