$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: +E4WlaB7USzpQcCg0rtwQ5aK71q4JlwefsXb3RIvsC8= Subject key identifier: 27:6E:21:38:08:F4:1E:9F:B2:AC:53:74:44:4C:04:E5:5E:B9:F4:2C Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0112 Signing time: Sat 03 May 2025 04:14:40 +0000 Manifest this update: Sat 03 May 2025 04:14:40 +0000 Manifest next update: Sat 10 May 2025 04:14:40 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: HVzp3oR0eCWLmGLkYnoXHmHJdR9jVWAfRRRFthH0tUg=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: May 3 04:14:40 2025 GMT Not After : May 10 04:14:40 2025 GMT Subject: CN=68159830-6a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:19:02:81:66:a2:5a:8c:10:5c:af:6c:4a:fc: f2:79:b5:ed:0d:25:8b:bb:2d:92:6d:a5:99:17:c6: 26:ec:1e:cd:82:47:97:26:95:6a:12:f7:1f:63:c8: 21:9d:9b:65:56:08:c1:57:1e:dc:8d:8a:91:5a:62: d8:4b:49:25:58:8f:c4:85:7b:2b:6d:35:1c:67:72: 44:5d:ed:d1:6c:0b:b4:3a:37:dd:6a:2e:a6:fa:e8: e4:c1:2d:08:77:e6:84:c4:08:63:cb:9e:01:71:4c: 25:7a:c1:96:cb:1a:50:f2:60:cb:de:fe:c1:23:a5: e1:4e:89:d3:17:08:1b:67:dc:c8:fc:a0:36:3d:4f: 53:df:9a:9b:76:ec:fe:0c:07:8e:cb:34:48:c2:27: 6b:2b:50:fc:ab:1b:e8:c1:0a:cd:6c:ce:8e:24:c3: ec:27:5c:d1:5b:f1:76:92:45:87:c0:04:7a:f8:f3: 24:28:bc:df:aa:5b:fc:37:84:fa:cf:1d:88:30:9b: f1:72:4c:fa:0d:a2:bf:4b:e4:c0:63:fc:2f:a0:88: e3:98:af:64:3b:b6:2e:38:ce:e4:01:1d:53:e9:af: 8f:ff:f8:2f:27:e0:33:8e:a4:24:4e:9e:80:91:69: 6b:f7:f6:fc:b4:1f:c7:ce:c6:42:9e:01:f4:d0:11: 13:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:21:38:08:F4:1E:9F:B2:AC:53:74:44:4C:04:E5:5E:B9:F4:2C X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7c:82:0e:bb:45:2f:f8:bf:56:e2:75:01:74:92:55:dd:41: 1e:c6:5d:b4:c0:12:15:44:31:73:f1:e1:6c:09:90:95:12:63: ed:7f:fb:1c:f3:14:21:23:e3:c7:31:68:eb:72:5a:51:c1:5f: f9:50:83:49:e9:02:d8:52:53:0a:02:14:b8:e0:86:94:71:96: 8b:14:47:0a:46:3b:fd:da:e2:ea:b8:cb:7b:39:91:7d:a5:7c: e9:6a:2f:64:32:1c:f2:ad:a9:ed:f7:0a:dc:68:ab:b0:8b:49: 83:cc:aa:07:50:9f:73:ed:57:74:be:1a:f0:00:58:d3:bb:f0: e3:4c:ad:ed:09:8a:61:dc:12:d4:8e:e6:72:82:9d:b6:4e:07: b2:df:b4:4c:9d:3e:5d:50:2b:cf:f1:83:9b:ea:d1:37:81:f0: a3:d8:d2:3e:70:ac:97:cb:69:9e:55:06:41:6b:74:72:89:03: 7d:24:f6:80:92:14:27:74:f4:06:7d:8b:f8:04:a0:e7:90:1a: 07:50:63:ea:27:63:10:df:34:42:5e:b7:35:d5:03:75:64:b0: f6:43:b9:a4:d6:46:54:5b:ec:cd:1c:ff:85:c1:d8:3b:5e:d7: ef:f5:74:0a:30:a1:bb:a9:f3:0d:ed:3f:ee:33:45:0a:94:c9: 1c:ab:f9:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwNTAzMDQxNDQwWhcNMjUwNTEwMDQxNDQwWjAYMRYwFAYD VQQDEw02ODE1OTgzMC02YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RkCgWaiWowQXK9sSvzyebXtDSWLuy2SbaWZF8Ym7B7NgkeXJpVqEvcfY8gh nZtlVgjBVx7cjYqRWmLYS0klWI/EhXsrbTUcZ3JEXe3RbAu0Ojfdai6m+ujkwS0I d+aExAhjy54BcUwlesGWyxpQ8mDL3v7BI6XhTonTFwgbZ9zI/KA2PU9T35qbduz+ DAeOyzRIwidrK1D8qxvowQrNbM6OJMPsJ1zRW/F2kkWHwAR6+PMkKLzfqlv8N4T6 zx2IMJvxckz6DaK/S+TAY/wvoIjjmK9kO7YuOM7kAR1T6a+P//gvJ+AzjqQkTp6A kWlr9/b8tB/HzsZCngH00BETvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCduITgI 9B6fsqxTdERMBOVeufQsMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOfIIOu0Uv+L9W4nUBdJJV3UEexl20wBIVRDFz8eFsCZCVEmPtf/sc 8xQhI+PHMWjrclpRwV/5UINJ6QLYUlMKAhS44IaUcZaLFEcKRjv92uLquMt7OZF9 pXzpai9kMhzyrant9wrcaKuwi0mDzKoHUJ9z7Vd0vhrwAFjTu/DjTK3tCYph3BLU juZygp22Tgey37RMnT5dUCvP8YOb6tE3gfCj2NI+cKyXy2meVQZBa3RyiQN9JPaA khQndPQGfYv4BKDnkBoHUGPqJ2MQ3zRCXrc11QN1ZLD2Q7mk1kZUW+zNHP+Fwdg7 Xtfv9XQKMKG7qfMN7T/uM0UKlMkcq/lF -----END CERTIFICATE-----Generated at Mon May 5 03:31:15 2025 by rpki-client