$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: vNkLP77VcvVQMdoPZ7fCl4aIxpgty1BYgFxEgDvolBg= Subject key identifier: 28:12:D8:A4:F2:96:1D:A5:C5:31:4F:EB:10:5C:7D:E4:C0:13:B6:D0 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 0119 Signing time: Fri 25 Apr 2025 03:57:39 +0000 Manifest this update: Fri 25 Apr 2025 03:57:39 +0000 Manifest next update: Fri 02 May 2025 03:57:39 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: Z/sSqMwP0zOdkn1qRfQLopPH1rKcccuAZwf5j4XANpU=) 2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=) 3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: Apr 25 03:57:39 2025 GMT Not After : May 2 03:57:39 2025 GMT Subject: CN=680b0833-065e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:f4:19:4b:7c:f0:2c:46:78:4d:f2:4b:8c: 6e:08:1a:b4:5b:c8:4b:91:40:e4:0d:0c:a8:35:a1: 4d:1b:14:60:0c:2c:c1:bd:6b:43:09:49:4b:0b:32: 21:03:6a:4c:43:df:fd:06:cf:ec:9d:02:a1:94:f4: 6f:b1:72:c4:b5:d7:0b:00:51:f8:f2:17:a1:c1:33: 86:05:f0:fa:43:ac:8d:af:29:36:5c:d8:4c:d2:8f: b8:c6:98:7c:ad:e3:cc:1a:51:f1:bd:9d:38:73:f1: 3b:33:6f:1d:c7:bd:e5:7e:16:17:0a:ad:e7:67:52: 41:c5:b1:1e:af:5e:a4:55:0e:b0:e7:c6:17:e6:05: 90:3e:55:a4:17:5c:5a:cc:0d:fc:9d:c0:c4:49:22: 84:0f:86:88:39:9e:53:1c:e7:95:ab:35:48:14:31: e2:09:3c:0b:8d:58:7c:31:ef:5e:1c:ed:76:e1:f9: 2a:d8:77:dc:ec:21:f8:56:6c:ac:f4:64:e9:44:4a: df:b9:53:cf:d3:88:47:39:be:7a:76:4f:d4:80:19: 6a:59:1d:6a:8f:83:ef:e2:8a:38:51:82:53:a7:6a: 43:37:68:58:6a:dd:5a:9e:13:46:cd:aa:9c:02:96: 1a:3b:a4:54:f2:97:9b:7a:6f:59:aa:d0:a3:84:b2: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:D8:A4:F2:96:1D:A5:C5:31:4F:EB:10:5C:7D:E4:C0:13:B6:D0 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:85:c6:1a:17:e9:cd:8b:b9:58:f5:e6:38:e9:f3:d2:f7:06: 09:ed:43:69:2c:c3:18:5f:73:17:6d:fb:2a:09:31:74:87:fe: fc:df:7b:95:d9:5e:1e:ad:a6:68:d6:ad:1b:25:12:77:96:7b: 29:24:2a:5d:f0:71:ee:f0:40:ab:a6:95:c9:16:b2:a3:39:1e: c0:53:ad:37:0c:1b:f6:ac:d3:ad:6e:7e:10:22:77:0c:59:e5: 98:c7:27:88:83:69:88:f0:15:b5:7d:7c:74:e5:93:fd:64:55: 79:54:92:8c:d7:97:ea:ed:b6:41:21:ba:44:8e:da:ac:b1:b1: d8:82:9f:2d:57:ec:ad:35:75:23:cb:20:33:e6:54:f5:f0:8e: de:ed:be:99:63:a6:db:8c:c5:73:8f:1c:49:7b:4d:4a:93:7d: 35:3b:42:71:8d:1f:9b:6b:fe:32:09:08:a0:21:0f:40:30:79: 73:d0:66:c0:bd:c4:88:86:61:bc:19:50:ab:20:10:bd:1d:42: 48:25:98:b2:3b:0a:12:9b:72:2e:6a:7d:68:74:42:a6:f1:05: 46:28:25:b7:e1:1e:e6:b5:f9:ef:be:5c:0a:25:43:c1:15:ad: 96:71:f5:c8:54:81:2b:df:9f:2d:4b:df:d9:35:4b:e9:e5:a9: 73:f3:0b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUwNDI1MDM1NzM5WhcNMjUwNTAyMDM1NzM5WjAYMRYwFAYD VQQDEw02ODBiMDgzMy0wNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIj0GUt88CxGeE3yS4xuCBq0W8hLkUDkDQyoNaFNGxRgDCzBvWtDCUlLCzIh A2pMQ9/9Bs/snQKhlPRvsXLEtdcLAFH48hehwTOGBfD6Q6yNryk2XNhM0o+4xph8 rePMGlHxvZ04c/E7M28dx73lfhYXCq3nZ1JBxbEer16kVQ6w58YX5gWQPlWkF1xa zA38ncDESSKED4aIOZ5THOeVqzVIFDHiCTwLjVh8Me9eHO124fkq2Hfc7CH4Vmys 9GTpRErfuVPP04hHOb56dk/UgBlqWR1qj4Pv4oo4UYJTp2pDN2hYat1anhNGzaqc ApYaO6RU8pebem9ZqtCjhLKbrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgS2KTy lh2lxTFP6xBcfeTAE7bQMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3 TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6hcYaF+nNi7lY9eY46fPS9wYJ7UNpLMMYX3MXbfsqCTF0h/7833uV 2V4eraZo1q0bJRJ3lnspJCpd8HHu8ECrppXJFrKjOR7AU603DBv2rNOtbn4QIncM WeWYxyeIg2mI8BW1fXx05ZP9ZFV5VJKM15fq7bZBIbpEjtqssbHYgp8tV+ytNXUj yyAz5lT18I7e7b6ZY6bbjMVzjxxJe01Kk301O0JxjR+ba/4yCQigIQ9AMHlz0GbA vcSIhmG8GVCrIBC9HUJIJZiyOwoSm3Iuan1odEKm8QVGKCW34R7mtfnvvlwKJUPB Fa2WcfXIVIEr358tS9/ZNUvp5alz8wv/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:46 2025 by rpki-client