$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: 2xKOW27trSJgTMd0FI7pC4uZ2qhzZ8Y26Nv3W9M34v8= Subject key identifier: 71:87:6C:F1:5D:C8:6D:5F:93:ED:5D:9E:E5:61:2A:51:B4:23:97:F7 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 043B Signing time: Thu 15 May 2025 00:22:47 +0000 Manifest this update: Thu 15 May 2025 00:22:47 +0000 Manifest next update: Thu 22 May 2025 00:22:47 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: KtPDwdlyql8/HWG7wZQr/UfcSu+Z59RrYfylP/R5Mu8=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: May 15 00:22:47 2025 GMT Not After : May 22 00:22:47 2025 GMT Subject: CN=682533d7-6508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:50:77:69:6a:89:ed:00:f5:85:b4:3b:fb:8e: 19:dc:94:4b:c2:9d:e1:09:62:81:93:4b:2a:08:bf: f9:d4:63:ce:b4:1c:4a:0a:3a:58:91:07:0e:87:70: f2:2f:f9:04:a8:c3:d8:b6:01:9e:3e:09:54:98:81: e7:e9:42:64:42:64:c6:7d:b6:0d:35:92:f3:57:d9: b4:65:b8:11:85:c0:f2:dd:99:1d:99:63:93:7a:07: 4d:bd:21:5b:e7:c6:90:d0:45:dd:fb:2f:35:b9:e2: 1f:85:e9:89:fa:81:b3:df:99:7a:74:42:c1:73:36: 39:39:e2:f0:90:f4:d9:ad:f9:8c:6d:7b:ac:22:95: 74:99:73:4a:c5:b5:35:4f:61:26:6f:68:fa:2d:dc: ae:3e:57:28:5f:da:e4:57:d3:0f:54:27:3a:51:c6: 20:60:e0:dd:38:d9:12:07:56:dc:2c:93:36:82:50: 07:e0:ce:ba:3d:36:96:a5:58:fb:25:d5:65:64:a7: 13:73:e0:2c:08:83:f3:25:59:e4:d6:78:33:4e:68: ef:e6:a1:f7:e2:15:5e:af:9c:fb:e4:7b:53:1d:a9: 28:11:fd:2b:73:15:5d:75:f3:45:b3:29:f8:bd:6a: 01:dc:59:22:b2:54:6d:af:23:89:73:e8:93:2c:3c: 43:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:6C:F1:5D:C8:6D:5F:93:ED:5D:9E:E5:61:2A:51:B4:23:97:F7 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:67:81:b7:ab:34:5e:ff:98:dc:e8:1f:c8:fb:cf:41:45:8f: 1f:2c:28:c7:5d:0d:e1:d5:3f:22:57:0a:e5:89:2f:65:0e:03: de:79:22:92:87:d7:d0:00:cc:ec:a3:9e:58:60:e3:eb:21:6f: 28:6c:b6:c0:98:77:87:7d:d9:b5:17:1e:be:b9:69:a9:e7:13: e0:c4:87:8d:3b:62:de:d2:95:6a:c5:f3:e2:2e:80:df:88:eb: 05:42:d0:56:68:df:6a:8c:df:db:ab:7d:e6:95:62:be:d1:ca: 12:e6:35:dc:2e:22:f1:04:98:39:36:4a:40:aa:a2:03:24:e5: 42:21:98:c0:7a:5e:5a:c9:8c:7d:ae:4f:fd:70:14:78:4e:49: c9:a9:70:ad:49:3f:08:13:27:e0:60:6a:db:ff:a9:01:0d:f4: a5:59:a0:4c:22:ae:bf:c1:c3:b0:0a:ed:45:dc:01:42:c9:f1: e9:fc:03:65:97:8b:1e:dd:55:57:99:68:48:e3:5d:71:8a:ef: 18:77:c1:d5:44:cf:c1:d1:d9:0c:5a:92:e4:cd:37:9d:76:05: 22:7b:ad:11:99:5f:df:4a:55:c3:74:30:6b:61:22:70:a9:33: 3c:b7:28:91:2d:eb:f0:f6:54:a9:fc:9d:e6:b6:88:3e:28:9e: 14:8e:23:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwNTE1MDAyMjQ3WhcNMjUwNTIyMDAyMjQ3WjAYMRYwFAYD VQQDEw02ODI1MzNkNy02NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61B3aWqJ7QD1hbQ7+44Z3JRLwp3hCWKBk0sqCL/51GPOtBxKCjpYkQcOh3Dy L/kEqMPYtgGePglUmIHn6UJkQmTGfbYNNZLzV9m0ZbgRhcDy3ZkdmWOTegdNvSFb 58aQ0EXd+y81ueIfhemJ+oGz35l6dELBczY5OeLwkPTZrfmMbXusIpV0mXNKxbU1 T2Emb2j6LdyuPlcoX9rkV9MPVCc6UcYgYODdONkSB1bcLJM2glAH4M66PTaWpVj7 JdVlZKcTc+AsCIPzJVnk1ngzTmjv5qH34hVer5z75HtTHakoEf0rcxVddfNFsyn4 vWoB3FkislRtryOJc+iTLDxDlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGHbPFd yG1fk+1dnuVhKlG0I5f3MB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAZ4G3qzRe/5jc6B/I+89BRY8fLCjHXQ3h1T8iVwrliS9lDgPeeSKS h9fQAMzso55YYOPrIW8obLbAmHeHfdm1Fx6+uWmp5xPgxIeNO2Le0pVqxfPiLoDf iOsFQtBWaN9qjN/bq33mlWK+0coS5jXcLiLxBJg5NkpAqqIDJOVCIZjAel5ayYx9 rk/9cBR4TknJqXCtST8IEyfgYGrb/6kBDfSlWaBMIq6/wcOwCu1F3AFCyfHp/ANl l4se3VVXmWhI411xiu8Yd8HVRM/B0dkMWpLkzTeddgUie60RmV/fSlXDdDBrYSJw qTM8tyiRLevw9lSp/J3mtog+KJ4UjiP9 -----END CERTIFICATE-----Generated at Fri May 16 03:10:35 2025 by rpki-client