$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: PBoD3GXoUFEnXMhnGDi6/kegY0lGrZMZYff5EgalAnE= Subject key identifier: 65:0F:1A:61:34:8A:B9:8C:76:FA:E9:85:A3:34:61:35:91:B2:1B:12 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 017F Signing time: Sun 11 May 2025 02:38:04 +0000 Manifest this update: Sun 11 May 2025 02:38:04 +0000 Manifest next update: Sun 18 May 2025 02:38:03 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: rNBTjw0C6eeiDuNtJRqMBnfNOK5juRAXKjvjF/kHaZM=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: FKUHaqZZEJBrBkK8hpIMOv/N2yBjIEErQmwC89po6oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: May 11 02:38:04 2025 GMT Not After : May 18 02:38:03 2025 GMT Subject: CN=68200d8c-837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:95:04:aa:66:da:fc:18:d4:ec:04:e6:df: 74:bf:a4:0a:60:e4:d0:bc:d3:8a:a7:ca:3b:bf:c5: 81:63:45:25:df:b9:ed:62:d8:e6:7b:27:4c:c1:fa: 4a:b0:af:7f:7d:9f:a3:c8:24:6c:2e:d0:d1:fc:5b: af:55:25:1b:bc:a6:35:8f:c5:ad:84:8e:d9:c4:62: af:ac:23:8f:92:e9:29:e2:cd:45:c4:95:6e:7b:f6: 8a:fe:d7:29:7b:f7:8e:84:36:1d:53:e4:1e:5b:d3: e3:6d:5e:79:5a:fb:d5:7a:8d:5b:3f:b6:49:66:9b: 24:86:52:9b:a9:d3:bf:52:62:07:28:f0:ce:96:20: e6:a6:6c:7b:51:da:2f:33:e2:a4:5a:46:10:c9:2c: 83:d3:57:78:b1:81:40:d1:3d:09:66:b8:2d:06:ba: b8:fa:fc:35:f7:e5:07:ff:1d:88:58:d4:bb:d3:51: 05:e1:24:8b:bb:3b:56:0a:43:4a:c9:4d:62:8a:6f: 4f:08:a5:ab:fc:c8:99:28:26:71:04:e6:f4:77:02: b0:9d:85:af:63:d9:26:80:b4:ce:53:62:4e:01:17: db:0d:90:5f:ec:d4:b1:96:ff:31:ff:26:f3:a5:de: 5c:44:43:fe:fe:30:be:be:3b:c1:49:9c:52:d7:2a: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:1A:61:34:8A:B9:8C:76:FA:E9:85:A3:34:61:35:91:B2:1B:12 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:10:48:70:c6:8d:18:55:f0:d5:62:31:f4:1d:89:1c:b2:82: 9d:84:59:12:c3:d4:94:ec:23:82:04:ee:cb:89:5f:49:54:be: c3:67:5a:ac:96:10:ed:fc:c7:80:8d:e5:d4:9e:60:42:2a:05: 42:53:a7:0f:44:64:4a:e9:9a:20:26:73:cb:66:3b:4a:db:4e: 33:cc:c6:15:5b:9f:5c:df:11:d6:8e:9b:44:62:bf:13:7b:9d: 5c:c8:69:6e:e6:95:b5:ed:ac:3d:20:40:6c:ad:39:01:70:93: ee:d5:42:d8:8e:06:7a:18:3f:38:93:f5:7c:0e:39:00:22:fa: 60:37:fe:b2:27:25:4a:e9:a5:86:c7:91:42:a9:86:ac:04:a8: 8b:d8:d6:ef:c1:90:a2:8b:35:03:75:aa:df:6b:3a:df:d5:5e: c3:9a:e8:dd:a2:4c:32:1a:81:41:50:6a:c6:31:f7:50:2d:49: f3:fb:6a:5f:ce:19:4c:18:f9:d3:d6:e1:db:ff:a3:9f:ee:7b: de:df:42:f2:f1:3d:61:50:81:5c:b8:00:bc:7e:73:79:e7:29: 08:35:25:c4:5f:a4:41:09:3f:10:55:17:23:05:33:5c:86:28: 8e:e3:f3:e5:39:3f:02:df:ea:b0:0a:35:bc:df:09:ee:21:0a: 42:c0:cd:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwNTExMDIzODA0WhcNMjUwNTE4MDIzODAzWjAYMRYwFAYD VQQDEw02ODIwMGQ4Yy04MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30aVBKpm2vwY1OwE5t90v6QKYOTQvNOKp8o7v8WBY0Ul37ntYtjmeydMwfpK sK9/fZ+jyCRsLtDR/FuvVSUbvKY1j8WthI7ZxGKvrCOPkukp4s1FxJVue/aK/tcp e/eOhDYdU+QeW9PjbV55WvvVeo1bP7ZJZpskhlKbqdO/UmIHKPDOliDmpmx7Udov M+KkWkYQySyD01d4sYFA0T0JZrgtBrq4+vw19+UH/x2IWNS701EF4SSLuztWCkNK yU1iim9PCKWr/MiZKCZxBOb0dwKwnYWvY9kmgLTOU2JOARfbDZBf7NSxlv8x/ybz pd5cREP+/jC+vjvBSZxS1yrQJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUPGmE0 irmMdvrphaM0YTWRshsSMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdEEhwxo0YVfDVYjH0HYkcsoKdhFkSw9SU7COCBO7LiV9JVL7DZ1qs lhDt/MeAjeXUnmBCKgVCU6cPRGRK6ZogJnPLZjtK204zzMYVW59c3xHWjptEYr8T e51cyGlu5pW17aw9IEBsrTkBcJPu1ULYjgZ6GD84k/V8DjkAIvpgN/6yJyVK6aWG x5FCqYasBKiL2NbvwZCiizUDdarfazrf1V7DmujdokwyGoFBUGrGMfdQLUnz+2pf zhlMGPnT1uHb/6Of7nve30Ly8T1hUIFcuAC8fnN55ykINSXEX6RBCT8QVRcjBTNc hiiO4/PlOT8C3+qwCjW83wnuIQpCwM0A -----END CERTIFICATE-----Generated at Sun May 11 09:05:11 2025 by rpki-client