$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: EYRE6DuwsgrTKy8VwBCJKYGRfTk8mTqBHGiJkHMi9II= Subject key identifier: F6:74:8E:CF:C7:A8:DF:6B:C3:24:72:53:BA:BF:BC:F1:93:B1:53:CD Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 20 Signing time: Thu 01 May 2025 06:53:26 +0000 Manifest this update: Thu 01 May 2025 06:53:26 +0000 Manifest next update: Thu 08 May 2025 06:53:26 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: +o1AxRkTGeR21Wyhbp1kBAumrNkb9BopSB4UsQ1h3HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: May 1 06:53:26 2025 GMT Not After : May 8 06:53:26 2025 GMT Subject: CN=68131a66-afde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:66:57:e4:e6:ba:53:23:ab:58:77:56:54: d2:b1:2a:0c:70:38:ad:7e:ac:5b:e6:8e:45:20:98: e8:07:5a:de:34:a8:a0:d5:ed:d9:d3:7f:9b:3c:2b: 82:21:c2:ea:1d:e8:dd:bd:64:9a:ae:b4:ff:57:1f: ba:3f:81:3c:d5:64:32:10:eb:3a:a2:e9:19:d8:f3: 0c:f0:e7:7a:2c:1e:45:ce:22:f0:dd:a3:1d:3f:13: dc:fb:d4:61:9b:2a:a4:25:c3:7e:b8:e4:33:b2:27: 00:b5:10:a7:a0:a6:24:e1:86:39:5d:ab:2c:28:84: d0:f6:b2:71:5e:b3:aa:3f:d8:6e:65:95:1d:d5:c2: 7c:2d:3c:79:98:cc:24:75:2d:2d:82:1a:84:83:36: 56:db:3c:54:83:fb:68:b7:eb:d5:31:f8:4c:94:99: c7:f9:13:af:27:ea:5a:b2:a8:9a:db:08:d5:e7:e3: 05:fa:c4:1b:6d:fb:ed:c3:9c:42:14:cb:46:91:52: af:f3:f7:cd:58:51:fc:94:b6:e8:09:80:b3:77:f2: 36:d6:67:57:29:bb:80:87:39:8e:64:5a:fd:d2:a0: bc:89:b5:58:36:8f:19:f9:51:b5:79:c0:f9:a0:02: 6f:57:b3:20:8f:d7:fb:a4:2a:05:09:fe:0c:5d:8f: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:74:8E:CF:C7:A8:DF:6B:C3:24:72:53:BA:BF:BC:F1:93:B1:53:CD X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8a:46:f7:fc:55:4d:60:95:20:75:25:7d:45:da:20:bc:ec: e9:40:53:02:a3:eb:23:78:11:8d:3b:d4:23:6d:e1:68:ce:85: 8a:db:21:e9:43:94:b1:93:f1:96:06:1a:59:75:09:ac:8a:eb: a4:c3:d5:72:ec:e6:97:70:d2:f9:ba:5d:2a:84:2d:41:63:fd: e8:04:aa:d3:ee:22:55:c0:19:d3:ad:e5:8e:03:9d:51:86:bb: 80:82:05:ac:48:b9:58:c0:c0:85:ab:0a:22:83:0b:46:1a:1d: 72:73:05:be:78:bf:6e:a8:1f:6a:8b:82:27:24:a5:26:4d:dd: 22:0c:ab:b4:92:79:7e:91:7c:02:db:1e:68:5e:c7:62:61:86: 67:38:c8:19:2c:77:8c:56:06:c9:66:45:2c:4d:6c:79:a9:a5: 4c:c3:30:97:e9:ab:43:f4:5b:f2:56:6d:36:23:c7:62:e0:cf: e9:14:d8:66:99:85:f3:25:b9:f7:de:dd:cd:9e:36:53:02:6a: 08:97:88:c9:68:f1:f0:90:39:a0:fd:34:fe:9b:e1:a1:b8:47: 1d:14:22:a0:f2:23:f4:7c:ab:d3:ad:1a:03:b5:08:f2:9a:d0: 5d:ab:95:b3:76:fd:1c:71:2b:81:b3:11:cd:5e:9a:fb:6a:38: 6c:6a:02:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoMTRENUFEMjcyMkFDQTg2QUQzNEYwRjlBMzQ0NzI2Q0I2 Njk4MDgzMTAeFw0yNTA1MDEwNjUzMjZaFw0yNTA1MDgwNjUzMjZaMBgxFjAUBgNV BAMTDTY4MTMxYTY2LWFmZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvm2ZX5Oa6UyOrWHdWVNKxKgxwOK1+rFvmjkUgmOgHWt40qKDV7dnTf5s8K4Ih wuod6N29ZJqutP9XH7o/gTzVZDIQ6zqi6RnY8wzw53osHkXOIvDdox0/E9z71GGb KqQlw3645DOyJwC1EKegpiThhjldqywohND2snFes6o/2G5llR3VwnwtPHmYzCR1 LS2CGoSDNlbbPFSD+2i369Ux+EyUmcf5E68n6lqyqJrbCNXn4wX6xBtt++3DnEIU y0aRUq/z981YUfyUtugJgLN38jbWZ1cpu4CHOY5kWv3SoLyJtVg2jxn5UbV5wPmg Am9XsyCP1/ukKgUJ/gxdj6O3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9nSOz8eo 32vDJHJTur+88ZOxU80wHwYDVR0jBBgwFoAUFNWtJyKsqGrTTw+aNEcmy2aYCDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2LzkzMDZBMkM0RjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk5XdEp5S3NxR3JUVHctYU5FY215MmFZQ0RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2LzkzMDZBMkM0RjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdy VFR3LWFORWNteTJhWUNERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2KRvf8VU1glSB1JX1F2iC87OlAUwKj6yN4EY071CNt4WjOhYrbIelD lLGT8ZYGGll1CayK66TD1XLs5pdw0vm6XSqELUFj/egEqtPuIlXAGdOt5Y4DnVGG u4CCBaxIuVjAwIWrCiKDC0YaHXJzBb54v26oH2qLgickpSZN3SIMq7SSeX6RfALb Hmhex2Jhhmc4yBksd4xWBslmRSxNbHmppUzDMJfpq0P0W/JWbTYjx2Lgz+kU2GaZ hfMluffe3c2eNlMCagiXiMlo8fCQOaD9NP6b4aG4Rx0UIqDyI/R8q9OtGgO1CPKa 0F2rlbN2/RxxK4GzEc1emvtqOGxqAsM= -----END CERTIFICATE-----Generated at Sat May 3 06:11:47 2025 by rpki-client