$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: RzqIWWkMPlcabh7FC7x2VJFXOS0voC6S+L+m7ysdrpo= Subject key identifier: 90:EC:0D:56:A8:A9:19:73:A8:7A:59:2D:3A:25:0E:4A:09:9E:72:47 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1325 Signing time: Mon 12 May 2025 19:30:22 +0000 Manifest this update: Mon 12 May 2025 19:30:22 +0000 Manifest next update: Mon 19 May 2025 19:30:22 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: gFw+IAT4TqfHgyfg58DS1+cMRf6/bUxQcbVCpKa9Euo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: May 12 19:30:22 2025 GMT Not After : May 19 19:30:22 2025 GMT Subject: CN=68224c4e-0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:90:83:73:f1:1d:e8:ec:ae:3b:ed:41:d9: f7:02:c0:bb:92:76:a6:bd:cd:a7:2b:ed:b8:bb:8a: fb:e1:ca:e5:09:90:28:04:b8:37:6f:c9:2a:8a:54: ef:31:43:74:6e:b7:d6:5d:e7:97:d2:ad:e1:0b:12: 62:b8:1b:3d:2c:6a:c3:a4:d6:30:d3:a9:48:13:a0: 74:41:d1:ea:5c:6a:56:12:9b:0d:4f:f8:11:8a:33: a2:34:95:48:66:0b:6e:ef:00:8b:a8:14:c7:c5:a8: e9:e9:0f:02:6e:b7:c0:8b:3a:c7:fc:8b:ca:a7:6b: 9a:1a:61:52:ac:b3:51:36:a6:15:0f:9a:40:f4:ed: 65:b6:ed:50:17:d1:7f:e9:7d:cb:bc:1b:a1:90:46: 43:80:cb:40:fc:93:e4:f9:67:04:69:9d:45:5f:7b: 45:0d:1b:ef:72:70:53:87:23:30:a0:81:08:3a:bd: c7:42:f0:67:8c:04:14:4a:d8:f3:a9:13:99:30:10: 41:e8:b8:ed:f1:d9:c7:2a:59:c7:03:c9:8c:42:8f: 1a:9f:d5:83:f6:9f:85:33:af:ab:80:eb:7b:20:8b: cc:6d:0d:b9:74:55:2a:41:e3:7c:a3:57:32:62:5b: f8:eb:05:51:48:5f:03:57:94:02:ac:e3:59:93:4b: e5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EC:0D:56:A8:A9:19:73:A8:7A:59:2D:3A:25:0E:4A:09:9E:72:47 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fc:b2:00:cf:18:01:46:ec:04:a4:22:3e:d3:f4:a8:c9:de: 14:da:56:fb:b1:73:37:91:1f:29:f4:70:17:44:41:73:49:64: 3b:88:1c:87:d3:c1:00:7b:ae:2c:1c:e6:56:0d:19:27:f1:a6: b4:96:07:30:72:9f:6c:0b:3d:a6:1f:d8:ea:5c:9b:18:b4:7b: 64:36:e1:96:84:e3:5c:a7:4c:fe:13:10:75:a9:a1:27:5f:fe: 23:3f:d2:24:29:d2:e8:bc:3c:68:f2:d5:f1:cd:eb:27:5f:6b: f1:12:8b:98:f4:be:44:85:34:45:a0:e1:c6:93:0b:8e:f7:dd: f8:3b:bb:8b:0f:66:e8:4d:13:73:b7:6b:6c:94:b4:91:9e:35: 43:c4:24:75:8e:82:b8:48:17:ef:0c:84:2c:5b:90:24:b7:78: 31:ad:bc:59:77:bd:73:b7:f3:69:6a:b3:00:1c:e7:2b:33:c3: 3c:8c:83:86:b9:af:a8:8a:41:a2:8d:64:73:4f:61:18:44:be: 31:4d:19:22:58:7b:71:4a:a1:df:c4:e5:30:4b:e2:00:7f:be: fa:81:85:b3:2f:23:21:e9:69:6e:59:b2:72:2d:5f:bb:68:6c: 95:cd:bc:4d:8f:86:92:e0:02:19:86:81:59:b5:57:ad:c2:cc: 50:40:27:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwNTEyMTkzMDIyWhcNMjUwNTE5MTkzMDIyWjAYMRYwFAYD VQQDEw02ODIyNGM0ZS0wMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WiQg3PxHejsrjvtQdn3AsC7knamvc2nK+24u4r74crlCZAoBLg3b8kqilTv MUN0brfWXeeX0q3hCxJiuBs9LGrDpNYw06lIE6B0QdHqXGpWEpsNT/gRijOiNJVI Zgtu7wCLqBTHxajp6Q8CbrfAizrH/IvKp2uaGmFSrLNRNqYVD5pA9O1ltu1QF9F/ 6X3LvBuhkEZDgMtA/JPk+WcEaZ1FX3tFDRvvcnBThyMwoIEIOr3HQvBnjAQUStjz qROZMBBB6Ljt8dnHKlnHA8mMQo8an9WD9p+FM6+rgOt7IIvMbQ25dFUqQeN8o1cy Ylv46wVRSF8DV5QCrONZk0vlzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDsDVao qRlzqHpZLTolDkoJnnJHMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu/LIAzxgBRuwEpCI+0/Soyd4U2lb7sXM3kR8p9HAXREFzSWQ7iByH 08EAe64sHOZWDRkn8aa0lgcwcp9sCz2mH9jqXJsYtHtkNuGWhONcp0z+ExB1qaEn X/4jP9IkKdLovDxo8tXxzesnX2vxEouY9L5EhTRFoOHGkwuO9934O7uLD2boTRNz t2tslLSRnjVDxCR1joK4SBfvDIQsW5Akt3gxrbxZd71zt/NparMAHOcrM8M8jIOG ua+oikGijWRzT2EYRL4xTRkiWHtxSqHfxOUwS+IAf776gYWzLyMh6WluWbJyLV+7 aGyVzbxNj4aS4AIZhoFZtVetwsxQQCf7 -----END CERTIFICATE-----Generated at Wed May 14 15:10:23 2025 by rpki-client