$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json) Hash identifier: v7hdYZGqlpg2NgjfRSyoYb/ABCcPtSoAqkOAm//7occ= Subject key identifier: 8C:DD:5E:18:E2:63:60:06:15:91:75:47:A8:4C:29:13:27:E2:3D:C0 Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft Manifest number: 2B Signing time: Thu 15 May 2025 07:03:18 +0000 Manifest this update: Thu 15 May 2025 07:03:17 +0000 Manifest next update: Thu 22 May 2025 07:03:17 +0000 Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: WB5bHO8J1y7tkDebLmwzbUTuiuEX2Nphn7qBW28wxBU=) 2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: May 15 07:03:17 2025 GMT Not After : May 22 07:03:17 2025 GMT Subject: CN=682591b6-3b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:23:c5:8e:f7:2b:76:46:f6:61:d2:84:00: 2b:f4:06:86:87:cb:df:0b:39:85:76:47:79:d9:b2: 45:b5:f0:ae:29:81:28:d1:a6:3b:50:69:bd:f9:d8: 1f:fe:64:e9:65:b0:3b:f2:07:97:1e:25:b7:b4:63: 58:9e:2d:c4:c8:5f:22:1a:97:52:05:1b:1e:64:ad: a7:54:b5:5e:d6:c4:56:60:2b:e4:d0:f5:70:25:e6: 50:0a:0c:42:97:f1:5a:f9:e6:61:77:a2:4c:4d:23: 4d:9b:26:79:a8:ac:56:64:fd:c3:28:ba:b5:fb:a5: 1e:b0:c6:3e:bc:c4:64:80:51:03:ba:b3:a5:a9:39: 17:68:48:81:26:3e:64:2e:50:20:98:64:3b:f8:19: 60:49:34:26:31:5c:07:d0:ba:39:d1:1e:c7:00:9c: 97:9b:70:c8:c1:d3:cc:7a:e9:60:c8:c0:b9:e8:f3: fc:b5:5b:9f:c8:b0:c0:11:08:86:27:7a:1a:a8:74: 4e:d1:c1:d4:d4:16:dd:80:28:a6:62:b8:01:47:ba: dd:15:10:4f:df:2a:0a:cf:8d:0b:7f:44:59:f0:56: 29:a8:86:ab:6c:a7:47:3a:6f:66:55:ea:7a:99:d7: 0e:8a:cf:8d:9a:19:92:18:ef:5f:d1:54:4d:f1:5e: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DD:5E:18:E2:63:60:06:15:91:75:47:A8:4C:29:13:27:E2:3D:C0 X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b0:a6:7c:ab:d5:7a:75:b7:48:aa:7e:74:f4:d3:ba:19:19: ce:0c:34:0f:3a:14:fe:d3:a6:84:2b:58:51:d4:8e:39:b7:18: b9:02:b7:07:8b:2d:6f:b8:93:27:c8:2d:87:15:6b:9a:b1:3f: ff:9f:78:3c:3d:0f:99:31:5c:28:5d:97:49:3e:29:59:d6:45: 45:3e:0b:87:98:d7:0e:a9:09:6f:3e:4b:19:06:8f:2c:a6:5b: cd:49:dc:4b:a4:5d:99:92:4c:a2:ce:1a:34:a0:38:99:d0:05: 06:df:4f:86:8a:c1:6d:b7:3c:26:46:1e:a6:b8:15:d1:42:89: a3:f0:83:69:2e:21:01:1f:7e:36:5b:b6:be:26:b4:5f:e3:7b: 97:f7:e0:fc:51:ac:1e:05:69:bf:58:bd:a3:7d:c3:bf:da:69: 70:34:7a:75:10:61:36:7d:9d:5e:63:4c:ee:c6:46:f1:0b:f9: 8c:82:46:5f:7d:15:c8:23:38:94:4c:70:98:9d:a7:a4:ad:06: dc:90:8c:99:66:a9:0c:e4:10:8e:5f:21:0f:ff:33:9c:30:19: 88:6a:5a:bc:8c:27:71:95:39:63:ce:ac:d7:82:4e:ca:6b:65: 98:4c:3d:47:b9:36:ba:d1:c2:fd:9b:d7:0e:05:ac:13:a0:91: 5d:e8:2f:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjAxRTExMC8GA1UEBRMoN0RCRjgzQUU1MjgyQzg0RUIwRUZGNTVENUMxQzY3ODAx Q0I2NDVDNDAeFw0yNTA1MTUwNzAzMTdaFw0yNTA1MjIwNzAzMTdaMBgxFjAUBgNV BAMTDTY4MjU5MWI2LTNiNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4OSPFjvcrdkb2YdKEACv0BoaHy98LOYV2R3nZskW18K4pgSjRpjtQab352B/+ ZOllsDvyB5ceJbe0Y1ieLcTIXyIal1IFGx5kradUtV7WxFZgK+TQ9XAl5lAKDEKX 8Vr55mF3okxNI02bJnmorFZk/cMourX7pR6wxj68xGSAUQO6s6WpORdoSIEmPmQu UCCYZDv4GWBJNCYxXAfQujnRHscAnJebcMjB08x66WDIwLno8/y1W5/IsMARCIYn ehqodE7RwdTUFt2AKKZiuAFHut0VEE/fKgrPjQt/RFnwVimohqtsp0c6b2ZV6nqZ 1w6Kz42aGZIY71/RVE3xXkdBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjN1eGOJj YAYVkXVHqEwpEyfiPcAwHwYDVR0jBBgwFoAUfb+DrlKCyE6w7/VdXBxngBy2RcQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2MDFFL0ZGNDg3NUJFRjU2 MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmItRHJsS0N5RTZ3N19WZFhCeG5nQnkyUmNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 MDFFL0ZGNDg3NUJFRjU2MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2 dzdfVmRYQnhuZ0J5MlJjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIewpnyr1Xp1t0iqfnT007oZGc4MNA86FP7TpoQrWFHUjjm3GLkCtweL LW+4kyfILYcVa5qxP/+feDw9D5kxXChdl0k+KVnWRUU+C4eY1w6pCW8+SxkGjyym W81J3EukXZmSTKLOGjSgOJnQBQbfT4aKwW23PCZGHqa4FdFCiaPwg2kuIQEffjZb tr4mtF/je5f34PxRrB4Fab9YvaN9w7/aaXA0enUQYTZ9nV5jTO7GRvEL+YyCRl99 FcgjOJRMcJidp6StBtyQjJlmqQzkEI5fIQ//M5wwGYhqWryMJ3GVOWPOrNeCTspr ZZhMPUe5NrrRwv2b1w4FrBOgkV3oL+Y= -----END CERTIFICATE-----Generated at Thu May 15 15:45:03 2025 by rpki-client