$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: EYgPJEp0GgMPApmPbeqou/7ryI1AP8u78ZqiHSp/amI= Subject key identifier: 44:C6:68:8A:2E:A3:89:E5:7B:64:8F:BA:73:1B:1A:99:4D:61:04:C6 Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 35F1 Signing time: Sat 10 May 2025 15:55:15 +0000 Manifest this update: Sat 10 May 2025 15:55:14 +0000 Manifest next update: Sat 17 May 2025 15:55:14 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: 7I2BYlch8rzCez+Ao0F3f1Je2wvXSmY8Jlmo+KgSFvE=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: +veyd8W47YCvCuitg3o8ThOGXu4XRgXC3k1LgL4ZMH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: May 10 15:55:14 2025 GMT Not After : May 17 15:55:14 2025 GMT Subject: CN=681f76e2-0c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:3c:98:f4:96:da:dc:c5:cd:38:d7:d9:d3: 3b:0f:f7:98:11:fd:1d:96:d1:4d:d7:75:e1:e0:3e: 71:0d:0c:27:c1:da:44:5f:ff:03:2d:07:1c:28:45: b3:74:4c:5e:13:ab:68:08:92:df:15:2a:9b:6b:ce: fb:85:53:25:d3:89:92:3d:48:52:74:41:d6:91:99: 5a:10:90:77:00:4f:0f:2b:7f:c6:6c:ef:f5:53:a8: 04:29:9a:36:f4:97:18:d8:a5:54:f1:6c:77:6a:d7: 9a:44:b2:a2:eb:06:49:50:eb:e0:e5:d8:2b:77:ae: 81:a0:8c:cb:eb:5c:55:7c:51:05:b2:f5:35:6c:d5: c1:f8:36:1b:01:0a:7d:92:58:43:38:f5:66:0d:ef: 5b:ea:e1:18:69:e9:20:72:b4:61:ff:94:59:fa:65: 7b:a9:ce:92:bd:71:1e:a7:c1:71:60:3b:5a:86:11: 59:39:11:ef:1e:21:0c:08:d9:fe:42:27:61:f3:e6: 2c:d1:0f:ab:4e:f1:4f:c2:8e:8f:9a:cc:9d:1a:8b: f9:b3:0c:5b:20:a6:ef:d9:ac:4a:55:5c:ea:cd:37: 1a:cb:76:55:e6:8a:c0:4c:c9:75:63:af:13:b8:0c: 1c:69:de:db:19:be:6b:76:fc:f8:1b:2b:3c:4f:96: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:68:8A:2E:A3:89:E5:7B:64:8F:BA:73:1B:1A:99:4D:61:04:C6 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f4:2b:0a:64:40:ba:5c:a2:3b:e6:ae:a8:09:8c:b7:f9:fb: 32:e0:20:b3:05:95:dd:d8:91:48:87:34:f8:94:e0:a7:71:d7: 4a:0f:25:b5:ab:9d:7b:15:c7:cf:39:2d:ce:9e:89:22:f1:f6: a5:29:b0:49:cf:b9:00:7c:55:ca:4e:9b:98:55:4a:21:4e:aa: cf:4d:04:95:dd:0c:6e:e7:f6:ec:ae:4f:82:a3:69:04:8c:5b: b0:0e:29:35:cf:84:2c:37:c1:3b:ba:43:71:77:30:84:9f:c2: 17:e9:aa:e0:19:d7:ad:3c:4d:5b:e4:0b:f5:2b:f7:63:7d:00: b3:cb:96:22:65:5e:cb:23:da:56:4c:8d:eb:15:2a:dc:b8:ff: 4e:b1:f0:6d:dc:34:01:1f:1c:60:83:e1:20:6c:93:ff:31:bf: 2c:33:f3:f0:59:96:de:3d:b7:12:3b:4f:d0:15:c7:e0:e4:e6: d6:fa:b2:96:16:b0:7a:1b:f7:71:3a:0e:a9:77:3a:e6:42:37: c9:e0:90:ad:dc:61:64:21:57:b4:a8:c6:f5:e4:7a:91:e6:5a: 32:ab:40:55:5e:39:08:c4:c1:ac:00:63:05:4b:55:e1:68:e9: 5f:90:25:3b:0f:07:e9:f3:fa:fb:4a:16:58:09:fd:a1:c0:bb: 97:b7:8b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNTEwMTU1NTE0WhcNMjUwNTE3MTU1NTE0WjAYMRYwFAYD VQQDEw02ODFmNzZlMi0wYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+88mPSW2tzFzTjX2dM7D/eYEf0dltFN13Xh4D5xDQwnwdpEX/8DLQccKEWz dExeE6toCJLfFSqba877hVMl04mSPUhSdEHWkZlaEJB3AE8PK3/GbO/1U6gEKZo2 9JcY2KVU8Wx3ateaRLKi6wZJUOvg5dgrd66BoIzL61xVfFEFsvU1bNXB+DYbAQp9 klhDOPVmDe9b6uEYaekgcrRh/5RZ+mV7qc6SvXEep8FxYDtahhFZORHvHiEMCNn+ Qidh8+Ys0Q+rTvFPwo6PmsydGov5swxbIKbv2axKVVzqzTcay3ZV5orATMl1Y68T uAwcad7bGb5rdvz4Gys8T5Z7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETGaIou o4nle2SPunMbGplNYQTGMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj9CsKZEC6XKI75q6oCYy3+fsy4CCzBZXd2JFIhzT4lOCncddKDyW1 q517FcfPOS3Onoki8falKbBJz7kAfFXKTpuYVUohTqrPTQSV3Qxu5/bsrk+Co2kE jFuwDik1z4QsN8E7ukNxdzCEn8IX6argGdetPE1b5Av1K/djfQCzy5YiZV7LI9pW TI3rFSrcuP9OsfBt3DQBHxxgg+EgbJP/Mb8sM/PwWZbePbcSO0/QFcfg5ObW+rKW FrB6G/dxOg6pdzrmQjfJ4JCt3GFkIVe0qMb15HqR5loyq0BVXjkIxMGsAGMFS1Xh aOlfkCU7Dwfp8/r7ShZYCf2hwLuXt4tC -----END CERTIFICATE-----Generated at Mon May 12 13:28:09 2025 by rpki-client