$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: M8lY40oxHIDHQDJvz2mkMN9Gvz8nmwEGvljcvJqQCcI= Subject key identifier: 93:59:16:15:9A:44:7F:43:E9:6A:D1:B2:0B:9A:E2:69:73:63:88:56 Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 0668 Signing time: Thu 24 Apr 2025 22:09:42 +0000 Manifest this update: Thu 24 Apr 2025 22:09:42 +0000 Manifest next update: Thu 01 May 2025 22:09:42 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: QzWlF7dzex5arQ5D0x/F/71DOSGvukmGpNKXemufLm0=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Apr 24 22:09:42 2025 GMT Not After : May 1 22:09:42 2025 GMT Subject: CN=680ab6a6-3989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:12:6f:43:94:4e:72:42:b3:ad:9d:ef:fd: ed:34:81:11:ae:08:cb:a7:df:36:3b:e7:ee:1e:dd: 65:27:93:f5:0f:7f:a7:80:1e:ad:70:4c:f0:a1:17: 38:45:f7:02:1d:66:77:fc:86:93:86:75:ed:63:89: 23:2e:54:cd:bb:32:69:c9:66:3e:c5:93:8a:55:79: 5a:4f:c5:74:88:ba:1d:e6:64:bf:1a:05:56:e2:ba: b6:03:cb:34:c3:ec:44:f5:fa:51:65:98:56:e6:92: 97:33:21:5e:bf:f2:24:f1:f1:0b:ad:d1:ff:53:44: df:c7:45:d9:3e:da:70:0c:fe:8d:0d:a8:79:9b:03: e7:f7:39:e0:1a:a3:08:f6:ea:23:fa:8b:e8:1d:d7: b4:54:6c:70:13:5b:e5:52:a3:73:65:ba:3d:44:99: b5:fa:79:ca:dc:8a:2b:d2:3c:b9:5f:28:77:a3:82: 2a:c0:9b:58:e2:e6:30:34:86:e6:19:1f:ad:9a:bc: 92:5c:36:30:06:33:c5:ee:79:b2:20:7d:72:09:00: e8:d6:e5:44:3f:1b:c1:60:e7:ba:51:2e:65:48:56: b9:cc:32:b8:83:fa:8a:97:3a:d8:af:50:fd:17:e5: 28:a9:33:bd:59:47:cf:4f:d9:53:e5:49:bb:05:32: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:59:16:15:9A:44:7F:43:E9:6A:D1:B2:0B:9A:E2:69:73:63:88:56 X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8b:e4:df:75:ae:a4:37:7d:45:0d:fe:29:22:24:b1:20:9f: e1:cb:9b:23:05:9f:24:a5:63:a6:a1:0d:bb:03:2b:c9:5e:f0: 02:cc:7e:09:12:da:18:61:ec:d5:36:e1:f2:85:a9:5b:99:60: 38:aa:28:d6:92:84:b5:76:db:a3:67:1d:f3:06:75:6b:e0:49: b0:e2:e3:e3:db:67:b4:e6:7f:ee:70:9d:f1:2e:c5:59:72:82: 89:cc:5b:9c:8e:34:52:bf:2f:c5:e7:ec:64:64:f4:f6:d2:16: 2c:c7:bf:fa:76:86:49:d5:25:0a:c1:62:72:45:9e:cd:f2:b9: b8:43:ac:12:9f:ca:54:6a:31:5d:67:c8:67:df:42:99:2e:da: 9e:7c:30:73:70:64:ac:81:ff:eb:1c:47:fe:82:43:25:c4:db: 90:6d:80:b7:3f:ed:f8:a9:34:70:10:b4:49:93:16:00:51:32: 33:6c:f1:4f:06:f6:3e:84:6b:3f:0a:c2:33:47:d1:91:c6:5c: 41:39:35:30:e4:2e:52:28:3e:f1:33:9b:64:10:b2:39:d0:46: ca:ff:46:fa:29:43:07:ca:c9:96:1c:97:dd:16:b8:11:29:8a: 74:71:8b:41:a3:2b:35:61:d4:cc:08:bd:57:5d:a9:40:ed:0c: ec:1c:2e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNDI0MjIwOTQyWhcNMjUwNTAxMjIwOTQyWjAYMRYwFAYD VQQDEw02ODBhYjZhNi0zOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB0Sb0OUTnJCs62d7/3tNIERrgjLp982O+fuHt1lJ5P1D3+ngB6tcEzwoRc4 RfcCHWZ3/IaThnXtY4kjLlTNuzJpyWY+xZOKVXlaT8V0iLod5mS/GgVW4rq2A8s0 w+xE9fpRZZhW5pKXMyFev/Ik8fELrdH/U0Tfx0XZPtpwDP6NDah5mwPn9zngGqMI 9uoj+ovoHde0VGxwE1vlUqNzZbo9RJm1+nnK3Ior0jy5Xyh3o4IqwJtY4uYwNIbm GR+tmrySXDYwBjPF7nmyIH1yCQDo1uVEPxvBYOe6US5lSFa5zDK4g/qKlzrYr1D9 F+UoqTO9WUfPT9lT5Um7BTJVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNZFhWa RH9D6WrRsgua4mlzY4hWMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxi+Tfda6kN31FDf4pIiSxIJ/hy5sjBZ8kpWOmoQ27AyvJXvACzH4J EtoYYezVNuHyhalbmWA4qijWkoS1dtujZx3zBnVr4Emw4uPj22e05n/ucJ3xLsVZ coKJzFucjjRSvy/F5+xkZPT20hYsx7/6doZJ1SUKwWJyRZ7N8rm4Q6wSn8pUajFd Z8hn30KZLtqefDBzcGSsgf/rHEf+gkMlxNuQbYC3P+34qTRwELRJkxYAUTIzbPFP BvY+hGs/CsIzR9GRxlxBOTUw5C5SKD7xM5tkELI50EbK/0b6KUMHysmWHJfdFrgR KYp0cYtBoys1YdTMCL1XXalA7QzsHC4m -----END CERTIFICATE-----Generated at Sat Apr 26 15:17:46 2025 by rpki-client