$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: j/bdDcIY11pUxzMbQD5LViklmXK9dbV2//g+OmC2V1I= Subject key identifier: 46:9B:6F:D9:3D:4A:70:11:14:4B:41:E4:83:8E:5A:63:81:D6:09:D2 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 289B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 2826 Signing time: Thu 24 Apr 2025 15:38:32 +0000 Manifest this update: Thu 24 Apr 2025 15:38:32 +0000 Manifest next update: Thu 01 May 2025 15:38:32 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: ZlMR05XcpZ/6I2ebzq8ZFlcm1ekr66uKAPX4Rnankns=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 5: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (hash: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w=) 6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) 7: 69448F24901811EFAD307C71C4F9AE02.roa (hash: Hzh3xVvRRKPzv+kWPsFSNzqLMIeNZk0IRUe+axzlVNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10395 (0x289b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Apr 24 15:38:32 2025 GMT Not After : May 1 15:38:32 2025 GMT Subject: CN=680a5af8-ed33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:a3:6f:55:bc:e5:58:8b:13:1e:5d:7e:43: 6e:9b:79:6a:df:63:bb:8c:bb:ea:49:fd:9e:eb:c0: 4d:0b:c4:af:db:a0:bb:76:2d:51:c3:e2:a6:02:06: ad:84:f8:23:ac:a2:f8:d0:fb:09:cc:0f:31:48:fd: fa:53:cd:41:fb:91:6c:19:0e:35:b6:c4:f8:58:9e: 4a:68:e6:39:df:28:71:dd:f4:f1:b9:54:13:94:e2: f8:c2:1a:af:d6:50:f9:11:08:5e:21:bc:89:47:9b: 7e:a4:ba:86:5b:c1:4b:95:8b:8d:48:09:2c:06:1f: 26:7c:4f:fa:47:f2:31:b9:81:43:52:12:a7:1e:a6: 52:43:eb:ca:44:d7:94:2c:2c:8e:5d:7c:6f:81:54: ac:76:57:41:34:53:7d:52:10:22:98:4f:65:f2:b8: de:b7:4e:b3:58:82:93:66:21:d1:50:57:ab:78:c5: 26:3c:1a:f9:aa:02:78:1f:70:aa:6f:8b:29:e0:18: a8:cd:95:db:d1:ac:1f:04:22:d4:c6:20:67:60:d2: 48:56:26:97:21:a6:44:87:f9:0d:0d:c0:d1:e7:01: 54:36:34:15:d7:0f:44:9a:08:a0:dc:13:f2:bd:db: be:60:ab:be:eb:fd:99:f1:ae:36:1a:4f:da:32:c3: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:6F:D9:3D:4A:70:11:14:4B:41:E4:83:8E:5A:63:81:D6:09:D2 X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:08:23:ce:47:4f:9a:27:39:ae:c4:c9:95:e9:2f:64:1d:3d: be:22:35:e2:41:c4:c1:ca:2b:36:98:8a:84:fb:01:41:7f:94: a9:1c:31:0e:17:bd:a9:50:d8:57:83:6f:28:aa:ba:24:87:db: 13:51:da:04:c7:1e:bc:58:d8:02:9b:e5:ff:07:44:0b:1c:a4: 6e:a6:47:57:47:af:33:7f:5f:8e:61:22:38:56:42:aa:04:be: 76:a2:bf:32:b0:87:d8:0d:7a:7b:ba:1f:8c:db:2f:63:15:ee: 15:2e:eb:30:76:34:c3:a3:6b:a9:a7:c8:fc:64:ec:d3:e3:4c: 79:eb:c1:6b:2c:82:1e:e1:d4:7f:40:09:58:5b:3e:46:49:72: 1f:20:44:c9:74:2f:b4:e8:c9:82:85:06:4f:cf:49:c4:b6:22: 1b:c2:e7:31:e3:91:4e:1a:91:5d:94:4d:eb:f6:cb:41:c3:48: be:3f:97:e6:bd:9e:38:5d:00:d4:83:4e:47:e0:41:2c:96:a9: b9:b6:a6:a8:81:38:86:83:86:9d:72:cd:f9:4d:a0:57:c5:23: a9:2a:9b:05:1d:c6:c2:e0:52:04:8d:f7:f1:1a:ae:51:06:88: 4d:51:9f:21:7e:6a:f9:db:8e:51:66:37:d3:30:dc:8a:a0:c5: 09:be:49:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNDI0MTUzODMyWhcNMjUwNTAxMTUzODMyWjAYMRYwFAYD VQQDEw02ODBhNWFmOC1lZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvimjb1W85ViLEx5dfkNum3lq32O7jLvqSf2e68BNC8Sv26C7di1Rw+KmAgat hPgjrKL40PsJzA8xSP36U81B+5FsGQ41tsT4WJ5KaOY53yhx3fTxuVQTlOL4whqv 1lD5EQheIbyJR5t+pLqGW8FLlYuNSAksBh8mfE/6R/IxuYFDUhKnHqZSQ+vKRNeU LCyOXXxvgVSsdldBNFN9UhAimE9l8rjet06zWIKTZiHRUFereMUmPBr5qgJ4H3Cq b4sp4BiozZXb0awfBCLUxiBnYNJIViaXIaZEh/kNDcDR5wFUNjQV1w9Emgig3BPy vdu+YKu+6/2Z8a42Gk/aMsPvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEabb9k9 SnARFEtB5IOOWmOB1gnSMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuCCPOR0+aJzmuxMmV6S9kHT2+IjXiQcTByis2mIqE+wFBf5SpHDEO F72pUNhXg28oqrokh9sTUdoExx68WNgCm+X/B0QLHKRupkdXR68zf1+OYSI4VkKq BL52or8ysIfYDXp7uh+M2y9jFe4VLuswdjTDo2upp8j8ZOzT40x568FrLIIe4dR/ QAlYWz5GSXIfIETJdC+06MmChQZPz0nEtiIbwucx45FOGpFdlE3r9stBw0i+P5fm vZ44XQDUg05H4EEslqm5tqaogTiGg4adcs35TaBXxSOpKpsFHcbC4FIEjffxGq5R BohNUZ8hfmr5245RZjfTMNyKoMUJvkk3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:45 2025 by rpki-client