$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: 5ZwHWncSU0vKjz7UthM7wMFXGZNClkN8tqZ5JAQFPgc= Subject key identifier: 67:65:22:A8:25:6F:1F:63:12:6C:13:4E:4A:3B:A8:F3:7F:1F:C4:B8 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0C3A Signing time: Thu 24 Apr 2025 18:37:17 +0000 Manifest this update: Thu 24 Apr 2025 18:37:17 +0000 Manifest next update: Thu 01 May 2025 18:37:17 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: QTqO+7NmM6hWq1ZWxzzKV4pjy/QiFz5xwgXIsdkzYIE=) 2: 1B07853EA4F711EF84B06E42C4F9AE02.roa (hash: Gm1fun7pnQKByDLxI/azTsTDDryvchojFZK6+n4D1PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Apr 24 18:37:17 2025 GMT Not After : May 1 18:37:17 2025 GMT Subject: CN=680a84dd-a439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fb:be:c7:2b:9e:36:34:32:2f:94:d1:2d:31: e1:92:0b:c5:32:5a:05:fe:56:0f:66:72:30:8d:e2: 07:d3:7b:02:6f:ab:7d:0d:18:ad:17:ab:07:1d:3b: 85:06:b8:68:98:73:25:53:a3:eb:f4:88:47:68:a2: 21:07:06:64:9c:5c:46:b3:e1:eb:3d:8b:b9:59:1c: 0e:f8:f5:91:90:ee:d0:75:ea:92:70:2b:41:84:23: 59:2b:71:55:cd:32:a7:bc:4f:80:98:56:6d:2a:f0: 72:35:ba:73:0e:fc:45:26:29:ff:d5:e1:8c:11:b0: 54:67:8d:1d:19:3b:60:0a:bd:ad:39:44:df:78:b4: fa:23:ba:0f:70:86:0f:bb:53:9d:e5:c5:08:ec:f2: 8f:a4:c8:35:e4:3c:27:45:cb:9f:c8:0e:ef:1b:9f: 0c:82:16:36:cf:f3:bc:03:aa:35:a2:1d:f8:9e:ea: 6f:6c:4d:08:26:ea:2f:fe:03:bb:4a:bd:63:47:da: ec:1b:cc:33:79:7a:bc:99:61:9a:de:76:4e:a7:b7: bc:71:ee:dc:ff:f2:79:c2:b5:99:58:f0:58:8a:73: aa:ef:43:96:af:a6:c9:98:6c:9a:71:4a:21:12:c1: fb:e7:48:ee:3d:1c:0b:cb:29:6b:94:e7:ca:a1:35: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:22:A8:25:6F:1F:63:12:6C:13:4E:4A:3B:A8:F3:7F:1F:C4:B8 X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f5:a7:a8:9e:d7:67:37:28:79:96:9e:87:6e:19:68:d8:e2: 11:1d:f0:84:9c:f7:ac:9a:48:f3:6c:f3:4a:ce:cb:00:cf:a2: 6d:53:6a:62:10:73:f0:ae:bf:a1:c2:f6:99:8f:bc:e1:45:33: a2:b9:fa:3a:e5:06:92:2b:b3:e2:67:6f:bc:ef:51:22:2c:ad: 0d:82:58:61:87:ac:ae:2c:0e:13:b8:3a:34:5d:d6:e7:f4:e4: 80:e7:36:d4:6e:81:d3:c5:19:ee:f8:66:35:86:33:c7:11:03: 4e:bb:d9:5d:32:fb:10:26:16:3f:58:21:05:2b:10:4c:74:95: 06:2f:e6:d0:ca:2a:f3:83:c9:2c:7d:72:fb:80:d9:c5:67:89: 14:81:c6:f4:13:e2:9f:ab:f7:b0:94:29:20:7f:67:0b:37:6b: 82:12:c2:25:60:9f:df:e0:e1:5b:25:02:3d:d1:56:ad:02:f7: 10:ce:4d:79:70:78:d8:bc:97:7a:0f:34:8c:96:98:c0:00:97: 8a:c8:ec:d9:14:75:0c:47:98:c6:09:3f:8f:e0:0a:58:78:0b: 8d:54:19:05:3a:a6:29:07:d8:03:7e:47:30:1d:11:0f:17:5e: 8a:8b:6a:82:68:ad:d6:1d:98:6a:cf:1c:e4:7d:85:47:ab:51: 01:4c:29:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUwNDI0MTgzNzE3WhcNMjUwNTAxMTgzNzE3WjAYMRYwFAYD VQQDEw02ODBhODRkZC1hNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vu+xyueNjQyL5TRLTHhkgvFMloF/lYPZnIwjeIH03sCb6t9DRitF6sHHTuF BrhomHMlU6Pr9IhHaKIhBwZknFxGs+HrPYu5WRwO+PWRkO7QdeqScCtBhCNZK3FV zTKnvE+AmFZtKvByNbpzDvxFJin/1eGMEbBUZ40dGTtgCr2tOUTfeLT6I7oPcIYP u1Od5cUI7PKPpMg15DwnRcufyA7vG58MghY2z/O8A6o1oh34nupvbE0IJuov/gO7 Sr1jR9rsG8wzeXq8mWGa3nZOp7e8ce7c//J5wrWZWPBYinOq70OWr6bJmGyacUoh EsH750juPRwLyylrlOfKoTX0dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdlIqgl bx9jEmwTTko7qPN/H8S4MB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB99aeontdnNyh5lp6Hbhlo2OIRHfCEnPesmkjzbPNKzssAz6JtU2pi EHPwrr+hwvaZj7zhRTOiufo65QaSK7PiZ2+871EiLK0Nglhhh6yuLA4TuDo0Xdbn 9OSA5zbUboHTxRnu+GY1hjPHEQNOu9ldMvsQJhY/WCEFKxBMdJUGL+bQyirzg8ks fXL7gNnFZ4kUgcb0E+Kfq/ewlCkgf2cLN2uCEsIlYJ/f4OFbJQI90VatAvcQzk15 cHjYvJd6DzSMlpjAAJeKyOzZFHUMR5jGCT+P4ApYeAuNVBkFOqYpB9gDfkcwHREP F16Ki2qCaK3WHZhqzxzkfYVHq1EBTClC -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:21 2025 by rpki-client