$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft File: FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json) Hash identifier: JZ2NQbJQL1QqhQqF2FvHCuYd/wd7q9PlP6KyQCTwTcw= Subject key identifier: 95:57:AE:6B:C0:3E:BC:B9:2B:5E:13:BE:D3:E8:00:01:CF:EF:1D:D3 Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 Certificate issuer: /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft Manifest number: 02C8 Signing time: Sun 11 May 2025 00:58:30 +0000 Manifest this update: Sun 11 May 2025 00:58:30 +0000 Manifest next update: Sun 18 May 2025 00:58:29 +0000 Files and hashes: 1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: uZTShMYiC0u0Ut3K37nsihm6EfE+RvZxVsol+Zt6L+k=) 2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: VrxDW/DTl4sELPDbg6jTEndamNxMaPLt6ONplJztblc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915280B, serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Validity Not Before: May 11 00:58:30 2025 GMT Not After : May 18 00:58:29 2025 GMT Subject: CN=681ff636-2e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:c0:71:7e:1e:8d:c7:da:df:86:cc:8f:93: 70:a6:5c:e4:ef:ce:43:27:f8:7f:70:c3:39:cf:c9: 91:27:ff:f3:04:02:ae:2e:f9:cf:be:16:3f:fb:71: 30:0e:77:71:9f:cb:e8:55:ff:3c:0d:fc:e3:ed:38: ba:5b:5b:89:87:be:06:88:2f:43:59:6e:97:bb:cb: 5f:78:87:a0:2f:bf:6a:a2:78:d4:33:f5:88:76:64: 5e:1f:f5:33:4a:d7:c8:ca:70:6a:3f:61:94:d0:78: a4:56:8c:74:70:a5:1c:38:9b:55:be:cc:ca:c9:7a: d4:47:d0:e5:02:76:1b:b5:05:97:05:77:36:d6:44: 94:69:ea:bb:56:bc:e0:00:4d:77:60:86:1e:8f:f0: 45:26:74:94:30:10:29:bd:2c:59:75:a7:2b:12:a7: 5f:44:72:4e:64:d1:9b:b2:f4:ce:b8:d8:2c:70:16: ae:13:83:12:b8:5b:d6:9a:f2:9f:6d:c0:0a:35:f9: 20:20:c2:47:56:e6:9a:e9:08:d7:08:76:48:fc:61: 7a:66:68:8b:4f:0c:49:7d:6f:98:7e:41:d2:9f:20: 07:92:f2:c5:7b:6a:57:6d:77:f8:a4:c9:af:bf:3c: eb:fd:fe:d6:98:48:a1:19:44:9f:ea:d4:44:a9:b8: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:57:AE:6B:C0:3E:BC:B9:2B:5E:13:BE:D3:E8:00:01:CF:EF:1D:D3 X509v3 Authority Key Identifier: keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:c5:d4:35:00:31:38:a8:a5:e3:c5:92:e4:82:15:2c:8d:0f: d6:64:e9:7f:f8:00:ee:85:60:83:8c:b0:ec:8d:47:36:12:13: 5b:5d:34:4b:41:52:8e:00:bb:6e:93:3c:20:55:e8:07:83:be: b8:00:c0:6c:cc:85:50:6b:0d:29:de:54:5b:11:70:8a:96:2f: dc:12:f4:4b:ca:b5:39:e5:0b:c9:75:14:b5:1a:f5:f6:c0:92: 66:a6:1a:30:cc:6b:88:af:63:c2:3f:10:76:87:2f:ad:ff:8c: 7c:32:09:93:de:ca:64:3a:a1:03:44:fa:8f:33:e9:1a:15:9c: 4d:eb:d7:a4:c7:bc:69:4b:c9:91:62:01:fc:a8:ff:11:b5:e3: 4e:6e:d8:7a:d5:a0:72:d4:10:dc:bc:a8:b7:a1:f1:db:a1:c2: 94:30:59:a4:77:37:78:57:51:67:9f:c5:46:c4:09:18:fc:80: 77:e6:39:95:f1:bd:3f:f4:10:d9:bd:26:a4:8e:13:bc:0e:95: 15:6b:e5:d6:69:7b:06:81:72:5a:b6:ff:b4:73:98:1b:e4:b4: 0f:0c:f6:1c:f1:cc:46:5b:6b:51:29:52:75:3f:fc:6c:c7:ee: 21:9c:1d:75:ff:29:cd:06:31:84:2b:d1:ca:82:1d:1e:f9:13: 51:1b:6c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI4MEIxMTAvBgNVBAUTKDE0NjVEQzJDQjcwMjUzRURGNTE0Q0Q0Mzc3MjY2MkZG M0JCOEY2RTAwHhcNMjUwNTExMDA1ODMwWhcNMjUwNTE4MDA1ODI5WjAYMRYwFAYD VQQDEw02ODFmZjYzNi0yZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xrAcX4ejcfa34bMj5Nwplzk785DJ/h/cMM5z8mRJ//zBAKuLvnPvhY/+3Ew Dndxn8voVf88Dfzj7Ti6W1uJh74GiC9DWW6Xu8tfeIegL79qonjUM/WIdmReH/Uz StfIynBqP2GU0HikVox0cKUcOJtVvszKyXrUR9DlAnYbtQWXBXc21kSUaeq7Vrzg AE13YIYej/BFJnSUMBApvSxZdacrEqdfRHJOZNGbsvTOuNgscBauE4MSuFvWmvKf bcAKNfkgIMJHVuaa6QjXCHZI/GF6ZmiLTwxJfW+YfkHSnyAHkvLFe2pXbXf4pMmv vzzr/f7WmEihGUSf6tREqbj0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVXrmvA Pry5K14TvtPoAAHP7x3TMB8GA1UdIwQYMBaAFBRl3Cy3AlPt9RTNQ3cmYv87uPbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjgwQi85N0JDMURCOEVE RUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1UtMzFGTTFEZHlaaV96dTQ5 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWGNMTGNDVS0zMUZNMURkeVppX3p1NDl1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjgwQi85N0JDMURCOEVERUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1Ut MzFGTTFEZHlaaV96dTQ5dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzxdQ1ADE4qKXjxZLkghUsjQ/WZOl/+ADuhWCDjLDsjUc2EhNbXTRL QVKOALtukzwgVegHg764AMBszIVQaw0p3lRbEXCKli/cEvRLyrU55QvJdRS1GvX2 wJJmphowzGuIr2PCPxB2hy+t/4x8MgmT3spkOqEDRPqPM+kaFZxN69ekx7xpS8mR YgH8qP8RteNObth61aBy1BDcvKi3ofHbocKUMFmkdzd4V1Fnn8VGxAkY/IB35jmV 8b0/9BDZvSakjhO8DpUVa+XWaXsGgXJatv+0c5gb5LQPDPYc8cxGW2tRKVJ1P/xs x+4hnB11/ynNBjGEK9HKgh0e+RNRG2yj -----END CERTIFICATE-----Generated at Sun May 11 13:32:56 2025 by rpki-client