$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: N/eH35NvyVDvy/OeNOABsIevBAD89cubVE82H1h1iE4= Subject key identifier: A7:7D:CF:89:95:56:B0:60:A4:7E:4D:84:25:38:DA:B7:EC:78:06:37 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 12 Signing time: Fri 25 Apr 2025 07:03:34 +0000 Manifest this update: Fri 25 Apr 2025 07:03:34 +0000 Manifest next update: Fri 02 May 2025 07:03:34 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: bNqiTZAjZ0RF9on04oOS31QTAZUikzIvAsi7h9ej7gU=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: 1E9Uj0G9r4nxcyscWv579FgIwgT3cljTL2z6/KS3cW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Apr 25 07:03:34 2025 GMT Not After : May 2 07:03:34 2025 GMT Subject: CN=680b33c6-fc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:ee:1c:b1:36:93:29:65:30:28:64:4b:97: 84:23:1f:2e:52:da:19:f7:00:31:15:fc:b4:9b:cd: 04:e8:ad:df:e2:5a:3a:9c:ad:84:54:aa:e6:98:49: 6b:16:f8:48:e5:14:f2:97:2f:cb:03:85:fd:af:93: aa:33:b5:c7:45:7e:19:ac:b8:61:29:f7:62:6c:5d: 58:f7:55:e9:12:1b:1f:ff:09:aa:ea:87:f6:37:0a: fe:a4:29:e8:4e:f5:e6:ce:54:17:80:dc:06:bf:e5: b9:83:45:82:3f:a6:33:7f:3a:d6:02:84:5b:c6:da: 60:9b:1f:0c:ae:94:68:44:47:73:e7:3e:d0:d9:10: b9:1d:87:27:cc:bd:43:81:a5:f7:61:ec:4f:59:1f: 46:38:51:ce:55:e4:82:97:24:e3:0a:78:01:f6:1a: 27:7a:47:1e:be:4d:4b:40:c0:0b:64:fe:37:70:8a: e3:91:fd:aa:c7:a6:f1:37:08:12:04:0e:18:bb:d5: 14:7d:28:38:a4:38:03:df:a0:c5:b5:55:fd:eb:d9: 5a:f6:9b:c7:ba:57:03:82:e3:ae:bc:ff:ca:5d:54: 18:82:ea:45:ac:45:e5:8a:69:a9:ac:e4:b2:5f:31: bf:d8:0f:c0:ae:9e:2e:f8:fe:96:3e:00:6b:e9:80: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:CF:89:95:56:B0:60:A4:7E:4D:84:25:38:DA:B7:EC:78:06:37 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:d0:b5:d0:d5:dc:da:50:db:15:ef:73:4c:fc:ed:23:d2: 64:c2:53:c9:ec:67:53:9e:d3:16:92:8a:06:8a:db:35:81:e4: 05:17:25:53:65:74:19:67:d1:14:f4:89:5f:f6:ef:68:c7:f8: 6d:5b:0c:29:0c:4e:fb:20:77:ca:6a:28:b8:27:a8:43:09:8c: 9f:dd:d2:3a:5b:aa:88:b7:34:be:c3:d4:4f:1d:a7:f6:29:a2: 80:ad:de:a5:3a:9b:61:fe:25:eb:f8:36:ec:ed:ce:ce:0b:ad: be:9e:73:a6:b7:7a:f8:e2:ac:6a:40:e7:8a:99:80:3e:56:99: 0a:e1:11:51:11:e4:10:e9:15:81:93:7e:a1:9c:9e:fb:d4:40: 30:5c:ba:2b:2f:ca:7b:cc:08:86:73:a1:ac:19:c2:e1:83:88: 21:81:62:5c:30:2c:b7:c0:2b:ab:0e:9a:92:6a:0b:fd:9c:11: 82:5b:c0:56:c7:fe:ad:3d:d2:7a:b3:a0:cd:19:11:59:52:2d: 55:89:00:cf:8d:f8:43:99:09:2e:ca:e5:cc:af:50:81:7f:e6: d2:0a:f3:bf:67:fa:fe:d3:de:5d:e4:f8:ef:f3:82:b6:06:7f: 8e:fe:eb:77:77:7b:70:9f:88:ca:db:dd:c3:fd:53:57:89:d6: 12:43:06:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA0MjUwNzAzMzRaFw0yNTA1MDIwNzAzMzRaMBgxFjAUBgNV BAMTDTY4MGIzM2M2LWZjOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcRe4csTaTKWUwKGRLl4QjHy5S2hn3ADEV/LSbzQTord/iWjqcrYRUquaYSWsW +EjlFPKXL8sDhf2vk6oztcdFfhmsuGEp92JsXVj3VekSGx//Carqh/Y3Cv6kKehO 9ebOVBeA3Aa/5bmDRYI/pjN/OtYChFvG2mCbHwyulGhER3PnPtDZELkdhyfMvUOB pfdh7E9ZH0Y4Uc5V5IKXJOMKeAH2Gid6Rx6+TUtAwAtk/jdwiuOR/arHpvE3CBIE Dhi71RR9KDikOAPfoMW1Vf3r2Vr2m8e6VwOC4668/8pdVBiC6kWsReWKaams5LJf Mb/YD8Cuni74/pY+AGvpgPKRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp33PiZVW sGCkfk2EJTjat+x4BjcwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgi0LXQ1dzaUNsV73NM/O0j0mTCU8nsZ1Oe0xaSigaK2zWB5AUXJVNl dBln0RT0iV/272jH+G1bDCkMTvsgd8pqKLgnqEMJjJ/d0jpbqoi3NL7D1E8dp/Yp ooCt3qU6m2H+Jev4Nuztzs4Lrb6ec6a3evjirGpA54qZgD5WmQrhEVER5BDpFYGT fqGcnvvUQDBcuisvynvMCIZzoawZwuGDiCGBYlwwLLfAK6sOmpJqC/2cEYJbwFbH /q090nqzoM0ZEVlSLVWJAM+N+EOZCS7K5cyvUIF/5tIK879n+v7T3l3k+O/zgrYG f47+63d3e3CfiMrb3cP9U1eJ1hJDBlE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:08 2025 by rpki-client