$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: WrryIIP0eKLXHpr2DftVzK8Dwd8NvD1mLoAzGYAq8PY= Subject key identifier: A8:49:AB:C0:84:FD:B9:41:6B:89:AB:57:0B:BB:30:12:CF:92:8D:21 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 013C Signing time: Fri 25 Apr 2025 03:30:33 +0000 Manifest this update: Fri 25 Apr 2025 03:30:32 +0000 Manifest next update: Fri 02 May 2025 03:30:32 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: EPUr6L8lk4g9V52w4gGZR0sCRMi1bxWicGk0BvEQ77E=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Apr 25 03:30:32 2025 GMT Not After : May 2 03:30:32 2025 GMT Subject: CN=680b01d8-c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:52:3c:e9:69:24:53:2e:68:f6:28:88:d5: 7f:78:9e:4c:7e:fe:00:29:a1:43:c2:94:cf:1e:23: ce:9e:83:8e:74:05:fa:b0:80:80:ed:3a:4e:d3:2a: 54:5b:ab:ed:20:ad:42:80:02:e1:91:f5:39:0b:c2: 1a:c9:02:d8:3e:05:dd:1b:3b:a4:ff:bb:b9:54:60: b6:71:b1:d7:f8:ee:55:d7:42:d3:3f:2a:a3:f2:d0: 0d:38:c2:97:71:14:01:7c:26:7c:16:03:64:bc:9d: a4:70:ac:81:c3:49:78:23:61:15:c7:05:7a:56:0b: cd:85:52:13:24:38:4c:6a:7c:72:c3:5e:ce:d0:e4: 9a:8e:9e:ad:40:b8:e2:5c:d0:55:67:e7:8e:79:56: 57:0e:f4:85:0c:cb:7f:93:55:19:c5:e2:55:64:e8: 80:5e:06:87:0f:99:b3:b8:74:12:a3:5a:2a:ee:31: 42:bc:cf:7f:2d:c4:9d:ae:92:ec:23:d3:51:6f:cd: 76:be:d2:9d:d2:26:d9:3d:6d:ea:13:40:dd:e0:30: 41:8a:17:4f:63:ff:5e:04:d4:73:a8:18:c8:96:6e: fb:b5:fc:96:4d:8e:70:2b:9f:45:e6:37:46:4f:42: 38:35:bb:5a:70:7a:57:af:1f:5d:99:05:72:67:59: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:49:AB:C0:84:FD:B9:41:6B:89:AB:57:0B:BB:30:12:CF:92:8D:21 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:65:86:16:9c:7f:6b:45:8d:ef:0c:bb:d6:e9:04:25:a6:9b: 6f:1b:39:d6:78:f5:fc:dd:29:4b:ef:06:43:59:f7:99:4d:99: 0b:66:80:24:94:f3:31:83:f4:c5:80:25:34:be:75:1b:ff:83: 5c:4b:48:61:06:2e:9c:28:f1:de:3c:c9:89:c6:6c:73:05:8c: 5c:24:46:dd:a0:48:3a:00:ee:09:3a:c4:d7:ec:88:93:b6:ff: 6c:c7:d3:9d:9e:85:87:fe:94:92:be:7d:39:ab:2a:3e:54:c2: cc:fe:57:bb:dc:a3:d1:a0:39:fa:e7:03:0d:57:f4:b9:5e:fc: a0:ac:31:2f:43:47:13:38:48:3a:d9:16:73:d4:11:48:a4:97: d8:87:4f:b0:4f:f1:cb:a6:9b:95:aa:f0:35:d4:cd:3f:e9:66: e2:b8:5f:7c:66:b6:2b:a2:b8:9f:dc:e6:07:68:59:d0:f2:20: 7a:69:67:86:00:2d:d2:b9:34:ed:ed:41:db:13:5d:86:2a:d0: a0:68:07:32:69:25:f0:a8:5f:af:77:12:d0:62:de:ee:ff:5c: 40:e1:36:a8:c1:0e:e9:fb:1a:d9:6b:4e:76:06:14:b8:e3:11: 70:64:eb:8f:dd:2b:b0:01:d8:56:1e:85:48:8a:b5:47:20:9a: df:61:43:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUwNDI1MDMzMDMyWhcNMjUwNTAyMDMzMDMyWjAYMRYwFAYD VQQDEw02ODBiMDFkOC1jMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkBSPOlpJFMuaPYoiNV/eJ5Mfv4AKaFDwpTPHiPOnoOOdAX6sICA7TpO0ypU W6vtIK1CgALhkfU5C8IayQLYPgXdGzuk/7u5VGC2cbHX+O5V10LTPyqj8tANOMKX cRQBfCZ8FgNkvJ2kcKyBw0l4I2EVxwV6VgvNhVITJDhManxyw17O0OSajp6tQLji XNBVZ+eOeVZXDvSFDMt/k1UZxeJVZOiAXgaHD5mzuHQSo1oq7jFCvM9/LcSdrpLs I9NRb812vtKd0ibZPW3qE0Dd4DBBihdPY/9eBNRzqBjIlm77tfyWTY5wK59F5jdG T0I4NbtacHpXrx9dmQVyZ1kCJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhJq8CE /blBa4mrVwu7MBLPko0hMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkZYYWnH9rRY3vDLvW6QQlpptvGznWePX83SlL7wZDWfeZTZkLZoAk lPMxg/TFgCU0vnUb/4NcS0hhBi6cKPHePMmJxmxzBYxcJEbdoEg6AO4JOsTX7IiT tv9sx9OdnoWH/pSSvn05qyo+VMLM/le73KPRoDn65wMNV/S5XvygrDEvQ0cTOEg6 2RZz1BFIpJfYh0+wT/HLppuVqvA11M0/6WbiuF98ZrYrorif3OYHaFnQ8iB6aWeG AC3SuTTt7UHbE12GKtCgaAcyaSXwqF+vdxLQYt7u/1xA4TaowQ7p+xrZa052BhS4 4xFwZOuP3SuwAdhWHoVIirVHIJrfYUMQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:30 2025 by rpki-client