$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: eruHOlpmbyL/mV4vkwq5+t6Sw5fdMhDEBtj9D6dinSo= Subject key identifier: 58:42:39:9A:F9:7A:DB:DA:22:5B:3C:9C:0A:F4:56:3B:99:04:F3:86 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01AD Signing time: Fri 25 Apr 2025 02:24:52 +0000 Manifest this update: Fri 25 Apr 2025 02:24:51 +0000 Manifest next update: Fri 02 May 2025 02:24:51 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: uL9KkurHojEUqmM8NYGysVEf/Q5bA0DmX6zBAQW/1XU=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Apr 25 02:24:51 2025 GMT Not After : May 2 02:24:51 2025 GMT Subject: CN=680af273-f15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:98:28:76:38:49:0e:34:13:3b:ea:a8:0d: 94:8d:63:86:f1:b5:f4:9a:31:ba:56:57:b3:cf:a8: 35:09:3f:66:cc:ea:82:51:79:e8:b1:84:67:49:9d: 14:a7:6a:bd:03:95:4f:3d:a9:68:a0:d8:ca:d9:94: 2c:37:37:50:33:ca:18:a9:ea:a1:97:3a:4f:86:ed: ae:24:50:ca:4f:36:30:67:5f:9b:cd:76:fd:40:b4: 7b:0b:78:07:d5:da:fe:d9:bd:01:7e:a2:d0:34:01: 90:fe:8b:fb:22:60:ec:3a:cc:9a:b1:31:32:34:3f: 78:ec:54:8d:38:b6:fa:9f:8d:40:1c:f1:02:89:f3: fd:1b:ca:ff:eb:7e:ba:99:51:ef:bb:fe:ed:fc:72: ba:66:1c:07:88:6c:9b:a4:1e:84:a5:9a:fe:73:b2: a5:33:ff:80:56:93:27:b5:9b:6f:62:f8:e3:a4:2a: 66:56:1c:55:1b:ea:e9:dc:9d:cc:ce:e0:98:70:be: f8:32:35:b2:52:f2:77:99:bd:d6:50:aa:dc:f8:dc: e7:92:67:0e:ff:cb:ae:0e:f6:ee:dc:d5:5d:48:a6: 61:c1:24:a1:df:b4:45:1a:26:61:da:d3:e5:f5:54: 08:0b:0f:30:05:7b:2a:3f:39:70:7f:3a:23:a1:85: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:42:39:9A:F9:7A:DB:DA:22:5B:3C:9C:0A:F4:56:3B:99:04:F3:86 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d7:f3:11:d2:f6:ca:5d:2d:a2:4d:5a:ab:14:d5:8f:ff:07: 57:3a:19:82:54:17:d3:2a:36:01:11:ab:a6:a0:c9:53:34:06: 82:41:fc:71:e3:84:37:a0:db:64:1c:5d:30:94:bd:51:12:9a: e7:0c:c9:4f:35:08:0c:17:d6:9e:ab:00:0c:5d:bd:3d:76:fc: 7f:27:12:44:f7:2f:87:19:8a:87:b6:e6:e5:e3:24:09:40:8d: 62:06:45:7e:35:e9:01:a1:a6:b1:e2:e2:db:9b:f0:92:8e:1d: e3:eb:29:a0:19:39:01:eb:04:83:9d:eb:da:18:d2:ae:eb:2e: fe:84:75:fd:a7:4b:2d:69:00:17:08:f4:14:8b:65:7c:60:f9: b6:d7:0e:33:8a:d4:23:0d:36:4c:70:0b:5f:ba:7b:2c:3d:6f: 60:f5:1b:9e:93:5b:a5:59:e1:aa:24:90:a8:01:be:b6:0d:ed: 6c:94:5d:d2:df:11:8a:3e:bf:db:da:af:67:0a:e1:07:f8:e5: 47:cc:f1:24:de:29:c0:4d:3d:e3:62:d5:8c:70:5b:3a:59:ae: 44:10:c6:0c:07:de:8e:cf:64:30:f1:98:f2:44:ee:0f:79:df: ed:4e:b4:c2:54:ad:e2:00:9b:a2:a7:70:ec:62:4c:30:e6:56: 72:14:c4:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwNDI1MDIyNDUxWhcNMjUwNTAyMDIyNDUxWjAYMRYwFAYD VQQDEw02ODBhZjI3My1mMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f6YKHY4SQ40EzvqqA2UjWOG8bX0mjG6Vlezz6g1CT9mzOqCUXnosYRnSZ0U p2q9A5VPPalooNjK2ZQsNzdQM8oYqeqhlzpPhu2uJFDKTzYwZ1+bzXb9QLR7C3gH 1dr+2b0BfqLQNAGQ/ov7ImDsOsyasTEyND947FSNOLb6n41AHPECifP9G8r/6366 mVHvu/7t/HK6ZhwHiGybpB6EpZr+c7KlM/+AVpMntZtvYvjjpCpmVhxVG+rp3J3M zuCYcL74MjWyUvJ3mb3WUKrc+NznkmcO/8uuDvbu3NVdSKZhwSSh37RFGiZh2tPl 9VQICw8wBXsqPzlwfzojoYULnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhCOZr5 etvaIls8nAr0VjuZBPOGMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB31/MR0vbKXS2iTVqrFNWP/wdXOhmCVBfTKjYBEaumoMlTNAaCQfxx 44Q3oNtkHF0wlL1REprnDMlPNQgMF9aeqwAMXb09dvx/JxJE9y+HGYqHtubl4yQJ QI1iBkV+NekBoaax4uLbm/CSjh3j6ymgGTkB6wSDnevaGNKu6y7+hHX9p0staQAX CPQUi2V8YPm21w4zitQjDTZMcAtfunssPW9g9Ruek1ulWeGqJJCoAb62De1slF3S 3xGKPr/b2q9nCuEH+OVHzPEk3inATT3jYtWMcFs6Wa5EEMYMB96Oz2Qw8ZjyRO4P ed/tTrTCVK3iAJuip3DsYkww5lZyFMTZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:46 2025 by rpki-client