$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: EHB1JWtSAbs7IXscJNg6KD+WMB+5rb+iXny5kgGQ/qw= Subject key identifier: 32:4A:64:D0:B1:9B:EF:09:A2:F3:19:0A:79:A3:95:81:F8:54:DC:33 Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: 015F Signing time: Thu 15 May 2025 03:27:57 +0000 Manifest this update: Thu 15 May 2025 03:27:56 +0000 Manifest next update: Thu 22 May 2025 03:27:56 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: mH/tX2ad666cb2tV66AvuqtUQttvJ1MpCfSRYRdjCKk=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: ghcy6JDfa3u1ukpc0kfcadEcqAXRi4dJb4eZF65dqFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: May 15 03:27:56 2025 GMT Not After : May 22 03:27:56 2025 GMT Subject: CN=68255f3d-2dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:2c:01:98:36:f0:ec:64:1d:4b:2c:81:64: 7f:a8:34:d3:30:53:a8:10:97:d6:a6:2a:a4:0f:b2: 15:10:b5:ae:20:f4:0c:dc:19:a5:bb:50:42:ce:da: d7:8b:67:18:16:ce:f5:29:f0:1c:61:26:29:6b:a3: 28:27:ab:25:6b:de:ac:bc:b9:47:db:4b:e6:b5:7a: 31:0c:ef:fa:dd:6d:14:3e:78:c0:1b:90:80:0b:6d: 9e:52:ef:a5:8c:75:81:13:87:30:24:54:6d:30:79: dd:7e:2f:9d:e5:aa:b2:4c:c3:4c:1f:e3:b3:db:1a: 7a:cb:fe:43:d5:1b:96:42:83:5c:1d:2b:65:9f:80: 94:08:7c:fe:33:f4:d0:16:19:66:17:34:89:6f:15: ff:eb:42:f3:61:a8:72:47:51:d4:0c:ff:f2:9d:b7: 2e:51:6f:fd:aa:0b:af:20:7a:8f:25:8b:a3:b3:82: b8:30:06:1e:86:e2:b3:dd:e6:da:3e:74:d1:13:f3: 44:1a:42:43:c4:a1:89:25:a0:1e:61:ac:9b:11:fa: 03:34:17:a2:a5:11:10:2d:66:de:7f:ff:42:4e:26: 2d:2a:fb:ab:b5:50:c1:00:91:0d:75:09:e2:48:85: f6:3c:9f:2c:6d:19:55:b5:23:d2:2d:5b:a4:d8:95: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:64:D0:B1:9B:EF:09:A2:F3:19:0A:79:A3:95:81:F8:54:DC:33 X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a5:05:a7:20:06:8d:42:86:99:a3:af:a0:ed:5e:fd:5d:dd: 6c:f0:a3:e4:c6:41:93:0f:50:38:dd:53:5f:a8:77:5d:5f:04: ef:2d:d4:c0:b9:58:01:5a:99:aa:5a:2c:e3:c2:ab:04:d1:bc: 67:3d:a9:0a:c7:fc:05:ad:b9:77:1f:ad:96:f4:a6:cb:38:b8: 74:8b:63:1d:1e:60:67:bc:bf:10:fa:8c:b6:75:5a:db:6e:cb: 2e:ae:44:c2:98:57:d0:19:33:e3:5f:52:06:14:c7:5c:61:da: 79:4c:ca:e4:f3:0a:8c:04:f8:b8:98:69:02:6d:44:39:2b:5f: 14:44:d2:cb:de:0e:59:ce:a7:f3:19:64:5f:bb:6d:ab:1f:4f: bb:11:a7:ce:63:23:eb:24:59:45:64:d8:20:c2:5c:21:5a:d5: 05:1a:8a:13:bd:d8:27:c7:f2:87:95:01:77:5c:de:b6:bb:8b: 18:81:91:21:3b:1f:0a:ec:9b:7f:e9:be:e5:f1:e8:3d:54:fe: bf:ce:a9:6f:13:2e:83:0a:68:26:17:76:df:c0:de:42:f4:d9: c3:bf:27:d3:1c:22:60:73:8b:21:8f:73:a1:31:c0:5a:18:e7: 86:24:de:6a:25:64:56:25:26:16:35:ac:e4:9e:0e:26:00:e6: 3b:bb:12:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUwNTE1MDMyNzU2WhcNMjUwNTIyMDMyNzU2WjAYMRYwFAYD VQQDEw02ODI1NWYzZC0yZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte4sAZg28OxkHUssgWR/qDTTMFOoEJfWpiqkD7IVELWuIPQM3Bmlu1BCztrX i2cYFs71KfAcYSYpa6MoJ6sla96svLlH20vmtXoxDO/63W0UPnjAG5CAC22eUu+l jHWBE4cwJFRtMHndfi+d5aqyTMNMH+Oz2xp6y/5D1RuWQoNcHStln4CUCHz+M/TQ FhlmFzSJbxX/60LzYahyR1HUDP/ynbcuUW/9qguvIHqPJYujs4K4MAYehuKz3eba PnTRE/NEGkJDxKGJJaAeYaybEfoDNBeipREQLWbef/9CTiYtKvurtVDBAJENdQni SIX2PJ8sbRlVtSPSLVuk2JVyYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJKZNCx m+8JovMZCnmjlYH4VNwzMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3pQWnIAaNQoaZo6+g7V79Xd1s8KPkxkGTD1A43VNfqHddXwTvLdTA uVgBWpmqWizjwqsE0bxnPakKx/wFrbl3H62W9KbLOLh0i2MdHmBnvL8Q+oy2dVrb bssurkTCmFfQGTPjX1IGFMdcYdp5TMrk8wqMBPi4mGkCbUQ5K18URNLL3g5Zzqfz GWRfu22rH0+7EafOYyPrJFlFZNggwlwhWtUFGooTvdgnx/KHlQF3XN62u4sYgZEh Ox8K7Jt/6b7l8eg9VP6/zqlvEy6DCmgmF3bfwN5C9NnDvyfTHCJgc4shj3OhMcBa GOeGJN5qJWRWJSYWNazkng4mAOY7uxIx -----END CERTIFICATE-----Generated at Thu May 15 16:07:09 2025 by rpki-client