$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: Y+3WzD+whpW29V7gYJHY/OAmpo0GIYW9SCm74BTuiNs= Subject key identifier: 42:F2:B2:93:97:39:7B:2F:93:72:EA:4E:27:BF:89:17:97:B8:1B:EC Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B59 Signing time: Sat 10 May 2025 19:17:31 +0000 Manifest this update: Sat 10 May 2025 19:17:29 +0000 Manifest next update: Sat 17 May 2025 19:17:29 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: mwI2UdVlRkczmU9+L/OUyom0LmE/DoIa/FfswurMNnk=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: 0870kwth+ehjE1/zDBzvVMJBFxK3G1/4oTcvNvPtUE0=) 4: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 6: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 8: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 9: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: May 10 19:17:29 2025 GMT Not After : May 17 19:17:29 2025 GMT Subject: CN=681fa64a-9775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:c5:53:8b:7b:16:e0:91:7f:7f:8d:98:d9: fa:77:af:b6:12:f0:90:b1:e1:bd:9a:7b:ae:66:f1: d7:d8:e6:79:77:0b:3a:89:04:e3:ad:d2:6c:bb:7c: 59:bc:44:70:14:5b:c9:b4:c2:77:cf:ad:bb:ef:a0: cc:0a:52:9b:44:47:0c:02:53:fa:48:fb:84:cf:6e: c4:69:cd:da:ca:2f:94:f7:0a:43:4e:9f:48:01:2c: 15:ff:50:94:c7:09:87:2e:ff:61:c3:a5:9a:8b:3d: 81:af:0e:7c:06:a0:49:34:9f:0b:16:7c:be:f5:2e: f9:ce:26:a4:6c:3e:97:3b:6a:eb:83:ef:51:28:aa: 61:2c:96:88:28:ac:57:73:0b:cf:4f:8a:29:5a:72: 46:02:88:14:f3:2c:6f:85:4a:15:aa:c1:e6:d5:0b: 1e:dc:b8:69:c0:6c:0f:05:ff:6c:04:ee:3f:07:6d: 91:01:9a:ed:dc:5d:81:44:2a:c0:9c:17:08:9f:7a: e5:a7:46:63:51:58:62:d6:85:2a:e4:f2:6c:13:48: b3:63:48:96:d5:f9:97:6a:7a:76:65:20:25:d8:6c: ff:f9:03:17:41:f3:af:19:3e:75:cc:7e:2c:ed:11: e5:6f:7e:f0:8e:4b:af:06:1e:37:7f:18:3d:1c:be: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F2:B2:93:97:39:7B:2F:93:72:EA:4E:27:BF:89:17:97:B8:1B:EC X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:41:1b:2d:54:de:1d:01:b3:60:56:2b:8a:db:36:69:d1:56: 32:95:ee:0d:b1:8f:41:59:46:15:44:68:d5:aa:72:84:f6:fb: b7:77:8e:43:6a:e5:3e:a4:10:b7:3e:dc:f8:0f:82:bf:96:34: 56:ca:c9:db:7f:6e:cb:fa:1f:22:13:3a:97:50:ca:80:c9:01: 3b:09:54:f4:83:b1:ec:8a:4a:08:e9:65:ae:a4:a1:09:06:d8: 06:d5:be:d0:5f:e8:95:26:22:45:6f:78:b0:05:f4:9e:91:71: 5b:c8:1f:f6:01:cb:b6:67:e2:b2:95:cd:4d:16:4c:54:7a:4e: 22:13:09:ce:c1:e5:30:2e:c7:92:b2:ad:91:37:6f:ff:0d:ea: 17:9f:9a:d7:29:6b:67:56:3b:e8:bf:c8:1f:e0:0b:0d:1d:44: c0:85:95:e7:8a:3f:bf:2a:28:eb:5c:c5:9c:5e:1c:e6:cd:63: a5:c0:9d:57:10:a1:7d:64:6c:23:76:9f:0b:22:10:f8:cc:ac: 10:0f:42:62:d8:d0:c2:df:15:e6:a1:b1:93:e5:ae:f2:0a:95: cd:07:e8:aa:a8:7a:a9:ce:41:e5:af:06:05:f0:24:f9:e5:7d: 25:ea:43:ed:f0:15:6d:c5:31:df:71:fb:84:1f:3c:5c:da:d4: 35:eb:b4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNTEwMTkxNzI5WhcNMjUwNTE3MTkxNzI5WjAYMRYwFAYD VQQDEw02ODFmYTY0YS05Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eDFU4t7FuCRf3+NmNn6d6+2EvCQseG9mnuuZvHX2OZ5dws6iQTjrdJsu3xZ vERwFFvJtMJ3z62776DMClKbREcMAlP6SPuEz27Eac3ayi+U9wpDTp9IASwV/1CU xwmHLv9hw6Waiz2Brw58BqBJNJ8LFny+9S75ziakbD6XO2rrg+9RKKphLJaIKKxX cwvPT4opWnJGAogU8yxvhUoVqsHm1Qse3LhpwGwPBf9sBO4/B22RAZrt3F2BRCrA nBcIn3rlp0ZjUVhi1oUq5PJsE0izY0iW1fmXanp2ZSAl2Gz/+QMXQfOvGT51zH4s 7RHlb37wjkuvBh43fxg9HL6FaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELyspOX OXsvk3LqTie/iReXuBvsMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCQRstVN4dAbNgViuK2zZp0VYyle4NsY9BWUYVRGjVqnKE9vu3d45D auU+pBC3Ptz4D4K/ljRWysnbf27L+h8iEzqXUMqAyQE7CVT0g7HsikoI6WWupKEJ BtgG1b7QX+iVJiJFb3iwBfSekXFbyB/2Acu2Z+Kylc1NFkxUek4iEwnOweUwLseS sq2RN2//DeoXn5rXKWtnVjvov8gf4AsNHUTAhZXnij+/KijrXMWcXhzmzWOlwJ1X EKF9ZGwjdp8LIhD4zKwQD0Ji2NDC3xXmobGT5a7yCpXNB+iqqHqpzkHlrwYF8CT5 5X0l6kPt8BVtxTHfcfuEHzxc2tQ167QN -----END CERTIFICATE-----Generated at Sun May 11 13:40:38 2025 by rpki-client