$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: 4bKcUvbf85y/Z4DRYqER6/5FSZih64/JuVvT7qwS2js= Subject key identifier: 3C:F1:0E:67:F3:90:74:13:D6:5B:E1:2A:00:86:CA:D0:07:BD:2E:09 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B2C Signing time: Thu 24 Apr 2025 19:05:13 +0000 Manifest this update: Thu 24 Apr 2025 19:05:13 +0000 Manifest next update: Thu 01 May 2025 19:05:13 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: NqIisqde8ML2br0NolX3ofeG0wJccg2Pz0ryClbg/gg=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: Apr 24 19:05:13 2025 GMT Not After : May 1 19:05:13 2025 GMT Subject: CN=680a8b69-d573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:9e:4d:04:d3:d0:d7:63:2e:55:4e:7c:d5: 27:c0:d2:0e:46:2d:6c:7a:28:69:aa:6e:f2:c4:c0: a6:81:02:7b:61:16:3e:5b:5d:bc:df:cc:e9:4c:50: 72:80:90:8d:0e:75:27:28:57:7a:56:66:36:a2:3e: 64:b5:28:8a:e4:8f:31:24:d8:76:5f:d0:fe:d3:5e: 20:cc:8d:ae:92:f7:21:82:cb:c1:8e:79:7d:9b:25: da:32:a8:a8:2d:1b:91:5e:85:9a:84:d2:4a:21:ea: a5:3b:cd:a4:18:f7:49:ba:c0:d4:ae:aa:a8:b3:13: 92:c3:a0:72:71:c7:97:52:3e:45:fb:1a:34:a4:32: 80:8e:25:fa:6e:b3:73:1c:b5:30:b5:0c:68:d8:6b: 87:32:3a:92:89:a7:b0:28:19:6d:9f:cc:97:28:f0: 5a:e9:f5:bd:2c:8d:7f:04:7e:af:04:b2:58:4c:ca: e4:97:47:7b:c4:0f:54:6f:6d:73:83:95:bd:80:70: e5:0a:4c:39:63:4f:98:d1:0a:0e:8b:28:2a:30:4b: 16:f6:02:fb:18:57:13:d3:ef:7f:30:25:c1:0a:ff: ee:f7:56:04:7f:c1:21:5a:47:e4:bc:be:22:40:83: ae:ee:2d:38:6a:1d:63:d4:98:7a:ce:5f:96:1f:3c: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F1:0E:67:F3:90:74:13:D6:5B:E1:2A:00:86:CA:D0:07:BD:2E:09 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4c:32:0a:7e:53:23:79:2f:5c:28:22:8e:d7:11:a6:e4:29: 4e:a2:90:30:52:e9:9c:80:5f:03:64:8c:cd:bc:7e:ef:5b:05: 87:6d:0a:11:b7:f8:54:5b:9e:bf:51:8b:66:9b:b8:e1:eb:04: cf:e1:16:b2:83:82:2c:6d:49:8e:34:7a:d2:71:57:20:75:8b: f9:f7:cd:68:e9:e5:4a:e9:bc:81:b0:03:da:eb:df:80:70:9e: 3c:4e:f3:6e:6b:3e:e2:ed:48:4b:bd:e5:df:5f:91:17:14:15: a9:20:dd:dd:98:be:2d:9a:8a:d4:76:61:85:ab:43:0f:20:31: ae:46:c7:12:a6:38:8d:fb:9a:f0:53:29:65:8b:9c:41:9f:f3: ef:5c:99:74:49:73:b0:3e:07:b3:c6:1f:17:d3:12:91:bb:d1: 79:40:cc:f1:80:e5:52:ea:db:f4:f6:7f:cd:36:04:84:6e:69: c7:d9:04:4f:c5:12:55:69:fc:cc:60:bf:49:f5:64:1b:42:5f: 96:61:99:fd:02:0e:6a:33:b7:a9:1e:ff:5a:ff:75:8f:80:eb: f6:e2:c4:ff:d5:7d:e0:ba:d3:26:db:48:b6:ce:2a:51:49:f4: 01:ab:4d:d3:9f:bb:8f:a6:23:7c:d6:a1:17:c4:54:e4:09:b9: 18:32:9e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUwNDI0MTkwNTEzWhcNMjUwNTAxMTkwNTEzWjAYMRYwFAYD VQQDEw02ODBhOGI2OS1kNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYueTQTT0NdjLlVOfNUnwNIORi1seihpqm7yxMCmgQJ7YRY+W12838zpTFBy gJCNDnUnKFd6VmY2oj5ktSiK5I8xJNh2X9D+014gzI2ukvchgsvBjnl9myXaMqio LRuRXoWahNJKIeqlO82kGPdJusDUrqqosxOSw6BycceXUj5F+xo0pDKAjiX6brNz HLUwtQxo2GuHMjqSiaewKBltn8yXKPBa6fW9LI1/BH6vBLJYTMrkl0d7xA9Ub21z g5W9gHDlCkw5Y0+Y0QoOiygqMEsW9gL7GFcT0+9/MCXBCv/u91YEf8EhWkfkvL4i QIOu7i04ah1j1Jh6zl+WHzwDDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzxDmfz kHQT1lvhKgCGytAHvS4JMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9TDIKflMjeS9cKCKO1xGm5ClOopAwUumcgF8DZIzNvH7vWwWHbQoR t/hUW56/UYtmm7jh6wTP4Rayg4IsbUmONHrScVcgdYv5981o6eVK6byBsAPa69+A cJ48TvNuaz7i7UhLveXfX5EXFBWpIN3dmL4tmorUdmGFq0MPIDGuRscSpjiN+5rw Uylli5xBn/PvXJl0SXOwPgezxh8X0xKRu9F5QMzxgOVS6tv09n/NNgSEbmnH2QRP xRJVafzMYL9J9WQbQl+WYZn9Ag5qM7epHv9a/3WPgOv24sT/1X3gutMm20i2zipR SfQBq03Tn7uPpiN81qEXxFTkCbkYMp6z -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:20 2025 by rpki-client