$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: JeVwcpYfO91nlxdYJqddeAmePv1fkTUX8RIIvddjz1I= Subject key identifier: 21:80:D4:74:2C:19:8A:09:4A:D5:57:B5:45:C6:10:F5:A7:E6:65:E1 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04A0 Signing time: Thu 24 Apr 2025 23:44:19 +0000 Manifest this update: Thu 24 Apr 2025 23:44:19 +0000 Manifest next update: Thu 01 May 2025 23:44:18 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: J4HOtBv4FAFqoz0YNJktf6dugNiZqEIiUlUuQriqSLU=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: CjEb36vV7LXCUvQdsPq41e7nYE3GW5xo8YCCxuuK9YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Apr 24 23:44:19 2025 GMT Not After : May 1 23:44:18 2025 GMT Subject: CN=680accd3-86c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:3e:d7:fa:e3:83:64:6e:69:ce:c5:4d:9b: 99:0b:4d:f5:46:97:2c:eb:e4:e6:27:86:95:2c:5e: 15:f2:37:61:4a:4a:d1:5a:c8:bb:8d:e7:9b:bf:4b: fa:9b:a7:51:49:b2:fb:79:4d:64:c3:ec:ba:5c:20: a1:60:98:7d:0e:93:e9:6d:0d:ba:9c:fe:2c:50:57: 16:e7:5d:36:9a:f6:09:c0:f5:19:7b:f6:1f:58:d1: 52:a5:0d:77:41:1c:4a:df:9a:09:15:f9:e9:46:53: c9:49:9c:2d:ea:c6:cd:3d:56:1d:85:47:67:6a:e0: 55:36:7d:0f:6d:0f:f7:7e:79:c3:8a:14:da:91:9a: 5f:3c:8c:18:73:59:05:bc:30:8a:c2:6e:55:f5:8d: ef:bd:16:7d:f1:eb:5b:26:00:2d:3f:d2:96:3f:16: 40:be:67:d4:d6:1c:a2:bd:00:bf:bb:9a:52:f7:d8: 31:9b:9b:f2:1f:ae:fb:aa:1c:c6:4e:89:02:23:a5: 8d:27:35:e3:16:08:cb:29:be:87:47:28:b6:eb:f8: ab:04:11:69:c4:53:9c:f7:7c:ec:02:38:b8:44:50: f3:00:81:e0:6a:46:f9:5b:b3:c8:3f:5c:42:40:db: ad:c2:f8:d5:13:18:32:fb:d2:c1:e9:48:17:50:4c: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:D4:74:2C:19:8A:09:4A:D5:57:B5:45:C6:10:F5:A7:E6:65:E1 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c2:46:3c:fa:00:c5:76:16:a0:f3:27:96:fd:ff:be:df:bd: 43:5e:77:02:b4:bd:4d:ca:6a:98:07:05:ee:96:9d:c8:9b:a0: 00:1b:57:42:97:6a:8b:e9:13:63:af:ca:8f:4c:7c:29:70:cd: 62:5e:6d:30:c2:03:44:36:c9:a8:0c:f1:6d:9a:d6:d1:76:24: b7:67:87:ad:db:97:ab:08:c6:28:f0:d2:48:c5:db:6c:81:2d: 25:20:91:dd:ff:be:05:4f:d6:ab:97:7b:76:d4:f6:ef:ff:39: fd:10:64:46:41:90:1d:9d:6d:bb:99:5a:26:cf:81:da:48:7d: 72:23:89:5d:51:2b:ca:93:a3:e7:8a:13:a0:66:47:4e:ad:56: 2d:4a:63:53:f1:9d:97:28:ba:4d:d8:d3:45:58:47:73:27:4f: 26:83:47:43:1d:d3:90:d1:20:a2:f9:9b:d6:95:f2:17:ba:2e: af:7d:f2:c5:e6:90:46:a6:d4:90:40:d9:ee:e0:04:d2:8c:ea: ac:a9:04:1d:e0:b9:fc:10:dc:d6:34:56:82:ba:66:77:9c:e1: 22:44:16:60:7a:2e:1b:4c:37:3f:13:9f:90:8f:31:4a:ec:3d: 1b:4a:95:ea:c1:ab:dd:f1:b1:c8:79:4c:51:70:19:ac:e0:b9: 21:66:d0:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUwNDI0MjM0NDE5WhcNMjUwNTAxMjM0NDE4WjAYMRYwFAYD VQQDEw02ODBhY2NkMy04NmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA288+1/rjg2Ruac7FTZuZC031Rpcs6+TmJ4aVLF4V8jdhSkrRWsi7jeebv0v6 m6dRSbL7eU1kw+y6XCChYJh9DpPpbQ26nP4sUFcW5102mvYJwPUZe/YfWNFSpQ13 QRxK35oJFfnpRlPJSZwt6sbNPVYdhUdnauBVNn0PbQ/3fnnDihTakZpfPIwYc1kF vDCKwm5V9Y3vvRZ98etbJgAtP9KWPxZAvmfU1hyivQC/u5pS99gxm5vyH677qhzG TokCI6WNJzXjFgjLKb6HRyi26/irBBFpxFOc93zsAji4RFDzAIHgakb5W7PIP1xC QNutwvjVExgy+9LB6UgXUEwdoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGA1HQs GYoJStVXtUXGEPWn5mXhMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAwkY8+gDFdhag8yeW/f++371DXncCtL1NymqYBwXulp3Im6AAG1dC l2qL6RNjr8qPTHwpcM1iXm0wwgNENsmoDPFtmtbRdiS3Z4et25erCMYo8NJIxdts gS0lIJHd/74FT9arl3t21Pbv/zn9EGRGQZAdnW27mVomz4HaSH1yI4ldUSvKk6Pn ihOgZkdOrVYtSmNT8Z2XKLpN2NNFWEdzJ08mg0dDHdOQ0SCi+ZvWlfIXui6vffLF 5pBGptSQQNnu4ATSjOqsqQQd4Ln8ENzWNFaCumZ3nOEiRBZgei4bTDc/E5+QjzFK 7D0bSpXqwavd8bHIeUxRcBms4LkhZtCy -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:39 2025 by rpki-client