$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: d5CxQYzMK21+lTSvbcQ+NiC+vT6zerIL2gue3SIVL0I= Subject key identifier: 0D:39:16:44:06:24:D8:F0:A0:63:47:17:B9:FC:53:DA:D4:BC:91:92 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FA9 Signing time: Thu 24 Apr 2025 17:31:08 +0000 Manifest this update: Thu 24 Apr 2025 17:31:07 +0000 Manifest next update: Thu 01 May 2025 17:31:07 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: MwpjOe5OELrVhcMG4sY4jPh9lxpuxSRjixRjCcZheGQ=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4021 (0xfb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Apr 24 17:31:07 2025 GMT Not After : May 1 17:31:07 2025 GMT Subject: CN=680a755b-833d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:da:d4:ad:cc:25:49:71:5f:3e:d7:50:eb: 0c:9a:d3:cb:8f:be:69:c5:6c:e0:3a:47:73:eb:f3: c4:8c:a7:8c:dc:9f:68:b3:90:01:08:0b:c2:ef:7c: 7a:ee:f6:ab:55:29:42:88:36:21:11:94:19:1f:dd: 97:96:62:96:69:c0:9d:b3:68:5b:9f:5f:cc:dd:62: 86:f2:08:30:d8:7b:36:c6:5d:a6:d8:77:2c:45:f4: 66:28:b5:6c:67:f8:d6:8b:21:cf:ef:be:f1:11:3b: 82:df:9b:2e:30:61:4f:df:d7:30:a5:eb:24:62:7f: f0:d6:8b:c4:dd:83:e2:9f:0c:35:09:cb:71:1f:37: 70:7a:8f:4c:d8:4e:c0:91:54:06:79:7d:22:91:d6: 40:7f:6a:09:d6:17:90:06:7c:bd:82:86:48:99:6b: 01:85:aa:19:b6:55:3c:de:82:5f:d3:b5:67:39:0e: 70:44:dc:1a:16:32:5e:57:2b:f4:cd:1e:dd:97:dd: 26:5f:62:e9:c3:9a:ef:24:c6:48:5e:4b:70:6f:e5: b0:90:c4:39:1c:64:1f:6e:c1:a4:f6:e3:2b:21:9a: cf:4f:68:e7:ee:50:0c:9f:bd:8b:d3:03:01:4d:7d: a1:78:03:73:28:42:c4:db:9c:41:26:96:aa:c5:a1: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:39:16:44:06:24:D8:F0:A0:63:47:17:B9:FC:53:DA:D4:BC:91:92 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3d:93:de:43:8c:07:bc:13:10:88:8d:9e:85:3c:e9:7e:f8: 59:b2:71:d8:83:c4:7c:db:6f:a9:75:d9:8b:f8:89:a9:f9:f9: ac:02:6a:3f:be:7a:2c:80:61:1c:06:b0:7d:d0:ff:ac:82:4f: c7:3d:97:78:77:e2:2a:2d:e3:79:57:de:39:69:5f:b6:85:aa: f7:84:54:e4:d2:29:5a:7b:0e:05:f0:b4:e7:25:0d:77:3c:50: 74:6e:01:0f:54:1c:d9:4b:f7:f7:4a:ab:17:1d:5b:e7:44:f9: 05:b2:5a:11:34:1a:b8:7d:6d:10:82:48:73:54:80:78:95:41: 96:f4:16:62:82:ca:f0:d1:ad:d6:e1:57:c0:8e:ec:72:4f:48: fd:b8:b1:6e:c7:f5:85:89:42:a3:9b:fa:53:da:0e:ee:eb:1e: f8:b3:f0:44:11:4a:f1:f6:08:b8:58:2e:57:8a:15:38:d2:63: 39:ed:4d:74:02:51:2a:07:4a:72:68:52:e5:9b:12:e7:a0:17: 14:e8:24:ed:65:4e:a0:37:17:42:4a:80:f5:e6:d3:85:a0:10: 4f:ef:f4:8d:54:89:87:f1:cd:ae:45:b3:67:9e:61:36:75:e4: 28:21:3b:d6:ef:d6:2b:df:54:37:58:0b:ae:56:42:dd:81:8f: b5:66:99:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwNDI0MTczMTA3WhcNMjUwNTAxMTczMTA3WjAYMRYwFAYD VQQDEw02ODBhNzU1Yi04MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLza1K3MJUlxXz7XUOsMmtPLj75pxWzgOkdz6/PEjKeM3J9os5ABCAvC73x6 7varVSlCiDYhEZQZH92XlmKWacCds2hbn1/M3WKG8ggw2Hs2xl2m2HcsRfRmKLVs Z/jWiyHP777xETuC35suMGFP39cwpeskYn/w1ovE3YPinww1CctxHzdweo9M2E7A kVQGeX0ikdZAf2oJ1heQBny9goZImWsBhaoZtlU83oJf07VnOQ5wRNwaFjJeVyv0 zR7dl90mX2Lpw5rvJMZIXktwb+WwkMQ5HGQfbsGk9uMrIZrPT2jn7lAMn72L0wMB TX2heANzKELE25xBJpaqxaEQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA05FkQG JNjwoGNHF7n8U9rUvJGSMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPZPeQ4wHvBMQiI2ehTzpfvhZsnHYg8R822+pddmL+Imp+fmsAmo/ vnosgGEcBrB90P+sgk/HPZd4d+IqLeN5V945aV+2har3hFTk0ilaew4F8LTnJQ13 PFB0bgEPVBzZS/f3SqsXHVvnRPkFsloRNBq4fW0QgkhzVIB4lUGW9BZigsrw0a3W 4VfAjuxyT0j9uLFux/WFiUKjm/pT2g7u6x74s/BEEUrx9gi4WC5XihU40mM57U10 AlEqB0pyaFLlmxLnoBcU6CTtZU6gNxdCSoD15tOFoBBP7/SNVImH8c2uRbNnnmE2 deQoITvW79Yr31Q3WAuuVkLdgY+1Zpnl -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:30 2025 by rpki-client