$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: 3wDJw4Y0AHXVcb5pcDDfIir0vvd1otG5+cqEuDER0ag= Subject key identifier: 8A:49:1A:AA:7A:AE:A5:24:80:19:CB:BC:44:72:15:52:5B:4E:EC:9F Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0AAB Signing time: Sat 10 May 2025 19:16:41 +0000 Manifest this update: Sat 10 May 2025 19:16:41 +0000 Manifest next update: Sat 17 May 2025 19:16:41 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: bZ8Z94I3+eVpIlwIMGhVtciZza+biZR5ZZqpOj9X+Lc=) 2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: ip0tFLU4ZQT3pfoDMLAgucX2vvcCHaknK3+b2q4VRsQ=) 3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=) 4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=) 5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: May 10 19:16:41 2025 GMT Not After : May 17 19:16:41 2025 GMT Subject: CN=681fa619-b66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:28:09:3e:a9:18:f3:60:95:d0:51:29:8d: 38:f4:82:db:6c:79:be:50:13:5c:ff:db:6e:de:da: 65:7d:f9:57:77:25:0a:97:59:ec:5c:83:1f:f7:d5: 08:e2:d9:ca:a9:fb:8f:44:51:3d:8e:2f:f5:27:59: bc:cb:c5:98:b2:a7:fc:7a:10:31:8c:35:e5:a7:19: 72:27:0a:58:82:a9:f6:2c:84:fa:0b:7d:8f:a5:f0: 94:0b:a3:85:f9:ea:eb:b6:ba:36:f6:43:10:8b:42: 82:46:53:5e:06:9c:09:6e:1d:4d:4a:9a:78:f9:f7: 8e:bb:be:27:a3:e1:bb:f2:58:43:0a:23:96:f1:62: 4f:3e:a9:0c:2f:ce:30:36:3d:36:d9:7a:81:1e:d9: 7d:9f:4a:27:25:2a:24:1f:58:f5:78:be:04:bf:78: 69:5e:0e:17:3b:da:5c:b3:bf:1b:ec:af:a3:83:2b: ea:61:aa:f3:04:cb:96:6b:58:c1:45:82:bc:90:80: 54:32:92:11:c4:90:9e:b1:e5:d6:c4:19:5c:3a:56: 65:6d:66:b6:50:1a:4b:5a:70:ae:01:31:ff:e1:cd: 93:43:52:e1:7c:5b:41:10:11:2e:63:d8:04:f0:8e: 5e:3f:9b:a1:02:6a:b0:22:77:03:b8:40:54:97:79: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:1A:AA:7A:AE:A5:24:80:19:CB:BC:44:72:15:52:5B:4E:EC:9F X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:bc:76:ee:30:f8:7b:ab:72:02:56:a2:88:0c:1a:fe:72:39: 5d:3b:b7:69:1d:70:b8:ae:40:e0:db:90:2f:34:b0:13:3e:92: 55:34:36:61:13:31:68:67:a7:0d:77:00:91:3b:76:f9:79:38: 48:bc:f7:44:51:f3:b7:16:90:0f:25:0d:9f:0d:6c:50:2f:ed: 44:5d:dc:8a:42:71:ae:f0:5b:53:68:cd:80:a5:6f:f1:06:c6: 84:83:5e:a6:ed:f5:9c:b2:3f:97:05:df:0b:be:14:87:13:f0: be:0b:4e:04:e8:f7:58:28:30:ff:cd:9f:14:c6:9f:a8:01:a8: 9f:3b:a7:2a:8c:92:2a:a3:5f:6d:52:46:59:b6:5c:1c:b6:86: 5c:66:54:a9:00:ae:ef:f3:5d:08:d1:e1:91:9a:3a:6c:ed:3b: ff:3c:0a:fa:80:61:95:0c:ba:ff:e3:3f:e8:a9:a6:18:42:1a: ed:31:1b:84:1c:57:1c:fd:96:9d:8d:76:ae:81:04:52:63:24: ff:74:b7:72:be:c7:a3:93:1f:89:29:71:6d:d1:51:f9:ee:1d: 43:11:21:58:68:b2:e2:62:8d:3c:99:62:4b:88:20:6d:33:ea: 0d:f9:1e:7a:d3:c6:95:20:ad:89:e9:a4:14:d0:e8:7d:f5:18: 38:69:4c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwNTEwMTkxNjQxWhcNMjUwNTE3MTkxNjQxWjAYMRYwFAYD VQQDEw02ODFmYTYxOS1iNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx28oCT6pGPNgldBRKY049ILbbHm+UBNc/9tu3tplfflXdyUKl1nsXIMf99UI 4tnKqfuPRFE9ji/1J1m8y8WYsqf8ehAxjDXlpxlyJwpYgqn2LIT6C32PpfCUC6OF +errtro29kMQi0KCRlNeBpwJbh1NSpp4+feOu74no+G78lhDCiOW8WJPPqkML84w Nj022XqBHtl9n0onJSokH1j1eL4Ev3hpXg4XO9pcs78b7K+jgyvqYarzBMuWa1jB RYK8kIBUMpIRxJCeseXWxBlcOlZlbWa2UBpLWnCuATH/4c2TQ1LhfFtBEBEuY9gE 8I5eP5uhAmqwIncDuEBUl3m2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpJGqp6 rqUkgBnLvERyFVJbTuyfMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9vHbuMPh7q3ICVqKIDBr+cjldO7dpHXC4rkDg25AvNLATPpJVNDZh EzFoZ6cNdwCRO3b5eThIvPdEUfO3FpAPJQ2fDWxQL+1EXdyKQnGu8FtTaM2ApW/x BsaEg16m7fWcsj+XBd8LvhSHE/C+C04E6PdYKDD/zZ8Uxp+oAaifO6cqjJIqo19t UkZZtlwctoZcZlSpAK7v810I0eGRmjps7Tv/PAr6gGGVDLr/4z/oqaYYQhrtMRuE HFcc/ZadjXaugQRSYyT/dLdyvsejkx+JKXFt0VH57h1DESFYaLLiYo08mWJLiCBt M+oN+R5608aVIK2J6aQU0Oh99Rg4aUxM -----END CERTIFICATE-----Generated at Mon May 12 15:53:22 2025 by rpki-client