$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: 3MrQa9UQJ6IlDHQXoDHT8RSprgUhdF/sHoPoiRdBa98= Subject key identifier: 84:4D:9A:60:FB:79:8B:10:45:B7:0D:2A:6A:81:F2:63:4A:B1:BA:D6 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 7A Signing time: Fri 09 May 2025 05:48:55 +0000 Manifest this update: Fri 09 May 2025 05:48:54 +0000 Manifest next update: Fri 16 May 2025 05:48:54 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: inSrWe2Y93jkTQDm6UEPeUfiTAvClyUoyUkUi9YR78k=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: May 9 05:48:54 2025 GMT Not After : May 16 05:48:54 2025 GMT Subject: CN=681d9746-6756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:57:c9:18:6d:fa:a2:95:90:e6:fb:b3:a8: 8c:f7:7a:c2:ca:b1:b2:96:51:89:db:95:47:0b:a3: ed:db:bb:a9:93:bc:54:23:c8:44:60:21:46:50:13: ec:79:2e:bf:bf:b3:ed:24:d9:15:cf:f5:be:d4:b6: dc:0d:72:6c:72:1b:bf:f8:e5:43:f7:50:f3:74:ea: c2:b1:6e:e3:99:4d:8a:ec:b8:15:01:ee:00:59:83: b0:f3:95:45:77:11:b2:f9:56:c9:d6:7f:47:7c:af: ff:98:81:ee:24:a7:92:8e:83:2a:b6:a0:4e:e4:4f: b6:89:41:97:6f:c2:64:2b:f4:30:3f:10:f2:52:0b: 71:4e:56:ad:4a:dd:b8:2e:35:70:18:bb:b5:b9:30: 95:ef:09:dd:95:e6:74:ee:47:c7:65:14:fe:b9:82: a6:05:2a:b7:46:96:c0:78:7b:07:2e:40:de:ec:5e: 59:58:88:b4:9b:d6:70:3d:da:d1:b3:83:9d:ac:84: 26:11:bd:91:e1:60:66:fb:9e:44:2a:65:18:47:b3: 88:c7:8b:a7:db:05:ee:55:c9:3b:b9:24:2a:fc:a5: 8b:3e:36:11:9c:c7:f4:3b:2d:fa:99:f1:75:32:fb: 72:c9:fa:a9:7f:f7:b0:9f:4c:17:bf:77:b2:7b:ef: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:9A:60:FB:79:8B:10:45:B7:0D:2A:6A:81:F2:63:4A:B1:BA:D6 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:74:4b:b1:11:ed:0e:fc:05:e3:8d:89:33:63:32:c4:dc:eb: 12:52:80:7b:96:ee:cd:38:52:c9:90:df:57:16:24:39:e2:5f: c2:57:bc:ee:06:4a:74:53:52:98:2b:41:9c:e1:e8:11:d7:cc: 74:fe:99:52:8e:04:15:81:21:f8:00:30:00:ea:7e:85:db:18: 90:b2:6b:14:4f:d9:5c:c6:4c:0b:06:81:ac:7d:ad:f5:cf:a3: 3c:68:c0:61:fb:57:c6:c2:8b:24:61:16:36:4e:d2:80:eb:b1: a0:b0:90:5d:2b:21:2f:b5:2b:cb:48:96:16:2d:8c:ec:c6:6a: 36:96:2b:cf:46:2b:a9:e5:13:3a:df:04:1f:25:c3:d7:2c:c2: b8:79:95:13:42:7e:44:13:c4:8b:1d:1d:da:de:c0:fc:3c:de: 01:19:f9:ab:af:b6:d6:7b:1c:25:08:a6:2a:c6:05:c3:ed:a2: cc:3d:9e:54:8b:43:0c:3a:67:d3:fd:0e:f3:31:8d:79:dd:fe: 5d:69:d0:18:7e:ee:af:70:6a:53:43:7e:04:e2:8d:6b:ac:a5: 1d:6e:5d:83:eb:f9:54:cf:36:8a:cb:a4:77:d8:09:74:8d:d4: 81:68:9e:2e:0a:0a:6c:23:11:39:53:d3:e5:46:9f:3e:dc:74: 13:23:6e:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMTRERDg2ODQyOTRGMUIzM0EzMTNBRkI4RjBFQkExQzhB MDAzNzgwOTAeFw0yNTA1MDkwNTQ4NTRaFw0yNTA1MTYwNTQ4NTRaMBgxFjAUBgNV BAMTDTY4MWQ5NzQ2LTY3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMQVfJGG36opWQ5vuzqIz3esLKsbKWUYnblUcLo+3bu6mTvFQjyERgIUZQE+x5 Lr+/s+0k2RXP9b7UttwNcmxyG7/45UP3UPN06sKxbuOZTYrsuBUB7gBZg7DzlUV3 EbL5VsnWf0d8r/+Yge4kp5KOgyq2oE7kT7aJQZdvwmQr9DA/EPJSC3FOVq1K3bgu NXAYu7W5MJXvCd2V5nTuR8dlFP65gqYFKrdGlsB4ewcuQN7sXllYiLSb1nA92tGz g52shCYRvZHhYGb7nkQqZRhHs4jHi6fbBe5VyTu5JCr8pYs+NhGcx/Q7LfqZ8XUy +3LJ+ql/97CfTBe/d7J77+4NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhE2aYPt5 ixBFtw0qaoHyY0qxutYwHwYDVR0jBBgwFoAUFN2GhClPGzOjE6+48OuhyKADeAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0QxN0M4ODY4N0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRk4yR2hDbFBHek9qRTYtNDhPdWh5S0FEZUFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QTA1L0QxN0M4ODY4N0M4QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pP akU2LTQ4T3VoeUtBRGVBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABd0S7ER7Q78BeONiTNjMsTc6xJSgHuW7s04UsmQ31cWJDniX8JXvO4G SnRTUpgrQZzh6BHXzHT+mVKOBBWBIfgAMADqfoXbGJCyaxRP2VzGTAsGgax9rfXP ozxowGH7V8bCiyRhFjZO0oDrsaCwkF0rIS+1K8tIlhYtjOzGajaWK89GK6nlEzrf BB8lw9cswrh5lRNCfkQTxIsdHdrewPw83gEZ+auvttZ7HCUIpirGBcPtosw9nlSL Qww6Z9P9DvMxjXnd/l1p0Bh+7q9walNDfgTijWuspR1uXYPr+VTPNorLpHfYCXSN 1IFoni4KCmwjETlT0+VGnz7cdBMjboo= -----END CERTIFICATE-----Generated at Sat May 10 09:53:10 2025 by rpki-client