$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: 1YKxx3IpUfD6oO9v2ceRJiMEo11bDBiU1C7qe6k7Jho= Subject key identifier: 5B:35:8A:4C:B8:89:AE:84:C1:59:45:C1:37:B9:EB:2A:38:77:12:4D Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 070A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 06FD Signing time: Mon 12 May 2025 21:44:53 +0000 Manifest this update: Mon 12 May 2025 21:44:53 +0000 Manifest next update: Mon 19 May 2025 21:44:53 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: pbqeX0GL2+sub2NXLhgYPgEBFjSloNLX7b+ZBQC7tew=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1802 (0x70a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: May 12 21:44:53 2025 GMT Not After : May 19 21:44:53 2025 GMT Subject: CN=68226bd5-dc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:fa:f6:ff:a4:a5:db:cd:66:b7:1a:39:12: 57:1f:e0:00:97:dc:1c:14:90:85:4c:f9:aa:2e:bd: eb:11:a5:7e:4d:f0:f1:d8:0c:8b:10:bb:c2:f3:5c: f6:36:2b:2c:15:2a:b4:de:5e:30:ad:d0:41:76:d1: d4:6a:22:28:21:77:54:26:0a:24:5c:91:a2:0d:0e: fe:0a:49:e1:ca:c8:08:9f:35:94:26:ee:3b:06:ff: 9b:26:fc:55:49:78:48:6c:2e:81:a0:9d:2d:cb:a3: 3d:d7:88:a7:2e:57:ba:59:0e:5d:bc:61:b4:b4:df: 7b:b1:03:8f:01:4d:14:de:19:fa:31:5b:d0:bc:8f: ec:7e:1f:f8:12:b6:f6:5b:aa:8f:0c:54:be:8d:41: bb:bf:06:95:d5:eb:21:0a:02:2c:b7:e7:71:85:29: fa:a8:7a:44:62:8b:20:a4:8e:c5:08:f0:67:52:29: 64:ae:70:6a:59:f2:b9:79:31:a1:05:6f:1a:e1:2d: a1:80:9d:b3:f5:af:14:1a:51:df:51:d9:eb:25:49: 0b:fe:29:12:47:55:14:f0:3c:8b:3d:5d:48:05:5f: a1:70:6c:84:42:c1:05:9a:63:00:e5:5b:49:4a:1b: ab:44:e5:b1:7a:7b:bf:6f:2c:bc:cd:3e:76:95:f5: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:8A:4C:B8:89:AE:84:C1:59:45:C1:37:B9:EB:2A:38:77:12:4D X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:64:8a:09:88:56:a4:fb:a4:8b:4b:c0:0b:be:be:96:18:4f: df:be:06:93:0e:2f:ae:8b:09:78:8a:79:1c:e3:37:0f:d9:0e: 71:bc:ae:21:64:8c:34:84:1c:36:07:22:e6:a9:ca:2b:02:d6: e4:5a:ee:85:57:c4:18:d6:73:5d:10:32:e3:a1:7b:4b:5f:b2: 31:a9:31:44:b0:da:48:af:1a:53:12:7e:12:26:8c:f0:a7:90: c9:a1:72:aa:af:b8:1e:e5:99:54:00:03:b5:19:11:67:9f:36: 3c:bc:c7:7a:cf:30:dd:eb:02:fb:38:59:24:02:ec:a7:0f:ab: b4:82:69:a8:bb:52:70:9f:9e:5c:d7:a2:3a:55:4b:31:15:5b: 4a:db:e9:5a:e5:64:52:90:9f:c0:4a:95:a7:84:a0:32:f1:d6: 85:fe:b1:72:ce:3f:f3:ef:e7:dc:e9:39:10:45:cd:12:14:47: 67:3a:fe:97:80:bf:f9:7f:ef:7f:62:2b:f0:bb:a7:4a:e8:de: 16:49:c8:7b:a2:16:6d:e7:f8:81:44:94:40:73:77:71:94:5c: f2:ef:42:31:cf:7f:22:16:a7:82:9c:2f:01:62:ce:5e:77:49: ae:07:9e:34:c4:1f:58:9f:53:be:74:77:90:7f:c0:86:f3:d2: 62:6c:d0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUwNTEyMjE0NDUzWhcNMjUwNTE5MjE0NDUzWjAYMRYwFAYD VQQDEw02ODIyNmJkNS1kYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+f69v+kpdvNZrcaORJXH+AAl9wcFJCFTPmqLr3rEaV+TfDx2AyLELvC81z2 NissFSq03l4wrdBBdtHUaiIoIXdUJgokXJGiDQ7+CknhysgInzWUJu47Bv+bJvxV SXhIbC6BoJ0ty6M914inLle6WQ5dvGG0tN97sQOPAU0U3hn6MVvQvI/sfh/4Erb2 W6qPDFS+jUG7vwaV1eshCgIst+dxhSn6qHpEYosgpI7FCPBnUilkrnBqWfK5eTGh BW8a4S2hgJ2z9a8UGlHfUdnrJUkL/ikSR1UU8DyLPV1IBV+hcGyEQsEFmmMA5VtJ ShurROWxenu/byy8zT52lfWN4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs1iky4 ia6EwVlFwTe56yo4dxJNMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZIoJiFak+6SLS8ALvr6WGE/fvgaTDi+uiwl4inkc4zcP2Q5xvK4h ZIw0hBw2ByLmqcorAtbkWu6FV8QY1nNdEDLjoXtLX7IxqTFEsNpIrxpTEn4SJozw p5DJoXKqr7ge5ZlUAAO1GRFnnzY8vMd6zzDd6wL7OFkkAuynD6u0gmmou1Jwn55c 16I6VUsxFVtK2+la5WRSkJ/ASpWnhKAy8daF/rFyzj/z7+fc6TkQRc0SFEdnOv6X gL/5f+9/Yivwu6dK6N4WSch7ohZt5/iBRJRAc3dxlFzy70Ixz38iFqeCnC8BYs5e d0muB540xB9Yn1O+dHeQf8CG89JibNCT -----END CERTIFICATE-----Generated at Wed May 14 08:12:18 2025 by rpki-client