$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: 9f/rhWmI8/NN5DSTeyt8q74DOQoPlMtMDpy7jytkEcE= Subject key identifier: A9:02:DD:50:96:20:D9:2E:18:59:22:74:DB:D2:83:E4:13:F4:66:F8 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B48 Signing time: Wed 14 May 2025 19:15:28 +0000 Manifest this update: Wed 14 May 2025 19:15:28 +0000 Manifest next update: Wed 21 May 2025 19:15:28 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: EhWhJ66vl7KPLX/5M3EU9WqmnIls6ve/rNNcXvX/8YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: May 14 19:15:28 2025 GMT Not After : May 21 19:15:28 2025 GMT Subject: CN=6824ebd0-2ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:ee:ec:be:15:06:b7:33:c0:03:9a:de:38: 68:5a:4e:a3:9f:3a:37:93:a8:06:5d:36:a4:de:f2: ba:ac:cc:b7:7a:0c:21:60:65:c2:4f:30:c0:dd:95: 91:e3:9f:3e:1f:2e:24:ae:14:44:45:ff:28:d1:cf: d1:03:22:64:48:e3:93:46:88:6d:e3:f4:a2:67:01: 80:30:8c:3b:ac:7c:08:5f:50:70:73:a2:c3:c6:62: 9c:48:b6:1e:df:b9:19:c6:7b:48:ac:1a:1a:fe:d4: 34:9b:ee:14:93:cb:6f:76:44:e6:c6:36:8a:46:ff: b3:6f:7f:72:54:db:6d:98:16:fe:38:76:13:a8:cc: 9a:14:c8:d9:01:6e:c7:6b:18:67:48:8d:a2:2b:c8: 6e:5a:b0:ce:16:5c:a2:8b:93:e2:7c:24:a1:ff:e0: c9:74:76:ac:5e:af:7a:97:2c:53:74:c2:c8:b8:63: 1f:72:12:af:ab:bf:8d:6d:73:86:d2:34:46:33:ff: 53:14:e2:84:39:9d:ad:4a:4a:e3:7d:47:bb:3f:e9: d6:72:92:5f:55:1f:20:07:bb:e7:a3:51:a0:a5:40: 06:07:a6:2d:16:be:c0:fe:b5:ec:ea:c2:63:3b:c8: f6:c9:18:e1:61:10:7e:5e:9e:f4:cb:41:2d:c7:da: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:DD:50:96:20:D9:2E:18:59:22:74:DB:D2:83:E4:13:F4:66:F8 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:36:0f:40:b7:f1:42:17:1c:7c:c4:25:18:64:92:30:61:90: 23:37:93:f5:bf:f0:44:37:ce:e7:c5:61:1b:fa:fb:fb:0c:d4: 23:ba:63:48:2d:5d:37:7d:a7:6d:e2:37:dc:8a:24:ca:0e:e0: d9:26:bc:8a:6b:c5:2c:d6:21:a1:28:f1:84:ab:2f:e4:a0:3c: e6:e2:18:83:00:8a:80:d2:27:24:57:5f:64:d1:a0:9d:02:7a: 35:a2:a0:aa:05:bc:c7:8b:6a:df:27:4a:e7:41:41:e2:f2:25: 1b:46:ae:af:26:76:32:b3:1e:3e:36:87:9e:92:9d:2b:6f:7c: b6:91:f3:a2:66:2d:90:94:43:3b:ba:0c:57:96:5e:42:22:88: c0:fa:64:cb:26:f5:51:44:15:df:e0:77:69:be:86:5b:d6:9e: f5:95:0e:42:ff:32:17:1e:de:9d:0e:b2:f6:6e:f1:17:5a:3e: a8:49:9e:ef:43:5a:2c:7d:bc:47:5a:d0:ee:b7:72:5d:fc:38: 03:75:24:db:97:67:9e:24:74:13:b8:26:fb:f5:6a:9e:98:61: 7f:04:e3:6f:66:18:84:0f:93:6f:35:8a:a3:fd:15:32:ef:55: 21:bb:2f:14:85:e2:8d:ef:fb:7b:e8:df:9d:03:e0:ce:ca:e2: 28:2f:a1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwNTE0MTkxNTI4WhcNMjUwNTIxMTkxNTI4WjAYMRYwFAYD VQQDEw02ODI0ZWJkMC0yYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBru7L4VBrczwAOa3jhoWk6jnzo3k6gGXTak3vK6rMy3egwhYGXCTzDA3ZWR 458+Hy4krhRERf8o0c/RAyJkSOOTRoht4/SiZwGAMIw7rHwIX1Bwc6LDxmKcSLYe 37kZxntIrBoa/tQ0m+4Uk8tvdkTmxjaKRv+zb39yVNttmBb+OHYTqMyaFMjZAW7H axhnSI2iK8huWrDOFlyii5PifCSh/+DJdHasXq96lyxTdMLIuGMfchKvq7+NbXOG 0jRGM/9TFOKEOZ2tSkrjfUe7P+nWcpJfVR8gB7vno1GgpUAGB6YtFr7A/rXs6sJj O8j2yRjhYRB+Xp70y0Etx9pQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkC3VCW INkuGFkidNvSg+QT9Gb4MB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Ng9At/FCFxx8xCUYZJIwYZAjN5P1v/BEN87nxWEb+vv7DNQjumNI LV03fadt4jfciiTKDuDZJryKa8Us1iGhKPGEqy/koDzm4hiDAIqA0ickV19k0aCd Ano1oqCqBbzHi2rfJ0rnQUHi8iUbRq6vJnYysx4+Noeekp0rb3y2kfOiZi2QlEM7 ugxXll5CIojA+mTLJvVRRBXf4HdpvoZb1p71lQ5C/zIXHt6dDrL2bvEXWj6oSZ7v Q1osfbxHWtDut3Jd/DgDdSTbl2eeJHQTuCb79WqemGF/BONvZhiED5NvNYqj/RUy 71Uhuy8UheKN7/t76N+dA+DOyuIoL6Eb -----END CERTIFICATE-----Generated at Thu May 15 19:21:12 2025 by rpki-client