$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: itEPNmqSTgwpnXwuFg1qUOkrn6qmeVudr+KCPAQdx7c= Subject key identifier: BA:AA:BE:65:09:01:8B:A1:E9:C9:18:CA:86:40:B3:58:67:45:2A:7E Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 0112 Signing time: Fri 25 Apr 2025 04:00:23 +0000 Manifest this update: Fri 25 Apr 2025 04:00:23 +0000 Manifest next update: Fri 02 May 2025 04:00:23 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: Ij+r3jXkNOYap7vacGtlmn8HQoa9gQyJlrWIh5fXW9E=) 2: E7021416B54B11EE86895416C4F9AE02.roa (hash: vzHahXAFIekcStIbFKvBTMDftL9nSsfmNUK1qbKIERQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: Apr 25 04:00:23 2025 GMT Not After : May 2 04:00:23 2025 GMT Subject: CN=680b08d7-f69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:97:a2:ad:ec:92:16:66:88:88:fa:0b:80: 3d:e2:4e:28:1d:99:bd:4e:1d:1a:dd:94:a5:3a:f7: 82:19:c2:be:28:d8:e8:4b:f9:9b:9a:d9:12:94:cd: a9:53:ec:88:bd:79:54:76:1e:99:a0:05:40:9b:42: 41:37:7c:f1:b2:50:93:67:2d:ee:23:08:11:9b:1f: c4:64:89:11:54:9c:22:26:81:fe:93:cb:8c:3b:d9: 73:cd:7f:12:b4:fb:69:d1:61:f2:f2:73:4b:33:c8: 40:c7:bc:92:70:90:8e:0d:8f:64:77:f5:29:74:d5: 51:0c:a8:e2:e1:fc:7f:06:30:35:e9:8e:51:76:82: be:de:e0:94:27:15:23:05:da:11:ad:4e:16:04:1b: 59:03:44:00:b0:46:49:5c:ad:1d:f9:0e:c8:c6:53: 67:9c:4f:7b:80:45:68:54:40:9f:69:54:95:cc:c4: 61:93:68:6a:34:4e:69:8d:f1:8c:5e:86:4b:c8:93: 83:33:1d:83:2c:23:be:a4:af:07:8a:ec:7f:b6:16: 3e:5e:de:6d:40:68:0d:ae:a6:52:90:a4:d2:53:d1: a3:8e:14:f1:90:71:82:ca:bb:ed:89:fe:08:58:1d: 2c:00:4d:3b:38:72:5a:60:79:36:e8:fb:69:92:0b: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:BE:65:09:01:8B:A1:E9:C9:18:CA:86:40:B3:58:67:45:2A:7E X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bb:82:87:4f:fa:76:41:a3:c9:05:a0:9d:76:1d:fd:59:f5: 3d:f3:aa:03:b2:8c:eb:16:db:7f:41:e2:e0:bc:59:7c:2f:09: f2:c8:45:41:06:78:b7:42:24:d0:95:fe:cb:79:3b:5d:83:7c: 9e:fc:df:b9:78:34:9b:18:e9:52:2d:14:16:bd:c3:97:1c:2f: a7:2a:9a:31:b5:db:d2:0f:7d:fb:0e:9c:bd:77:6b:e7:8d:a2: e8:bc:e8:c2:3e:52:9d:ba:24:8c:5a:b5:75:d0:84:f2:47:24: df:8a:40:59:d5:5e:75:7c:cd:4e:de:fd:c1:f3:ec:6f:68:f7: 7a:db:2a:13:c6:34:73:43:2e:88:92:87:74:c2:a2:8d:64:66: ef:04:b9:bc:27:00:b5:b9:f6:0f:a6:ea:14:53:5d:b8:9e:98: 0f:40:1d:bd:0a:c3:7d:58:b2:6b:44:83:5f:a8:9b:c3:15:39: b8:f9:0d:59:60:60:e5:cd:e8:43:e7:49:07:10:a5:6e:a9:f7: bc:e6:1b:3e:c5:e5:2a:01:9b:8d:0a:11:93:f9:5a:db:22:64: df:ab:9e:59:45:97:b4:0f:c6:e3:28:84:94:f2:00:41:e6:df: 2f:57:01:00:b3:f5:b8:44:f6:ad:f3:51:f0:04:3c:5d:05:2d: e9:b3:10:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjUwNDI1MDQwMDIzWhcNMjUwNTAyMDQwMDIzWjAYMRYwFAYD VQQDEw02ODBiMDhkNy1mNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs26Xoq3skhZmiIj6C4A94k4oHZm9Th0a3ZSlOveCGcK+KNjoS/mbmtkSlM2p U+yIvXlUdh6ZoAVAm0JBN3zxslCTZy3uIwgRmx/EZIkRVJwiJoH+k8uMO9lzzX8S tPtp0WHy8nNLM8hAx7yScJCODY9kd/UpdNVRDKji4fx/BjA16Y5RdoK+3uCUJxUj BdoRrU4WBBtZA0QAsEZJXK0d+Q7IxlNnnE97gEVoVECfaVSVzMRhk2hqNE5pjfGM XoZLyJODMx2DLCO+pK8Hiux/thY+Xt5tQGgNrqZSkKTSU9GjjhTxkHGCyrvtif4I WB0sAE07OHJaYHk26Ptpkgv17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqqvmUJ AYuh6ckYyoZAs1hnRSp+MB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAau4KHT/p2QaPJBaCddh39WfU986oDsozrFtt/QeLgvFl8LwnyyEVB Bni3QiTQlf7LeTtdg3ye/N+5eDSbGOlSLRQWvcOXHC+nKpoxtdvSD337Dpy9d2vn jaLovOjCPlKduiSMWrV10ITyRyTfikBZ1V51fM1O3v3B8+xvaPd62yoTxjRzQy6I kod0wqKNZGbvBLm8JwC1ufYPpuoUU124npgPQB29CsN9WLJrRINfqJvDFTm4+Q1Z YGDlzehD50kHEKVuqfe85hs+xeUqAZuNChGT+VrbImTfq55ZRZe0D8bjKISU8gBB 5t8vVwEAs/W4RPat81HwBDxdBS3psxAb -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:35 2025 by rpki-client