$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: 556sU8rXMcJbEQ5eOsg3eumg2nbmeA83WL//tCS/UJE= Subject key identifier: 9F:4D:36:C2:EC:C1:9C:DF:0F:ED:AA:0F:D3:01:65:EB:3A:8C:AF:9A Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: 97 Signing time: Tue 13 May 2025 05:32:14 +0000 Manifest this update: Tue 13 May 2025 05:32:13 +0000 Manifest next update: Tue 20 May 2025 05:32:13 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: aSiCWL+Lo2Vx7nkzzH69PV2HVcmmtOnTgRzyrZIjw6s=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: May 13 05:32:13 2025 GMT Not After : May 20 05:32:13 2025 GMT Subject: CN=6822d95d-4599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:aa:f5:f7:41:0b:d0:9f:26:4a:03:9b:96: 65:68:bb:93:6f:9f:d0:cf:90:5e:61:c6:53:74:4d: f8:cd:e4:55:93:d0:0c:ec:d0:64:77:f8:39:1c:69: 15:d7:7d:a7:86:3e:93:bd:6b:38:6e:1f:e8:82:9c: 75:e0:3d:c3:ec:3c:0f:7f:28:3d:29:25:0f:56:bc: 4f:82:24:9a:51:8f:ed:76:b8:b2:0c:0f:23:e2:3e: 4b:d3:40:5e:36:85:e8:65:cc:33:ab:26:d3:2a:de: 5a:13:37:17:e9:1a:2b:94:ea:fe:e3:64:6e:90:d8: eb:bf:fa:db:0a:9c:cb:b6:8d:ef:c2:b9:cf:15:38: 67:62:58:65:c4:2d:99:5d:74:7a:13:57:d5:b4:0c: 7a:ec:55:8b:d3:51:21:d7:a6:aa:4d:45:96:c2:e8: 40:12:52:7f:23:b0:15:7c:5e:77:86:c5:ab:25:dc: 9e:ec:1d:fc:2f:8a:49:44:17:c3:6f:07:49:ca:a4: 23:a5:f5:6c:80:98:0f:3e:d9:29:ee:f3:1b:6c:61: 71:03:61:32:6c:ae:44:df:47:d5:26:14:10:a6:5a: e2:8f:0e:40:b4:8d:27:b3:0e:a4:b3:64:cc:20:18: cc:6e:24:f3:e9:fc:06:db:1e:66:ed:15:a2:3e:b0: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:36:C2:EC:C1:9C:DF:0F:ED:AA:0F:D3:01:65:EB:3A:8C:AF:9A X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:30:de:ba:a4:c8:94:ce:a0:b6:75:c8:39:74:1f:8b:49:84: c1:54:9e:f2:8d:36:b3:5b:2b:7d:e5:47:56:29:2b:b7:0a:cf: 9f:ea:2a:46:fb:70:c0:f3:75:50:02:25:68:ae:3b:68:88:df: ab:e7:4a:4a:41:cc:50:b6:29:61:30:16:bc:bb:0a:db:42:7b: d2:c7:8f:c7:d6:72:b4:81:b2:94:a7:41:07:02:30:fa:2e:54: 19:c6:fa:ea:fd:8b:2e:cf:82:6c:73:a3:04:e0:c7:15:80:e0: ed:b4:5a:0d:30:80:47:74:83:21:d7:df:59:7f:80:72:8c:b0: 01:ce:96:8b:7f:67:a1:57:53:1f:e6:24:d6:14:8d:c0:3f:a6: da:29:9d:d9:45:83:b8:20:13:98:4e:6a:df:3f:c3:74:2b:de: 91:f2:aa:9a:19:7d:2d:4e:90:cc:f3:e7:82:63:64:f5:47:c0: 5a:f0:ad:99:b2:40:f9:22:b2:52:7c:0c:1b:08:60:7a:13:bc: 28:71:70:be:1e:17:4c:88:1a:f2:fa:55:02:f3:af:bf:7e:4c: 60:8a:ff:0b:67:c2:1f:da:68:79:c9:9b:bd:0e:d2:fc:b0:0b: 02:56:f8:4c:88:f1:70:64:bd:bd:1c:8d:6e:33:bd:55:11:3a: 86:51:84:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwNTEzMDUzMjEzWhcNMjUwNTIwMDUzMjEzWjAYMRYwFAYD VQQDEw02ODIyZDk1ZC00NTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweaq9fdBC9CfJkoDm5ZlaLuTb5/Qz5BeYcZTdE34zeRVk9AM7NBkd/g5HGkV 132nhj6TvWs4bh/ogpx14D3D7DwPfyg9KSUPVrxPgiSaUY/tdriyDA8j4j5L00Be NoXoZcwzqybTKt5aEzcX6RorlOr+42RukNjrv/rbCpzLto3vwrnPFThnYlhlxC2Z XXR6E1fVtAx67FWL01Eh16aqTUWWwuhAElJ/I7AVfF53hsWrJdye7B38L4pJRBfD bwdJyqQjpfVsgJgPPtkp7vMbbGFxA2EybK5E30fVJhQQplrijw5AtI0nsw6ks2TM IBjMbiTz6fwG2x5m7RWiPrDbVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9NNsLs wZzfD+2qD9MBZes6jK+aMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4MN66pMiUzqC2dcg5dB+LSYTBVJ7yjTazWyt95UdWKSu3Cs+f6ipG +3DA83VQAiVorjtoiN+r50pKQcxQtilhMBa8uwrbQnvSx4/H1nK0gbKUp0EHAjD6 LlQZxvrq/Ysuz4Jsc6ME4McVgODttFoNMIBHdIMh199Zf4ByjLABzpaLf2ehV1Mf 5iTWFI3AP6baKZ3ZRYO4IBOYTmrfP8N0K96R8qqaGX0tTpDM8+eCY2T1R8Ba8K2Z skD5IrJSfAwbCGB6E7wocXC+HhdMiBry+lUC86+/fkxgiv8LZ8If2mh5yZu9DtL8 sAsCVvhMiPFwZL29HI1uM71VETqGUYSA -----END CERTIFICATE-----Generated at Tue May 13 14:17:29 2025 by rpki-client