$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: 0eQa9YnIMClcN7B/XISzQBj2QJzCaWADyvnVTCOzkA0= Subject key identifier: F6:A4:A1:D5:E3:38:1E:B8:BD:04:4E:C5:5A:E7:AE:B5:BD:71:E6:ED Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 04D9 Signing time: Mon 12 May 2025 23:34:24 +0000 Manifest this update: Mon 12 May 2025 23:34:24 +0000 Manifest next update: Mon 19 May 2025 23:34:24 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: v6YIndtin8o9xQxcbchoYinTnO8tlpt0lhz5HfQTIpQ=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: xx0/0c099Z+DcfDq5KxpcRvexWoXtqPp/xhoiOnuqgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: May 12 23:34:24 2025 GMT Not After : May 19 23:34:24 2025 GMT Subject: CN=68228580-8fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:b3:b3:e9:bd:96:a1:6e:b3:1b:c6:cf:3a: 50:1e:a9:d1:65:8a:ce:d5:45:27:8a:8c:a6:32:e6: 6d:8f:fc:53:30:64:be:9a:e0:5b:36:73:70:cb:95: 71:9d:3e:f3:e3:43:f7:99:f9:59:a3:3b:1e:79:99: f1:d8:3e:b4:5c:38:b5:c5:d2:48:56:90:73:0d:8d: df:e0:4e:cb:9a:ef:d0:7b:5e:f7:14:81:56:65:21: 47:f0:0b:5e:ca:7a:86:9d:37:58:8f:b9:66:66:b3: 44:2b:e2:fd:9f:e8:86:b3:70:e9:1a:d0:68:cf:8f: db:8f:06:1a:bb:8e:bb:f5:20:a5:6a:b7:79:54:ae: 2c:4b:99:3b:f4:94:33:63:da:f4:e2:a7:88:34:2b: 4f:33:7a:a8:7e:02:d2:f9:8a:7d:ea:d7:7c:5c:62: c9:91:dc:0c:54:44:b4:62:f1:5b:c4:12:7e:01:d5: df:d1:4c:b5:ed:88:ea:50:43:15:06:9d:ec:69:92: 03:31:52:8f:c2:43:e2:3f:df:68:18:91:48:6e:45: be:c7:a9:4a:d6:f4:77:db:42:29:1e:67:d9:98:b9: 0b:93:bb:31:e0:b8:1d:bd:df:36:4a:f8:5a:ec:08: 54:1c:7c:ad:ed:9d:7e:9d:83:98:6a:2c:c5:95:e3: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A4:A1:D5:E3:38:1E:B8:BD:04:4E:C5:5A:E7:AE:B5:BD:71:E6:ED X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9e:8e:b1:3c:28:c3:45:3e:66:52:24:29:93:ee:f5:22:f1: 2c:f6:6d:d9:5d:d8:34:ac:fb:4e:9d:48:56:68:ad:2a:59:2d: 4f:b2:82:14:a3:91:0e:b9:74:06:b9:f8:06:0d:f5:fe:f5:32: bd:2d:6d:1b:6b:9d:42:ad:bd:06:67:e8:47:e4:d8:e4:a3:99: 2f:89:52:23:eb:65:31:2b:27:c9:d2:45:d6:80:89:f0:cb:31: dd:2e:a1:6d:93:b3:a6:7d:30:71:07:53:6b:33:83:0d:fa:cb: e0:c0:9d:b4:bf:94:9b:68:48:34:d7:1e:69:fe:d2:f1:ec:77: df:6f:07:eb:ce:d9:13:c3:9d:9f:cf:75:7b:51:a0:46:5a:c0: 0a:ff:c6:85:f0:59:e6:22:f3:3c:fd:d2:5b:80:fa:1f:90:e6: a3:59:f2:b4:71:3a:80:4e:1b:e9:7c:7f:78:77:e6:cd:ad:39: f2:26:c0:e7:33:83:81:24:b1:cd:41:cf:59:00:95:4b:ec:e4: 22:b8:b1:64:56:57:53:02:cd:34:73:76:e8:ec:fd:3d:5c:9d: d2:bf:9f:96:60:76:ba:b8:05:02:8f:d1:86:f9:e1:65:07:8e: 37:cf:86:ba:3c:c0:c3:b3:6d:65:e0:01:c1:db:7b:df:25:51: f8:76:c6:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUwNTEyMjMzNDI0WhcNMjUwNTE5MjMzNDI0WjAYMRYwFAYD VQQDEw02ODIyODU4MC04ZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Wzs+m9lqFusxvGzzpQHqnRZYrO1UUnioymMuZtj/xTMGS+muBbNnNwy5Vx nT7z40P3mflZozseeZnx2D60XDi1xdJIVpBzDY3f4E7Lmu/Qe173FIFWZSFH8Ate ynqGnTdYj7lmZrNEK+L9n+iGs3DpGtBoz4/bjwYau4679SClard5VK4sS5k79JQz Y9r04qeINCtPM3qofgLS+Yp96td8XGLJkdwMVES0YvFbxBJ+AdXf0Uy17YjqUEMV Bp3saZIDMVKPwkPiP99oGJFIbkW+x6lK1vR320IpHmfZmLkLk7sx4Lgdvd82Svha 7AhUHHyt7Z1+nYOYaizFlePM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPakodXj OB64vQROxVrnrrW9cebtMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFno6xPCjDRT5mUiQpk+71IvEs9m3ZXdg0rPtOnUhWaK0qWS1PsoIU o5EOuXQGufgGDfX+9TK9LW0ba51Crb0GZ+hH5Njko5kviVIj62UxKyfJ0kXWgInw yzHdLqFtk7OmfTBxB1NrM4MN+svgwJ20v5SbaEg01x5p/tLx7HffbwfrztkTw52f z3V7UaBGWsAK/8aF8FnmIvM8/dJbgPofkOajWfK0cTqAThvpfH94d+bNrTnyJsDn M4OBJLHNQc9ZAJVL7OQiuLFkVldTAs00c3bo7P09XJ3Sv5+WYHa6uAUCj9GG+eFl B443z4a6PMDDs21l4AHB23vfJVH4dsa2 -----END CERTIFICATE-----Generated at Tue May 13 05:48:48 2025 by rpki-client