$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: EzpzXd91r1NXepBZuEqVgO3ArBNZcuV0D1sVHSHpNj4= Subject key identifier: A7:A4:C3:79:7C:EE:14:1D:68:91:31:CC:17:FB:48:E3:32:37:42:32 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 012C Signing time: Tue 13 May 2025 03:49:08 +0000 Manifest this update: Tue 13 May 2025 03:49:07 +0000 Manifest next update: Tue 20 May 2025 03:49:07 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: 0UvTm+UvodROWNxxECIYO0bzqOAEvBh2rRhewVQWdsU=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: May 13 03:49:07 2025 GMT Not After : May 20 03:49:07 2025 GMT Subject: CN=6822c133-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:eb:97:14:b0:52:e8:dc:cc:73:fd:12:be: dc:a7:64:8c:3c:85:bd:53:3a:14:dd:12:83:ec:be: 13:a6:ac:66:49:b2:dc:f1:e3:d0:ad:6d:27:aa:e3: b8:a5:73:af:e1:6c:1a:0a:de:2f:54:28:57:4d:30: ce:c2:21:98:67:73:56:cf:55:be:9e:4c:82:9d:ce: 9c:1e:32:ee:9d:70:ea:d3:94:ed:7d:83:8a:b3:80: dd:b5:c9:4b:54:a2:75:e6:36:a2:65:fa:a9:75:82: e7:8b:80:74:de:de:c8:2a:cf:52:49:82:d6:ea:07: 49:48:19:44:3d:00:f8:4c:86:31:c2:ae:5a:44:35: 9e:2e:5f:ee:48:88:ea:dc:1b:ac:3a:9c:2c:45:b2: 43:6c:c1:61:50:33:6b:01:90:a4:4c:44:ba:8f:44: f4:5f:b9:f2:59:3d:92:2a:b5:fd:d5:07:2c:5f:55: 70:37:8f:d6:fd:19:05:69:8c:74:1e:1d:33:5d:24: fa:71:f7:e3:0d:b8:6e:4d:e7:db:eb:d6:ac:22:76: c7:dc:07:fe:01:56:be:70:f4:1e:81:26:fa:0f:74: b9:1f:cd:14:3c:c9:39:6b:b7:1b:42:0f:8f:47:a8: 22:8e:79:a7:1f:ef:06:07:75:31:96:67:bb:38:a3: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:C3:79:7C:EE:14:1D:68:91:31:CC:17:FB:48:E3:32:37:42:32 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:c9:46:f2:93:2a:87:dc:26:b1:c5:23:41:20:59:a9:e0: 44:5c:4a:4e:d2:c5:96:98:18:e0:0f:54:38:12:0f:c5:3b:83: 99:9b:98:9b:a6:6e:cb:58:8d:2c:2d:a2:24:aa:4c:64:7d:e2: a9:ce:27:09:e2:3b:0b:f8:6e:34:28:f3:1a:02:b5:85:b4:93: 3d:d3:8e:c0:4c:96:a0:6b:21:58:1a:b6:28:2c:12:ed:62:3b: f6:97:21:32:fe:57:d1:f5:e7:e7:d9:ad:38:80:08:bc:75:80: ec:15:ba:a2:f9:18:0c:ec:43:a2:2b:55:ba:b0:62:b8:d9:d8: e2:e7:c4:b0:1a:27:44:3a:37:c9:8d:4e:86:1e:40:d0:b8:fb: 6a:1d:cb:7c:46:4b:7a:06:e6:d6:0f:43:13:a7:85:13:b1:28: 81:ba:c9:05:f0:de:bf:2c:e7:1b:47:d9:7f:23:79:97:9e:60: fe:c4:f5:01:37:8f:4c:d3:24:da:05:9d:4b:bf:45:a3:0d:7f: b0:a5:73:fd:18:07:6e:01:3b:33:e3:5d:30:4e:a5:02:91:18: 59:db:ab:8c:ec:c0:74:c4:bc:60:e7:d4:0e:92:98:4c:9e:7a: 2d:83:10:98:53:df:66:cb:38:0d:a8:8f:c9:01:37:53:9e:31: e2:bd:ac:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwNTEzMDM0OTA3WhcNMjUwNTIwMDM0OTA3WjAYMRYwFAYD VQQDEw02ODIyYzEzMy01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf/rlxSwUujczHP9Er7cp2SMPIW9UzoU3RKD7L4TpqxmSbLc8ePQrW0nquO4 pXOv4WwaCt4vVChXTTDOwiGYZ3NWz1W+nkyCnc6cHjLunXDq05TtfYOKs4DdtclL VKJ15jaiZfqpdYLni4B03t7IKs9SSYLW6gdJSBlEPQD4TIYxwq5aRDWeLl/uSIjq 3BusOpwsRbJDbMFhUDNrAZCkTES6j0T0X7nyWT2SKrX91QcsX1VwN4/W/RkFaYx0 Hh0zXST6cffjDbhuTefb69asInbH3Af+AVa+cPQegSb6D3S5H80UPMk5a7cbQg+P R6gijnmnH+8GB3Uxlme7OKMX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKekw3l8 7hQdaJExzBf7SOMyN0IyMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfkslG8pMqh9wmscUjQSBZqeBEXEpO0sWWmBjgD1Q4Eg/FO4OZm5ib pm7LWI0sLaIkqkxkfeKpzicJ4jsL+G40KPMaArWFtJM9047ATJagayFYGrYoLBLt Yjv2lyEy/lfR9efn2a04gAi8dYDsFbqi+RgM7EOiK1W6sGK42dji58SwGidEOjfJ jU6GHkDQuPtqHct8Rkt6BubWD0MTp4UTsSiBuskF8N6/LOcbR9l/I3mXnmD+xPUB N49M0yTaBZ1Lv0WjDX+wpXP9GAduATsz410wTqUCkRhZ26uM7MB0xLxg59QOkphM nnotgxCYU99myzgNqI/JATdTnjHivawO -----END CERTIFICATE-----Generated at Tue May 13 10:12:15 2025 by rpki-client