$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: /kR5ATn3DJZylfMZYK+xKuliH0gC57RKPnkN3Jl2SQ8= Subject key identifier: 20:D2:42:B4:77:E8:98:AA:0F:1B:3F:FC:A4:DB:E2:57:FC:9B:8A:BD Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 03DE Signing time: Fri 25 Apr 2025 00:22:23 +0000 Manifest this update: Fri 25 Apr 2025 00:22:22 +0000 Manifest next update: Fri 02 May 2025 00:22:22 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: vQPVWF1yUIck453JiegAbizyxozZbLvG41jhy1DVubg=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 03QgKXxeVhyZFOfohBjqcW0vK1f3sUZMJYpV9kpUL1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Apr 25 00:22:22 2025 GMT Not After : May 2 00:22:22 2025 GMT Subject: CN=680ad5bf-bbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:d3:07:6a:fb:8f:8d:93:ae:8e:a4:0e:84: a0:3f:67:77:33:7e:f1:99:90:96:64:e5:b5:b2:c0: e8:f7:da:32:e1:17:6b:d4:55:c0:13:ec:3b:b3:d1: bb:cb:b7:cf:52:c6:6c:90:f0:ba:d8:28:5c:02:d8: 74:dc:5f:24:a6:fd:c0:6b:2d:ea:99:7a:d1:df:c9: 4a:8d:40:2b:0e:5a:19:65:5b:c1:fd:9f:c3:14:79: 0f:06:23:4d:b9:53:c3:6b:9e:fc:db:65:1d:66:60: 54:5c:a6:2f:f0:f1:d7:3f:8d:56:e1:9d:91:62:cb: cc:81:da:20:a4:b0:c5:24:00:43:ba:ce:f2:e3:96: d0:b1:6f:7c:f6:2d:b9:db:5f:09:1e:d9:fc:26:ed: 6e:9f:96:ec:30:3d:05:15:be:86:fc:57:7a:1f:3a: 6b:bb:84:47:02:0a:34:c8:ae:b2:ba:1c:0f:cd:3f: 3c:31:59:10:56:a6:f2:66:77:83:c0:db:33:3a:e7: 4c:c2:ba:47:be:05:7e:b6:96:6c:18:41:d2:18:33: 8a:b3:67:2c:52:04:b9:04:69:51:91:97:5c:31:f4: 42:15:69:b1:ce:29:24:26:8b:00:6e:ef:0d:05:52: 50:2c:9c:8a:6b:e8:c3:a3:d9:21:37:d2:11:82:d7: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:42:B4:77:E8:98:AA:0F:1B:3F:FC:A4:DB:E2:57:FC:9B:8A:BD X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:f3:4a:86:04:10:91:7b:c2:19:4b:98:a3:59:78:bc:f1:40: 67:a7:67:34:45:bc:e0:25:b9:2f:f5:29:35:6c:bb:b3:d6:30: 19:89:bb:8d:43:05:4f:f4:56:55:f6:d1:11:28:9e:e2:f4:91: 30:5b:57:fa:b7:99:2d:5b:fb:3b:13:db:79:83:4c:68:4e:e2: 25:69:e3:f1:ed:7f:d7:bb:c9:09:2f:dc:57:34:26:b6:10:30: 29:24:ee:ab:ee:89:61:11:91:21:53:b3:0c:b2:71:78:3b:52: 49:ee:0a:51:5f:6a:b9:75:ed:90:0d:74:fd:ec:cc:4f:50:0e: 85:c2:0d:fa:a5:1b:b6:53:dd:2c:ed:35:b6:3c:b6:10:fd:bb: 56:ae:3c:52:63:e0:e9:ea:51:64:39:c8:10:95:ce:3b:40:48: ac:db:ba:1e:b0:e9:4c:c5:86:c5:7f:c6:a1:31:38:e3:17:1f: 57:d5:4e:c7:95:35:85:3d:f2:2e:67:af:cc:45:3c:9b:f3:cc: a1:13:44:f0:e1:95:73:e8:6a:4d:d4:83:e2:39:1f:dd:ed:7d: 3f:a6:7a:1c:c9:1c:03:ac:06:cd:9e:99:50:dd:6b:eb:67:3e: ee:08:37:48:37:bb:15:f4:af:2d:b7:d6:41:b0:7c:68:2d:fa: bd:18:12:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUwNDI1MDAyMjIyWhcNMjUwNTAyMDAyMjIyWjAYMRYwFAYD VQQDEw02ODBhZDViZi1iYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZPTB2r7j42Tro6kDoSgP2d3M37xmZCWZOW1ssDo99oy4Rdr1FXAE+w7s9G7 y7fPUsZskPC62ChcAth03F8kpv3Aay3qmXrR38lKjUArDloZZVvB/Z/DFHkPBiNN uVPDa57822UdZmBUXKYv8PHXP41W4Z2RYsvMgdogpLDFJABDus7y45bQsW989i25 218JHtn8Ju1un5bsMD0FFb6G/Fd6Hzpru4RHAgo0yK6yuhwPzT88MVkQVqbyZneD wNszOudMwrpHvgV+tpZsGEHSGDOKs2csUgS5BGlRkZdcMfRCFWmxzikkJosAbu8N BVJQLJyKa+jDo9khN9IRgtdRbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDSQrR3 6JiqDxs//KTb4lf8m4q9MB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC780qGBBCRe8IZS5ijWXi88UBnp2c0RbzgJbkv9Sk1bLuz1jAZibuN QwVP9FZV9tERKJ7i9JEwW1f6t5ktW/s7E9t5g0xoTuIlaePx7X/Xu8kJL9xXNCa2 EDApJO6r7olhEZEhU7MMsnF4O1JJ7gpRX2q5de2QDXT97MxPUA6Fwg36pRu2U90s 7TW2PLYQ/btWrjxSY+Dp6lFkOcgQlc47QEis27oesOlMxYbFf8ahMTjjFx9X1U7H lTWFPfIuZ6/MRTyb88yhE0Tw4ZVz6GpN1IPiOR/d7X0/pnocyRwDrAbNnplQ3Wvr Zz7uCDdIN7sV9K8tt9ZBsHxoLfq9GBK1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:28 2025 by rpki-client