$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: YZXhf+3gWH6MhgkbqBvNj9AJDlzJLI4xTB0PvnzSFf0= Subject key identifier: 86:6C:E5:E2:06:DA:46:99:4C:1F:C8:4E:11:4F:BF:EE:10:DD:68:43 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 56 Signing time: Fri 25 Apr 2025 06:11:25 +0000 Manifest this update: Fri 25 Apr 2025 06:11:25 +0000 Manifest next update: Fri 02 May 2025 06:11:25 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: tX0dZVLB7yR8K2bNXuGYXOSW+QL05W+dwF4FtKGgSdQ=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: plZkhxc00wQXxhpH5zdDV/kYvwUsg48B+WnMIB2ox4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Apr 25 06:11:25 2025 GMT Not After : May 2 06:11:25 2025 GMT Subject: CN=680b278d-b315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:a7:17:19:b8:e8:52:0f:1d:cc:3e:82:bf: b3:e1:c9:ff:87:77:d5:58:e0:de:38:de:04:94:ab: e6:68:d6:36:69:09:43:11:77:89:42:32:34:7f:df: 6a:0c:db:a8:4e:91:b7:d8:a4:42:16:b6:cb:d6:a6: db:c1:06:f6:a3:38:a7:bf:b6:94:47:60:ba:6a:17: 61:28:36:11:00:df:72:a2:a6:74:84:cb:54:77:a2: d3:04:ef:b0:6c:19:fb:18:d1:f6:ee:b8:d8:83:e1: ee:33:79:18:46:bd:fd:9a:ff:91:8c:d8:1f:79:2a: e1:ac:f3:ef:81:30:1a:cd:c6:55:ac:3e:b3:0b:11: fc:85:75:3a:d1:bb:e3:21:d2:ad:da:dd:b2:3e:18: e3:16:d7:f5:29:63:f3:a4:b2:ec:7a:27:ff:0f:35: c6:90:1c:2b:a0:58:87:d2:8d:e7:ad:2b:7a:32:75: 82:1e:c9:f7:aa:d3:38:dd:1e:1b:f2:ec:18:c2:e9: c8:d2:16:f5:83:8c:49:ed:1d:b9:80:64:d2:d2:c2: 9d:07:7c:ef:db:76:35:15:ba:5c:9a:01:b5:81:ef: dd:c5:c1:1a:c2:90:8c:76:c7:70:93:dd:4b:85:a6: a2:d1:8c:76:40:82:28:6e:58:11:c6:d3:3d:dd:a8: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:E5:E2:06:DA:46:99:4C:1F:C8:4E:11:4F:BF:EE:10:DD:68:43 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0c:11:d5:52:f0:dd:85:8f:00:72:a4:62:e6:55:32:25:86: 7a:3f:30:7b:33:9c:6d:d4:fd:ff:cc:48:39:76:d1:50:ab:f5: c5:70:75:ed:a7:e6:7a:84:6e:fb:f3:07:99:c0:1f:5f:a9:a7: c1:bb:08:73:67:34:53:49:f5:ea:94:d5:76:e0:e5:77:a1:bd: e3:87:69:ec:0f:bc:ba:f1:0c:dd:61:55:37:5a:a8:1f:89:85: 3c:21:3e:ee:5c:1c:5d:28:63:fd:ad:81:1a:25:01:f0:1b:42: bc:db:6e:f1:6f:e6:74:92:d7:6b:fa:a7:98:41:d7:d1:88:b0: 85:d5:bf:de:d1:be:b6:c6:92:9d:9a:dd:3a:c2:c7:80:fc:ac: 19:4a:63:1d:d8:12:c9:64:b0:ee:e5:f9:42:ab:4f:b4:e5:10: 35:52:05:02:26:0f:6e:78:df:bc:22:2c:dc:50:5e:ca:f8:ea: 5b:33:d5:2f:ad:05:6b:55:48:2d:26:f1:eb:f6:a4:b7:b2:45: 44:e7:31:14:3f:dc:31:58:4d:ef:18:d5:6f:b9:53:ff:43:2f: ae:c5:cf:db:33:38:2e:85:03:36:e1:b0:49:43:0d:96:3d:4e: 64:b0:53:87:47:14:d1:a4:6b:9a:8c:b7:df:29:71:ff:c3:9f: 1a:86:f1:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNTA0MjUwNjExMjVaFw0yNTA1MDIwNjExMjVaMBgxFjAUBgNV BAMTDTY4MGIyNzhkLWIzMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyQKcXGbjoUg8dzD6Cv7Phyf+Hd9VY4N443gSUq+Zo1jZpCUMRd4lCMjR/32oM 26hOkbfYpEIWtsvWptvBBvajOKe/tpRHYLpqF2EoNhEA33KipnSEy1R3otME77Bs GfsY0fbuuNiD4e4zeRhGvf2a/5GM2B95KuGs8++BMBrNxlWsPrMLEfyFdTrRu+Mh 0q3a3bI+GOMW1/UpY/Oksux6J/8PNcaQHCugWIfSjeetK3oydYIeyfeq0zjdHhvy 7BjC6cjSFvWDjEntHbmAZNLSwp0HfO/bdjUVulyaAbWB793FwRrCkIx2x3CT3UuF pqLRjHZAgihuWBHG0z3dqOk3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmzl4gba RplMH8hOEU+/7hDdaEMwHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFIMEdVS8N2FjwBypGLmVTIlhno/MHsznG3U/f/MSDl20VCr9cVwde2n 5nqEbvvzB5nAH1+pp8G7CHNnNFNJ9eqU1Xbg5XehveOHaewPvLrxDN1hVTdaqB+J hTwhPu5cHF0oY/2tgRolAfAbQrzbbvFv5nSS12v6p5hB19GIsIXVv97RvrbGkp2a 3TrCx4D8rBlKYx3YEslksO7l+UKrT7TlEDVSBQImD25437wiLNxQXsr46lsz1S+t BWtVSC0m8ev2pLeyRUTnMRQ/3DFYTe8Y1W+5U/9DL67Fz9szOC6FAzbhsElDDZY9 TmSwU4dHFNGka5qMt98pcf/DnxqG8dA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:10 2025 by rpki-client