$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: 6rKYcrb0pztnz0khe34An5oaqBUdtaZP8aQwMvqjVuc= Subject key identifier: BB:52:48:73:7D:86:7F:34:A1:2D:E7:97:FF:5B:F5:41:E8:83:93:32 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0400 Signing time: Tue 29 Apr 2025 01:11:37 +0000 Manifest this update: Tue 29 Apr 2025 01:11:36 +0000 Manifest next update: Tue 06 May 2025 01:11:36 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: R1pEEfwQXEmt+R69dQUxa3D8AugpzGeJwnLwKzJs+BI=) 2: 96BF84D621A411F0AC5C0C24C4F9AE02.roa (hash: 798NxIqDDFl6KrkCTp1VY6O+JV8in8IvqJ86we9gpvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 01:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Apr 29 01:11:36 2025 GMT Not After : May 6 01:11:36 2025 GMT Subject: CN=68102748-4742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:d1:9b:b7:9a:5e:51:4f:61:42:6a:1e:33: fd:71:4d:9b:1b:9a:7b:82:67:c3:8d:66:26:10:3b: 04:af:e0:3f:94:75:7e:00:3f:af:88:56:93:fd:39: b0:0c:0d:8f:71:1d:cb:00:57:c3:8f:7d:0c:45:3b: d5:3c:ef:18:ce:5c:ad:f6:71:48:a5:39:87:0b:3b: b4:9e:bc:3a:17:bc:57:2d:b0:21:e5:00:35:09:14: d9:95:15:a3:14:c4:87:a7:b0:70:58:a0:c1:b2:a9: 26:03:1d:6e:83:b2:e0:51:9e:04:6c:2d:99:68:e8: 0f:4f:50:f6:12:f7:1a:0b:20:5f:53:2a:d6:3b:c6: 49:c9:fa:c9:71:24:51:bd:ac:f9:43:10:df:e3:0b: 61:98:13:53:92:af:7f:06:82:9e:8c:12:5e:7c:90: 64:80:06:37:c4:45:c2:94:27:3c:82:c2:be:2c:90: 3e:5c:72:75:40:36:fa:aa:48:cc:9f:c5:91:76:bc: f0:c4:db:72:09:56:8f:b6:8f:c7:4e:70:f8:de:85: 2f:ea:a4:98:e5:d1:be:d8:e1:85:f9:d4:03:80:cf: 46:2e:1b:ec:e8:21:1b:35:d5:fa:13:db:3d:33:bf: 6d:ce:ea:6c:26:5d:1f:dd:19:45:71:1d:4d:25:d6: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:52:48:73:7D:86:7F:34:A1:2D:E7:97:FF:5B:F5:41:E8:83:93:32 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:7a:37:75:37:6f:db:c0:7c:27:69:e3:30:b1:03:39:7e: 83:c4:69:86:0e:be:da:56:b6:22:b8:ff:fa:8d:6f:a7:ed:1e: ce:8b:e6:18:bf:e5:8d:ac:c5:a6:15:34:73:5c:54:26:ee:4a: a1:3e:20:c7:c1:1c:c9:4c:5d:80:44:da:77:d8:b7:5d:ee:56: eb:b2:0a:c0:ae:0a:e4:65:8c:03:c6:e4:ad:a2:7d:bc:71:b7: 84:33:9f:a9:57:83:77:d0:ba:0c:b9:93:c4:6f:d6:9f:95:c3: 60:b1:fc:1a:3c:f4:94:f6:9b:f7:1b:db:1e:24:df:de:12:ce: ba:27:c7:b3:4a:29:72:8f:54:24:ae:3a:1c:90:d9:16:24:9d: 6a:eb:0a:43:9d:c2:15:d5:ef:9d:9e:89:ca:c1:19:ba:56:de: 3b:f2:97:5c:e3:27:43:4f:fa:bb:1e:9f:68:3e:aa:a5:88:f6: 84:98:4f:29:8e:fd:6a:49:72:e8:28:fb:90:ae:ce:50:9c:47: 8f:18:df:f1:46:ef:75:40:f8:d4:4d:44:5e:ba:ac:10:77:e6: 85:f3:4b:43:a1:c9:e2:af:07:0e:25:f5:d5:de:93:ce:b6:de: 5d:1f:05:f2:8b:13:9d:f5:6e:42:e4:6b:91:53:32:46:f9:a7: c8:60:5d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUwNDI5MDExMTM2WhcNMjUwNTA2MDExMTM2WjAYMRYwFAYD VQQDEw02ODEwMjc0OC00NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwXRm7eaXlFPYUJqHjP9cU2bG5p7gmfDjWYmEDsEr+A/lHV+AD+viFaT/Tmw DA2PcR3LAFfDj30MRTvVPO8Yzlyt9nFIpTmHCzu0nrw6F7xXLbAh5QA1CRTZlRWj FMSHp7BwWKDBsqkmAx1ug7LgUZ4EbC2ZaOgPT1D2EvcaCyBfUyrWO8ZJyfrJcSRR vaz5QxDf4wthmBNTkq9/BoKejBJefJBkgAY3xEXClCc8gsK+LJA+XHJ1QDb6qkjM n8WRdrzwxNtyCVaPto/HTnD43oUv6qSY5dG+2OGF+dQDgM9GLhvs6CEbNdX6E9s9 M79tzupsJl0f3RlFcR1NJdbkWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtSSHN9 hn80oS3nl/9b9UHog5MyMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jno3dTdv28B8J2njMLEDOX6DxGmGDr7aVrYiuP/6jW+n7R7Oi+YY v+WNrMWmFTRzXFQm7kqhPiDHwRzJTF2ARNp32Ldd7lbrsgrArgrkZYwDxuSton28 cbeEM5+pV4N30LoMuZPEb9aflcNgsfwaPPSU9pv3G9seJN/eEs66J8ezSilyj1Qk rjockNkWJJ1q6wpDncIV1e+dnonKwRm6Vt478pdc4ydDT/q7Hp9oPqqliPaEmE8p jv1qSXLoKPuQrs5QnEePGN/xRu91QPjUTUReuqwQd+aF80tDocnirwcOJfXV3pPO tt5dHwXyixOd9W5C5GuRUzJG+afIYF12 -----END CERTIFICATE-----Generated at Tue Apr 29 11:29:11 2025 by rpki-client