$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: ekr5Ez7lhKQY3E5QAxJuxbr+Acmsz4P/c18EpC6aC2M= Subject key identifier: CB:F6:EF:39:E6:EE:06:5C:47:A1:87:DB:2B:05:9F:A7:CD:77:7C:86 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 0157 Signing time: Fri 25 Apr 2025 03:15:28 +0000 Manifest this update: Fri 25 Apr 2025 03:15:27 +0000 Manifest next update: Fri 02 May 2025 03:15:27 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: y3tAWvZzYH3t3fIgaNPWLoNT/YjoMj1ylsqJ/GWOu0o=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: Apr 25 03:15:27 2025 GMT Not After : May 2 03:15:27 2025 GMT Subject: CN=680afe50-25f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:42:ed:45:e9:98:7a:c8:e1:53:cb:bd:35: 10:ba:6d:f0:c6:f3:c3:bc:5d:4b:6b:5f:fc:f6:4c: df:65:be:48:e0:ef:ea:36:27:01:01:d3:ae:ee:b3: 38:27:6b:97:77:4f:22:0a:7e:13:96:c2:46:cf:5e: c4:62:12:10:4b:80:6e:59:c8:72:36:7d:b6:c0:c4: 6f:f5:6a:a4:89:b7:55:ae:23:2c:55:51:c7:6c:71: 27:96:b1:3c:2c:8c:ad:9d:65:34:f1:67:c9:14:3a: 45:66:28:aa:57:7e:9f:f8:4c:39:84:ca:14:b9:04: 15:2a:ef:be:41:35:92:9b:36:0b:49:ea:20:d0:0a: 13:07:bd:d9:3d:8b:b6:b5:0a:11:b2:fe:3d:f6:f4: dc:80:00:38:21:77:c2:3b:d4:b1:93:4e:51:66:64: bc:a7:95:8d:81:fc:d3:a1:fd:76:64:4d:3c:a0:0e: 98:87:50:46:5b:8c:be:f2:32:69:e8:45:68:d2:85: e8:62:c3:67:b7:10:19:e6:b4:b4:6d:3f:6a:6b:80: c7:25:64:22:d3:87:af:b9:bd:ce:e4:6a:05:54:9a: ba:06:d0:70:7a:e3:42:82:1f:84:50:f1:84:d5:70: e8:85:aa:30:a7:fe:d6:b7:1f:8c:88:45:66:58:77: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:EF:39:E6:EE:06:5C:47:A1:87:DB:2B:05:9F:A7:CD:77:7C:86 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:e9:f9:03:e0:ab:c8:9f:78:b5:ab:0d:80:7f:d1:a5:7e: 95:44:82:ef:d7:6d:8f:a1:a6:b4:be:28:7b:9a:26:90:9c:ef: fa:0c:c0:7b:97:7f:66:f9:a3:40:d4:4a:60:b4:c2:fe:0c:7b: 5b:fb:46:ea:ad:88:52:77:f8:d1:fe:e5:90:44:ce:70:30:10: 12:5c:05:58:38:c0:e8:84:f1:3d:50:e0:47:64:53:c0:73:05: 2d:40:3b:1d:5e:f3:c5:d5:ea:84:80:3f:c3:74:61:6c:8e:c5: ff:2d:b0:53:3f:1e:cb:07:b4:c6:1e:7a:8f:0a:1c:ea:5d:88: f1:6e:c7:c4:63:a9:cc:0a:84:2b:e2:35:f1:22:62:59:5b:f2: 1e:fc:51:d7:d6:99:01:af:82:29:52:3c:8d:5a:c9:43:97:4e: 4c:7e:97:d6:5f:e6:1d:46:53:ee:e7:b2:06:b6:71:18:ea:a0: 57:65:2e:a8:80:e7:19:98:f3:09:df:5a:13:85:8a:e5:70:58: 15:8e:54:3a:76:f7:26:6d:54:4a:54:ae:7f:4d:5d:32:43:e7: 42:a9:03:85:a2:98:80:f4:8e:03:e0:2d:dc:cb:5c:a1:dd:0b: 2d:7f:ad:56:14:3c:58:84:c1:ce:75:9f:60:7a:2b:84:0e:a8: 2d:76:e9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUwNDI1MDMxNTI3WhcNMjUwNTAyMDMxNTI3WjAYMRYwFAYD VQQDEw02ODBhZmU1MC0yNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1RC7UXpmHrI4VPLvTUQum3wxvPDvF1La1/89kzfZb5I4O/qNicBAdOu7rM4 J2uXd08iCn4TlsJGz17EYhIQS4BuWchyNn22wMRv9WqkibdVriMsVVHHbHEnlrE8 LIytnWU08WfJFDpFZiiqV36f+Ew5hMoUuQQVKu++QTWSmzYLSeog0AoTB73ZPYu2 tQoRsv499vTcgAA4IXfCO9Sxk05RZmS8p5WNgfzTof12ZE08oA6Yh1BGW4y+8jJp 6EVo0oXoYsNntxAZ5rS0bT9qa4DHJWQi04evub3O5GoFVJq6BtBweuNCgh+EUPGE 1XDohaowp/7Wtx+MiEVmWHcIfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv27znm 7gZcR6GH2ysFn6fNd3yGMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR0On5A+CryJ94tasNgH/RpX6VRILv122Poaa0vih7miaQnO/6DMB7 l39m+aNA1EpgtML+DHtb+0bqrYhSd/jR/uWQRM5wMBASXAVYOMDohPE9UOBHZFPA cwUtQDsdXvPF1eqEgD/DdGFsjsX/LbBTPx7LB7TGHnqPChzqXYjxbsfEY6nMCoQr 4jXxImJZW/Ie/FHX1pkBr4IpUjyNWslDl05MfpfWX+YdRlPu57IGtnEY6qBXZS6o gOcZmPMJ31oThYrlcFgVjlQ6dvcmbVRKVK5/TV0yQ+dCqQOFopiA9I4D4C3cy1yh 3Qstf61WFDxYhMHOdZ9geiuEDqgtdum+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:12:20 2025 by rpki-client