$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: Rt/G+p0q6VTX3Bd8Cxd0QhX21M92XKyd/eDhYUu/Xjw= Subject key identifier: 2B:D4:BB:CC:4B:7E:3C:2B:CA:6C:74:F5:B6:EB:67:62:F0:5E:57:45 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 09AA Signing time: Thu 24 Apr 2025 19:55:08 +0000 Manifest this update: Thu 24 Apr 2025 19:55:07 +0000 Manifest next update: Thu 01 May 2025 19:55:07 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: 9w6BFKXvFAUC2FnvRnMxCdkCwZobxU1VGBXdXKeqHoc=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Apr 24 19:55:07 2025 GMT Not After : May 1 19:55:07 2025 GMT Subject: CN=680a971b-17dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:f2:73:6e:9e:3d:7d:23:dd:61:12:d7:10: 38:5b:8b:7a:19:ab:16:3e:3e:05:b3:88:a6:5a:47: 05:36:4b:d9:ab:d8:c6:cd:c3:83:e2:d3:73:96:e9: c5:46:c3:a7:d9:16:14:30:5b:54:3d:a1:9b:86:7a: c6:c7:ad:cb:27:1b:33:5f:8a:c1:d5:a4:d9:e4:ce: 26:25:9f:b1:cd:4e:e2:43:1d:76:3e:1e:fe:8a:0b: 03:bf:a4:48:00:5d:a5:15:87:23:3d:d7:10:a4:77: 12:b2:59:6b:7c:b1:a5:e7:50:f5:0f:51:aa:ba:ef: ae:e2:49:d6:54:d7:d8:1a:7f:82:05:fc:c5:3b:d6: 1b:44:0d:ff:91:eb:dd:fa:61:4d:cb:73:9c:37:41: 02:1a:05:83:77:0c:fa:30:11:0b:1f:42:dc:3d:ed: 86:fa:33:d9:65:83:73:f9:d2:93:0e:4c:ba:37:6c: 50:2b:04:5e:1d:17:d0:6f:0f:80:91:1d:70:77:68: 9f:61:5e:d3:a2:d3:d7:07:79:f5:3f:47:87:fc:cf: 96:77:e2:2c:ce:8c:13:43:4b:41:d1:ae:9f:9e:58: 4b:27:03:75:b0:7a:2b:a2:e5:5f:ce:37:6a:87:15: a3:00:a8:67:4e:13:1f:7a:2b:af:d3:d5:86:ad:20: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D4:BB:CC:4B:7E:3C:2B:CA:6C:74:F5:B6:EB:67:62:F0:5E:57:45 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:4f:66:3a:73:35:43:f6:99:4c:d7:ac:78:8d:22:4b:31: c8:9a:be:3c:52:77:a7:c5:0e:d9:a3:ea:37:20:b5:f2:14:14: 3e:8a:d2:a5:be:60:1a:8a:16:50:da:02:35:83:1f:e3:96:33: ef:21:78:d1:01:17:4d:2d:0c:1f:0b:14:6c:0a:b8:17:92:66: 8d:96:97:a2:2c:0d:33:54:df:48:57:10:43:f0:0f:de:f4:84: da:cf:22:9e:08:b1:e7:30:7a:c3:a3:2d:de:21:19:10:f6:aa: 6b:92:34:22:39:9a:01:2e:6d:1c:65:c5:34:f0:36:0e:a3:d7: 3e:b0:37:d1:fa:33:63:7b:87:c2:08:01:a4:ee:61:ea:c9:3b: 5e:0f:07:6d:3f:07:c2:57:48:c3:34:3f:ac:4d:e5:9a:77:3e: 23:fc:41:4c:78:8f:0d:f0:5f:1d:92:b4:2e:f0:99:4e:75:30: 74:53:fe:55:9c:44:d4:ad:cb:eb:7d:7e:31:4e:a8:9b:c0:14: e2:b9:fa:5a:2b:98:91:4c:db:16:64:44:e1:29:1d:99:e9:b9: 43:35:d5:03:1e:e7:79:51:b5:28:a6:08:d6:95:4d:bf:82:5b: a7:94:92:fb:9d:52:e2:cb:80:77:6f:ec:b9:0b:3c:31:86:e1: 52:e8:1e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUwNDI0MTk1NTA3WhcNMjUwNTAxMTk1NTA3WjAYMRYwFAYD VQQDEw02ODBhOTcxYi0xN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqO7yc26ePX0j3WES1xA4W4t6GasWPj4Fs4imWkcFNkvZq9jGzcOD4tNzlunF RsOn2RYUMFtUPaGbhnrGx63LJxszX4rB1aTZ5M4mJZ+xzU7iQx12Ph7+igsDv6RI AF2lFYcjPdcQpHcSsllrfLGl51D1D1Gquu+u4knWVNfYGn+CBfzFO9YbRA3/kevd +mFNy3OcN0ECGgWDdwz6MBELH0LcPe2G+jPZZYNz+dKTDky6N2xQKwReHRfQbw+A kR1wd2ifYV7TotPXB3n1P0eH/M+Wd+IszowTQ0tB0a6fnlhLJwN1sHorouVfzjdq hxWjAKhnThMfeiuv09WGrSDgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvUu8xL fjwrymx09bbrZ2LwXldFMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnFk9mOnM1Q/aZTNeseI0iSzHImr48UnenxQ7Zo+o3ILXyFBQ+itKl vmAaihZQ2gI1gx/jljPvIXjRARdNLQwfCxRsCrgXkmaNlpeiLA0zVN9IVxBD8A/e 9ITazyKeCLHnMHrDoy3eIRkQ9qprkjQiOZoBLm0cZcU08DYOo9c+sDfR+jNje4fC CAGk7mHqyTteDwdtPwfCV0jDND+sTeWadz4j/EFMeI8N8F8dkrQu8JlOdTB0U/5V nETUrcvrfX4xTqibwBTiufpaK5iRTNsWZEThKR2Z6blDNdUDHud5UbUopgjWlU2/ glunlJL7nVLiy4B3b+y5CzwxhuFS6B5X -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:18 2025 by rpki-client