$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft File: dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft (raw, json) Hash identifier: 78N5S3CBqcDRWtV0HrpmAjvgaui9bz7lUsLiEksA3Pc= Subject key identifier: 98:CB:44:6C:82:82:B0:1B:F7:88:6C:00:C9:EC:51:A9:66:4B:26:87 Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7 Certificate issuer: /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft Manifest number: 68 Signing time: Sun 11 May 2025 05:50:09 +0000 Manifest this update: Sun 11 May 2025 05:50:09 +0000 Manifest next update: Sun 18 May 2025 05:50:09 +0000 Files and hashes: 1: dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl (hash: LCkSvyCesI1PcX/oSg63aE+OCJmdh+1GOkdS6TXUVzM=) 2: ED46632AC75311EFAA7A9E0BC4F9AE02.roa (hash: BSkyIsVjsqkIP2UcdowW92UsoE0+ROg3QmqK9i77vAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7 Validity Not Before: May 11 05:50:09 2025 GMT Not After : May 18 05:50:09 2025 GMT Subject: CN=68203a91-8294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:d3:4c:9c:1c:c0:28:5c:a7:03:60:00:7d: 7c:00:c4:56:93:2f:87:db:12:4c:1f:4b:fe:dd:12: 27:de:d2:e6:a2:63:e5:87:4b:29:b9:75:d7:a7:49: 24:ca:09:d3:81:84:ed:9d:df:7f:3d:92:6a:51:18: 7d:d0:b6:0f:ca:8e:8b:7b:25:41:b9:60:2c:03:1e: a7:ae:33:dc:42:3a:84:32:7e:d0:e9:33:28:71:29: 20:a0:80:ee:33:86:14:b2:83:ae:44:f4:f5:c8:95: 4c:a8:7d:c4:1f:43:ba:99:78:bb:96:08:64:96:17: 46:c3:72:af:1b:bd:06:d9:d1:58:6a:c7:fb:9a:75: e6:a5:fd:df:ca:d0:23:4f:2c:07:dd:76:37:3a:8f: a8:dc:7f:2a:13:99:08:f8:f5:5b:ab:be:bf:d3:5c: eb:2d:9a:b1:b7:5c:2e:6e:33:9f:6e:bc:a0:35:6c: 5f:78:26:c9:39:b5:3e:56:e0:6a:0f:77:eb:40:7b: 3b:25:63:c5:f5:bc:29:61:6f:c0:e5:43:71:cc:b0: 58:56:99:32:31:e0:3f:bb:e5:a5:fc:6c:d4:cc:6a: 2e:5c:fd:ce:50:ec:90:a4:f6:8a:0c:2b:53:6f:73: de:b5:5f:fb:72:8e:a8:47:7e:fe:e5:1b:1b:b3:62: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CB:44:6C:82:82:B0:1B:F7:88:6C:00:C9:EC:51:A9:66:4B:26:87 X509v3 Authority Key Identifier: keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c6:69:c8:dd:31:53:68:62:46:b4:1a:2c:63:e9:b7:b5:f1: f9:c1:25:98:1f:75:d1:f2:46:0b:a5:52:f2:00:a3:09:f9:55: b8:55:12:ea:8d:12:bd:af:f2:1f:9b:b5:db:00:7c:a9:d8:70: be:a8:3e:4c:75:ba:77:f7:0e:a7:09:b2:09:a4:20:34:10:7f: 53:fc:1c:ca:32:aa:7e:21:ac:e9:0d:97:10:a0:3c:a5:ce:23: b9:0a:31:4d:af:1c:46:d1:6e:23:25:75:bc:ac:45:7b:4d:c0: 4f:75:3a:2f:a4:f9:08:f6:2b:0c:65:82:fb:ad:ea:fa:23:1a: 1b:c6:c7:5e:e1:cc:af:4d:ea:56:02:33:54:93:be:e1:c0:97: fa:ef:e1:a1:cc:08:ed:e6:20:9b:7f:b2:a2:91:94:4c:81:48: d3:dc:49:9d:f0:2b:eb:84:8b:50:c8:f6:36:b1:93:b3:8f:37: cd:f0:7e:6b:72:74:bd:2c:0c:95:6b:aa:34:e4:83:67:a8:da: fa:49:4b:3c:31:98:49:ee:6e:7c:c7:08:62:ff:19:bd:ef:f8: 7f:4a:b5:4d:ba:53:12:17:0c:29:ed:92:44:59:89:b3:6c:86: 56:8a:bb:d4:6c:8c:e7:1d:de:a1:8e:4c:91:63:53:6a:7f:c9: b2:7a:23:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjkxQTExMC8GA1UEBRMoNzRDQjg1QTYzNDlDM0NBNjE4NEFFQ0Y3MEY4M0FGRkRG Q0UwQTdGNzAeFw0yNTA1MTEwNTUwMDlaFw0yNTA1MTgwNTUwMDlaMBgxFjAUBgNV BAMTDTY4MjAzYTkxLTgyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyidNMnBzAKFynA2AAfXwAxFaTL4fbEkwfS/7dEife0uaiY+WHSym5ddenSSTK CdOBhO2d3389kmpRGH3Qtg/Kjot7JUG5YCwDHqeuM9xCOoQyftDpMyhxKSCggO4z hhSyg65E9PXIlUyofcQfQ7qZeLuWCGSWF0bDcq8bvQbZ0Vhqx/uadeal/d/K0CNP LAfddjc6j6jcfyoTmQj49Vurvr/TXOstmrG3XC5uM59uvKA1bF94Jsk5tT5W4GoP d+tAezslY8X1vClhb8DlQ3HMsFhWmTIx4D+75aX8bNTMai5c/c5Q7JCk9ooMK1Nv c961X/tyjqhHfv7lGxuzYuJZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmMtEbIKC sBv3iGwAyexRqWZLJocwHwYDVR0jBBgwFoAUdMuFpjScPKYYSuz3D4Ov/fzgp/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTFBLzc1MUYzMURBQTI4 NTExRUY4NDJCOTQxMEM0RjlBRTAyL2RNdUZwalNjUEtZWVN1ejNENE92X2Z6Z3Bf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZE11RnBqU2NQS1lZU3V6M0Q0T3ZfZnpncF9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 OTFBLzc1MUYzMURBQTI4NTExRUY4NDJCOTQxMEM0RjlBRTAyL2RNdUZwalNjUEtZ WVN1ejNENE92X2Z6Z3BfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIrGacjdMVNoYka0Gixj6be18fnBJZgfddHyRgulUvIAown5VbhVEuqN Er2v8h+btdsAfKnYcL6oPkx1unf3DqcJsgmkIDQQf1P8HMoyqn4hrOkNlxCgPKXO I7kKMU2vHEbRbiMldbysRXtNwE91Oi+k+Qj2Kwxlgvut6vojGhvGx17hzK9N6lYC M1STvuHAl/rv4aHMCO3mIJt/sqKRlEyBSNPcSZ3wK+uEi1DI9jaxk7OPN83wfmty dL0sDJVrqjTkg2eo2vpJSzwxmEnubnzHCGL/Gb3v+H9KtU26UxIXDCntkkRZibNs hlaKu9RsjOcd3qGOTJFjU2p/ybJ6I6c= -----END CERTIFICATE-----Generated at Sun May 11 12:48:59 2025 by rpki-client