$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: tnP0DZfGrystfwL1tfH97f7hI/pwlMRpiSXkmiQ2g60= Subject key identifier: 5E:2D:9C:7B:4D:65:99:65:A5:ED:7F:D8:29:0B:22:53:0D:3C:E4:86 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 102C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 1022 Signing time: Thu 24 Apr 2025 17:25:55 +0000 Manifest this update: Thu 24 Apr 2025 17:25:55 +0000 Manifest next update: Thu 01 May 2025 17:25:55 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: z+gJScJ1LNkDX4wGcUABdtpZ1HRr3qJDolKUURUzaPU=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4140 (0x102c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Apr 24 17:25:55 2025 GMT Not After : May 1 17:25:55 2025 GMT Subject: CN=680a7423-4255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:50:13:6a:26:d3:5e:a3:13:77:92:32:bb: 02:e5:f8:1e:20:1f:97:2c:91:26:fd:68:ab:3f:df: c3:90:e3:86:f5:3e:1f:ed:48:7f:8a:74:55:b8:0d: 65:13:1c:57:61:c4:6e:e3:40:7c:03:61:64:0f:c5: a2:e6:5e:d8:b8:39:d8:bc:4f:4e:2c:35:0e:33:f4: 1e:75:34:bd:cb:db:05:c5:ff:bf:44:99:fc:2a:bf: bd:6f:ca:07:3c:ab:e1:67:2a:0e:33:96:a9:58:22: 80:87:e2:89:9c:90:f5:e1:c1:c5:76:6e:b8:b5:a6: f7:ac:d5:8d:95:53:01:9a:05:f0:42:2e:64:c4:82: 79:ca:60:f5:17:33:d7:f4:d0:e1:25:ed:f0:a3:aa: da:d2:ab:cd:ef:e8:13:68:ab:56:e2:e8:be:d8:c0: f1:85:8f:15:90:c2:06:05:9e:2f:b2:83:74:29:6a: c9:02:ff:12:39:d5:85:f8:41:53:87:f7:30:4d:34: a8:e3:4c:51:03:40:b4:98:cc:3b:93:eb:b9:11:84: 4d:14:cd:c4:a3:b9:db:46:be:94:bb:f6:2b:0f:d8: c7:ca:2f:32:4d:56:80:4e:29:f4:f8:3f:70:62:2a: 29:31:c6:8c:b3:d2:f9:1c:48:ac:13:b7:a3:0b:47: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:9C:7B:4D:65:99:65:A5:ED:7F:D8:29:0B:22:53:0D:3C:E4:86 X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d3:83:36:f6:7a:44:20:df:5f:7d:80:e5:3a:4c:31:c4:fa: 4f:8e:bf:d2:cc:ec:f5:85:45:69:eb:b2:95:15:79:a4:6d:e3: 61:f5:98:b4:b5:62:95:68:a8:8a:fd:f9:fe:46:5f:6a:c1:b1: 8a:e6:56:03:5e:b8:cf:3f:61:95:96:e3:cb:ae:d4:3c:34:63: a4:e5:d8:9a:ec:90:d2:8a:77:b9:3b:b4:e2:72:cb:d6:50:ed: 70:66:da:c0:a3:32:4f:a6:32:4c:cb:9c:58:5e:1d:12:ef:cb: 48:da:3a:11:f6:21:3b:45:b2:01:1c:a9:7f:db:54:0b:8d:47: 6c:dd:65:e7:40:d7:00:e7:d9:f0:72:ca:72:c9:61:b8:42:e5: 0c:54:e7:cd:e8:01:e6:a9:27:23:86:fe:3a:86:f9:80:e7:9b: 5a:79:30:32:e2:ba:07:0f:64:ce:d0:f3:b5:9f:70:74:ce:1f: a9:f5:1f:17:46:e6:7a:d2:cc:9c:58:5c:39:ab:ba:e1:8a:7c: 53:16:b7:24:41:98:60:9d:8e:76:d7:8d:45:69:c8:51:e5:7e: 22:7e:58:3d:a4:fa:8e:7f:40:81:8a:c7:f4:14:3f:f4:1b:f9: 37:32:55:3a:f1:1d:fa:f3:6a:97:60:75:4f:95:92:c1:3f:1f: 33:ea:74:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwNDI0MTcyNTU1WhcNMjUwNTAxMTcyNTU1WjAYMRYwFAYD VQQDEw02ODBhNzQyMy00MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzlQE2om016jE3eSMrsC5fgeIB+XLJEm/WirP9/DkOOG9T4f7Uh/inRVuA1l ExxXYcRu40B8A2FkD8Wi5l7YuDnYvE9OLDUOM/QedTS9y9sFxf+/RJn8Kr+9b8oH PKvhZyoOM5apWCKAh+KJnJD14cHFdm64tab3rNWNlVMBmgXwQi5kxIJ5ymD1FzPX 9NDhJe3wo6ra0qvN7+gTaKtW4ui+2MDxhY8VkMIGBZ4vsoN0KWrJAv8SOdWF+EFT h/cwTTSo40xRA0C0mMw7k+u5EYRNFM3Eo7nbRr6Uu/YrD9jHyi8yTVaATin0+D9w YiopMcaMs9L5HEisE7ejC0ehhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4tnHtN ZZllpe1/2CkLIlMNPOSGMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl04M29npEIN9ffYDlOkwxxPpPjr/SzOz1hUVp67KVFXmkbeNh9Zi0 tWKVaKiK/fn+Rl9qwbGK5lYDXrjPP2GVluPLrtQ8NGOk5dia7JDSine5O7TicsvW UO1wZtrAozJPpjJMy5xYXh0S78tI2joR9iE7RbIBHKl/21QLjUds3WXnQNcA59nw cspyyWG4QuUMVOfN6AHmqScjhv46hvmA55taeTAy4roHD2TO0PO1n3B0zh+p9R8X RuZ60sycWFw5q7rhinxTFrckQZhgnY52141FachR5X4iflg9pPqOf0CBisf0FD/0 G/k3MlU68R3682qXYHVPlZLBPx8z6nTk -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:50 2025 by rpki-client