$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: Kt/u1rjBW6nLWtTxy2jjY03ec984jKrfmSm5ZNVpUh8= Subject key identifier: 5B:75:92:E2:04:06:37:68:62:70:D9:6B:47:57:B7:5C:14:6C:59:DB Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B37 Signing time: Fri 16 May 2025 19:24:02 +0000 Manifest this update: Fri 16 May 2025 19:24:02 +0000 Manifest next update: Fri 23 May 2025 19:24:02 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: 2mnv24GXPwX6qrrMD/s/HDbKy3QyGkYhSbEaF9MRbYk=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: May 16 19:24:02 2025 GMT Not After : May 23 19:24:02 2025 GMT Subject: CN=682790d2-e1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:94:83:18:ac:be:16:3e:6f:c0:25:51:93: f8:d4:08:b5:74:ee:ef:d3:c2:27:b1:09:ba:7e:ab: 15:2a:5c:02:1a:ec:36:8d:2f:21:2e:ac:53:18:4b: 54:b9:4d:a3:10:f0:c3:6f:83:cc:68:d8:0f:3d:9c: bf:e3:da:87:72:34:6c:fd:28:63:f2:d5:bc:1c:16: 29:1d:e0:dc:d8:7f:4c:af:c9:fe:f5:57:1f:dd:62: 97:21:da:60:bb:3a:ed:ee:11:5b:ed:93:f3:a3:10: e3:f6:75:fe:7f:db:3b:6b:7d:9a:07:99:f3:ef:71: 5c:0e:cb:39:3b:34:8d:4f:37:b8:d0:79:87:81:34: 1d:a9:66:6f:51:31:65:ce:60:7d:d4:8a:60:50:f3: a4:37:3f:98:90:87:bc:fe:b2:de:27:1d:b9:27:a6: 46:90:89:fd:7b:cf:14:af:d7:e8:54:8e:a3:69:ca: 7a:41:38:80:cc:0f:0e:3f:87:f8:64:ff:de:b2:5a: 9c:38:a9:67:6d:04:7b:9d:c6:37:6b:c8:81:04:f8: 4f:8e:0c:e6:de:e1:55:8a:3c:76:4a:e0:20:1f:47: ce:de:10:01:d8:89:f8:45:e1:80:70:4a:77:2c:c3: 6b:14:30:ed:23:b0:8f:bc:57:fc:23:cc:ce:3c:fa: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:75:92:E2:04:06:37:68:62:70:D9:6B:47:57:B7:5C:14:6C:59:DB X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:0d:e6:80:23:6f:6f:b0:cf:01:ec:dc:29:45:51:c6:65:b7: 49:34:af:63:63:e7:a1:25:26:5c:22:95:fc:3e:1d:d3:84:90: 6f:2a:4c:4d:70:17:81:0c:7b:1a:88:4e:fd:3d:00:a1:7c:1a: 2d:0f:17:cd:e4:0e:1c:3a:51:22:dd:ee:20:71:d4:9b:ec:ab: c2:35:25:11:7a:66:64:50:e1:09:e4:8e:e7:ed:cd:7a:7c:7b: bf:ad:4f:d9:16:f5:62:63:a7:69:82:6a:b3:ec:7f:13:1c:9a: 41:7b:94:68:a2:03:a7:ef:f3:fe:f4:8a:45:98:8f:ac:0a:c6: 6f:d1:d2:ca:ba:7a:36:d1:5b:20:c9:e7:40:54:52:34:0e:07: c7:a3:29:ce:f2:04:3d:cb:01:88:74:29:39:3c:d4:4a:c2:9f: 65:29:a6:1e:c5:2b:6d:e0:c7:43:de:56:4a:ab:0b:3a:cb:ab: 05:ce:58:83:c0:fe:04:de:cd:02:0b:21:e3:49:ee:ed:aa:e2: bc:57:3d:6e:33:b0:6b:7e:d5:99:ae:28:62:ec:39:a3:4d:16: 49:3c:9b:82:eb:75:5e:cd:23:de:ba:9e:72:c4:0f:dc:d5:a4: 88:bd:3d:2c:0b:a9:c5:87:2a:da:0a:e7:d9:4d:02:ef:b4:e6: f5:09:8b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUwNTE2MTkyNDAyWhcNMjUwNTIzMTkyNDAyWjAYMRYwFAYD VQQDEw02ODI3OTBkMi1lMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1OUgxisvhY+b8AlUZP41Ai1dO7v08InsQm6fqsVKlwCGuw2jS8hLqxTGEtU uU2jEPDDb4PMaNgPPZy/49qHcjRs/Shj8tW8HBYpHeDc2H9Mr8n+9Vcf3WKXIdpg uzrt7hFb7ZPzoxDj9nX+f9s7a32aB5nz73FcDss5OzSNTze40HmHgTQdqWZvUTFl zmB91IpgUPOkNz+YkIe8/rLeJx25J6ZGkIn9e88Ur9foVI6jacp6QTiAzA8OP4f4 ZP/eslqcOKlnbQR7ncY3a8iBBPhPjgzm3uFVijx2SuAgH0fO3hAB2In4ReGAcEp3 LMNrFDDtI7CPvFf8I8zOPPqGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt1kuIE BjdoYnDZa0dXt1wUbFnbMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0DeaAI29vsM8B7NwpRVHGZbdJNK9jY+ehJSZcIpX8Ph3ThJBvKkxN cBeBDHsaiE79PQChfBotDxfN5A4cOlEi3e4gcdSb7KvCNSURemZkUOEJ5I7n7c16 fHu/rU/ZFvViY6dpgmqz7H8THJpBe5RoogOn7/P+9IpFmI+sCsZv0dLKuno20Vsg yedAVFI0DgfHoynO8gQ9ywGIdCk5PNRKwp9lKaYexStt4MdD3lZKqws6y6sFzliD wP4E3s0CCyHjSe7tquK8Vz1uM7BrftWZrihi7DmjTRZJPJuC63VezSPeup5yxA/c 1aSIvT0sC6nFhyraCufZTQLvtOb1CYv6 -----END CERTIFICATE-----Generated at Sat May 17 13:19:26 2025 by rpki-client