$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: nl7nyYuqdbCr+zRU4jLFiPNAyBgiPrydE0CYLdFLzyY= Subject key identifier: 6E:FB:AD:B5:40:48:5D:FD:10:92:88:DC:AB:7A:33:5F:86:5E:93:98 Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 1902 Signing time: Mon 12 May 2025 16:23:29 +0000 Manifest this update: Mon 12 May 2025 16:23:28 +0000 Manifest next update: Mon 19 May 2025 16:23:28 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: Yymwj7xQrNEE2s7wyS4PxFj2syfks9L76cWqTTPmSMk=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6416 (0x1910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: May 12 16:23:28 2025 GMT Not After : May 19 16:23:28 2025 GMT Subject: CN=68222081-5bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cf:b6:01:31:63:41:b2:1c:43:0e:3e:24:ac: 2d:9f:9e:43:e2:f1:11:b8:88:46:52:0e:0e:a0:a0: 24:7b:78:52:fa:b6:01:c1:3f:c3:9b:9a:ed:b3:8b: 3d:b9:ba:0c:4b:57:a9:f2:84:39:c5:0a:e0:87:db: 27:0e:e7:e3:7c:16:b6:48:36:cc:6d:dc:29:7d:3a: 73:4d:6b:de:1c:59:04:a1:f4:e3:61:ea:7c:f3:6c: 7d:97:ce:e7:12:d4:82:50:c0:34:b7:3e:0a:61:db: 49:bf:3f:12:e4:7d:b4:f9:0f:0d:0f:ad:4e:5b:bf: 02:6b:59:52:06:55:91:d9:d7:28:7c:6d:2f:ab:a6: 7a:e0:b2:d8:ef:8b:ad:ae:99:b7:ef:7c:fc:fe:51: 7e:36:4b:8f:7d:9f:6a:5d:01:d2:bb:18:32:bd:cd: 1b:29:13:99:6b:d3:f3:57:d0:37:6c:5e:56:5f:5c: 28:87:b7:d7:38:03:c7:3d:c4:b4:7c:01:73:d1:89: 8a:ef:1d:8a:1b:c5:9c:0c:db:ac:34:96:69:c9:ec: 25:13:0f:e5:d1:a8:11:e8:15:4d:30:9a:9a:ef:92: 2b:90:91:eb:a4:98:00:15:e3:6e:a8:5f:3c:e9:97: 38:e1:11:e2:f5:b2:9c:14:2f:52:f2:df:d3:6e:56: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FB:AD:B5:40:48:5D:FD:10:92:88:DC:AB:7A:33:5F:86:5E:93:98 X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:d5:2f:7c:ee:5f:3b:4e:a1:5a:91:68:4b:a1:d0:c1:c1: 51:cf:b9:39:66:d2:46:bf:b2:03:1d:b1:40:35:29:64:db:f4: bf:f8:ac:4d:6c:93:78:dd:ea:59:69:bf:7e:21:3a:10:1b:d0: b2:9b:b7:d0:4c:a8:ae:e6:d4:33:f7:08:16:93:bb:1b:9a:24: 1b:19:87:da:1b:04:a7:34:07:07:28:39:24:cf:3d:8c:da:d3: 1a:95:48:07:5b:f3:7f:b4:da:d7:e3:65:35:c1:c0:88:a7:5b: cd:ea:0b:3e:c6:79:1b:34:fb:37:73:84:f5:99:90:1e:b6:ea: 7c:a5:26:54:67:cb:8f:d7:d5:6e:85:14:c2:c1:52:02:97:d5: 16:40:89:78:c0:f1:7b:ba:d7:02:99:8b:31:54:27:5e:20:08: 53:a8:09:82:42:f0:57:45:c4:ef:1f:20:4c:ae:f0:b0:45:50: d7:ed:88:ea:f7:ce:21:f4:b5:1e:4b:02:c2:aa:83:f3:89:10: 2d:5d:df:11:22:87:31:de:52:f3:7f:fa:fe:76:da:52:9f:f1: 1b:8e:df:73:a6:e8:42:88:16:de:a7:67:55:46:0b:f7:ba:83: 71:84:06:ba:57:be:fb:37:4b:fe:91:59:62:de:15:b1:72:9d: 34:74:2f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNTEyMTYyMzI4WhcNMjUwNTE5MTYyMzI4WjAYMRYwFAYD VQQDEw02ODIyMjA4MS01YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48+2ATFjQbIcQw4+JKwtn55D4vERuIhGUg4OoKAke3hS+rYBwT/Dm5rts4s9 uboMS1ep8oQ5xQrgh9snDufjfBa2SDbMbdwpfTpzTWveHFkEofTjYep882x9l87n EtSCUMA0tz4KYdtJvz8S5H20+Q8ND61OW78Ca1lSBlWR2dcofG0vq6Z64LLY74ut rpm373z8/lF+NkuPfZ9qXQHSuxgyvc0bKROZa9PzV9A3bF5WX1woh7fXOAPHPcS0 fAFz0YmK7x2KG8WcDNusNJZpyewlEw/l0agR6BVNMJqa75IrkJHrpJgAFeNuqF88 6Zc44RHi9bKcFC9S8t/TblYeTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG77rbVA SF39EJKI3Kt6M1+GXpOYMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsp9UvfO5fO06hWpFoS6HQwcFRz7k5ZtJGv7IDHbFANSlk2/S/+KxN bJN43epZab9+IToQG9Cym7fQTKiu5tQz9wgWk7sbmiQbGYfaGwSnNAcHKDkkzz2M 2tMalUgHW/N/tNrX42U1wcCIp1vN6gs+xnkbNPs3c4T1mZAetup8pSZUZ8uP19Vu hRTCwVICl9UWQIl4wPF7utcCmYsxVCdeIAhTqAmCQvBXRcTvHyBMrvCwRVDX7Yjq 984h9LUeSwLCqoPziRAtXd8RIocx3lLzf/r+dtpSn/Ebjt9zpuhCiBbep2dVRgv3 uoNxhAa6V777N0v+kVli3hWxcp00dC88 -----END CERTIFICATE-----Generated at Tue May 13 11:23:32 2025 by rpki-client