$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: kNy7fdDZctzyXp81o2yYgz9srvvy8WxrTV8E/ACrpGk= Subject key identifier: E0:30:15:99:A2:27:A7:80:B9:37:39:C1:D7:68:F7:96:A1:5A:E7:2D Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0519 Signing time: Fri 16 May 2025 23:57:35 +0000 Manifest this update: Fri 16 May 2025 23:57:34 +0000 Manifest next update: Fri 23 May 2025 23:57:34 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: MrY2YCdHQ7sX7pymy6KlbbiDp4bG7uxXXE8e2j2MT2Q=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: May 16 23:57:34 2025 GMT Not After : May 23 23:57:34 2025 GMT Subject: CN=6827d0ef-0ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:7c:12:42:1a:17:d9:77:af:0c:fc:97:4b: 5d:98:72:bd:35:19:4e:0d:65:3b:dc:55:dd:47:93: 4b:f7:d3:b0:2e:ee:e0:c6:a2:4a:ac:db:e1:9f:1c: 88:d3:95:82:4a:fc:a8:5c:16:6b:ab:83:1b:f7:2d: 43:a1:43:89:57:00:d0:a5:13:e2:2d:2f:1c:c8:80: fa:f0:10:99:a1:ed:65:0e:4b:cc:70:43:4d:65:9b: 7a:74:72:7f:3b:af:34:94:e0:23:8b:44:ef:1b:10: 36:f1:19:80:0a:28:07:e3:65:4d:8a:32:b4:f8:19: 95:29:e4:82:0b:7f:0b:88:cd:45:de:07:31:3f:34: 05:af:98:56:9a:ae:12:ef:2d:1a:81:c3:9f:04:4d: cd:60:f2:7a:0a:f5:f6:74:6e:a0:98:6d:81:97:84: 65:a4:24:32:04:82:fd:7a:9d:9a:0d:22:d6:19:a4: 01:e5:6c:43:4b:54:2a:37:4f:d2:33:ba:ed:38:30: f8:4c:df:4d:c6:eb:04:c9:22:f6:dc:b6:13:47:79: df:47:b7:31:96:4d:70:5a:7e:ff:6b:78:ea:e0:e8: 81:63:b6:2c:a4:e8:8d:4b:1d:44:d0:ba:24:64:63: 99:47:a8:1e:31:de:21:92:f8:e9:47:9f:a7:04:84: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:30:15:99:A2:27:A7:80:B9:37:39:C1:D7:68:F7:96:A1:5A:E7:2D X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:df:25:42:ac:b9:3b:f4:4a:dd:59:db:a6:ea:eb:e2:1b:75: 41:91:24:6a:f6:c6:8a:5c:13:f4:e8:8d:bd:e0:10:00:f4:4c: 20:e3:cb:23:ce:82:2f:14:2d:57:17:59:5d:fd:81:43:c0:2b: 76:09:95:73:63:58:94:0b:4e:59:d9:67:37:5f:c2:7a:72:45: c3:07:31:5f:70:35:4c:6b:a2:c2:63:ba:a5:a6:b7:94:ac:36: c0:16:e0:4f:2e:32:32:8c:d8:34:c7:47:57:b4:0e:39:b8:fe: a3:93:d3:dd:f3:29:43:2f:9e:18:ef:ba:74:26:8e:22:9b:fe: c1:91:20:fd:b4:64:52:56:08:40:97:a6:e0:d6:b2:2c:9f:6d: 33:a7:4f:34:2e:3e:0c:42:1e:7f:cf:26:6b:b1:f6:eb:a2:e1: 49:c9:fb:52:53:6f:34:bd:74:5f:6b:ad:45:67:52:ad:5c:3f: 87:8f:0d:b5:7b:9f:2c:29:3a:41:2c:98:37:1a:47:ab:db:bf: 82:ee:42:2d:91:b2:c2:ff:c4:4c:c7:93:6f:1d:44:ab:dd:ca: f1:c0:6d:d2:3f:86:58:84:33:a2:27:09:b0:fa:36:a1:20:3b: 52:f1:49:70:2e:89:82:9a:86:1e:28:15:2a:83:df:75:ee:55: 23:2f:dd:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNTE2MjM1NzM0WhcNMjUwNTIzMjM1NzM0WjAYMRYwFAYD VQQDEw02ODI3ZDBlZi0wYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTR8EkIaF9l3rwz8l0tdmHK9NRlODWU73FXdR5NL99OwLu7gxqJKrNvhnxyI 05WCSvyoXBZrq4Mb9y1DoUOJVwDQpRPiLS8cyID68BCZoe1lDkvMcENNZZt6dHJ/ O680lOAji0TvGxA28RmACigH42VNijK0+BmVKeSCC38LiM1F3gcxPzQFr5hWmq4S 7y0agcOfBE3NYPJ6CvX2dG6gmG2Bl4RlpCQyBIL9ep2aDSLWGaQB5WxDS1QqN0/S M7rtODD4TN9NxusEySL23LYTR3nfR7cxlk1wWn7/a3jq4OiBY7YspOiNSx1E0Lok ZGOZR6geMd4hkvjpR5+nBIRxYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAwFZmi J6eAuTc5wddo95ahWuctMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA13yVCrLk79ErdWdum6uviG3VBkSRq9saKXBP06I294BAA9Ewg48sj zoIvFC1XF1ld/YFDwCt2CZVzY1iUC05Z2Wc3X8J6ckXDBzFfcDVMa6LCY7qlpreU rDbAFuBPLjIyjNg0x0dXtA45uP6jk9Pd8ylDL54Y77p0Jo4im/7BkSD9tGRSVghA l6bg1rIsn20zp080Lj4MQh5/zyZrsfbrouFJyftSU280vXRfa61FZ1KtXD+Hjw21 e58sKTpBLJg3Gker27+C7kItkbLC/8RMx5NvHUSr3crxwG3SP4ZYhDOiJwmw+jah IDtS8UlwLomCmoYeKBUqg9917lUjL92j -----END CERTIFICATE-----Generated at Sat May 17 14:14:07 2025 by rpki-client