$ rpki-client -vvf rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft File: n-FamlS6VTXSl0WIBcRwNi7YcXM.mft (raw, json) Hash identifier: dCEydyCvUjZF0PMd58AeASdkb1vLSZCVd0a680Hz1VY= Subject key identifier: B1:F7:BF:65:D2:95:5A:B0:34:95:BB:E8:C5:2D:16:C1:E3:BE:7D:86 Authority key identifier: 9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73 Certificate issuer: /CN=A916943B/serialNumber=9FE15A9A54BA5535D297458805C470362ED87173 Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft Manifest number: 0A81 Signing time: Sat 10 May 2025 19:21:28 +0000 Manifest this update: Sat 10 May 2025 19:21:28 +0000 Manifest next update: Sat 17 May 2025 19:21:28 +0000 Files and hashes: 1: n-FamlS6VTXSl0WIBcRwNi7YcXM.crl (hash: OFyVp5z+ZsAailsa3f1w6UP3KzC37kB7NcWiN1OdEgc=) 2: 205773705AEA11EAA2FDF10EC4F9AE02.roa (hash: xIyzqpx/v+AWGG+aa4XOH44ipbfUfWT7BofPfTKwqVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916943B, serialNumber=9FE15A9A54BA5535D297458805C470362ED87173 Validity Not Before: May 10 19:21:28 2025 GMT Not After : May 17 19:21:28 2025 GMT Subject: CN=681fa738-71a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:5c:65:00:c5:c7:24:dd:fc:09:8b:49:b3: d1:8f:6e:2a:82:76:6e:c9:51:a5:7e:fd:8c:ec:15: a5:e3:7c:f1:be:f0:16:fe:24:35:05:48:38:d2:18: f1:87:ff:16:00:6b:3b:b0:78:57:dd:1c:a9:a0:64: 80:3f:0a:2a:22:c5:d0:20:09:aa:d0:d8:7e:93:49: 25:77:95:8a:ca:e9:b6:0e:9e:05:48:ad:4d:21:b0: 83:d2:ee:33:4f:c2:a3:ca:f2:3f:77:88:11:96:e3: 05:a9:cd:8f:4e:4d:9a:e0:9c:6c:81:08:11:3e:95: 02:36:16:e2:ae:a8:12:65:eb:c3:20:51:2e:7a:a4: 20:e5:5e:86:5c:44:52:03:24:97:9e:e7:8f:16:a9: 6b:ed:46:90:57:77:19:9b:95:de:5f:6f:cc:83:64: e0:2b:9d:b1:9a:3f:21:bf:75:84:78:b6:94:f3:e4: 70:98:be:55:38:7a:f1:8d:93:b4:78:3d:a4:9f:c5: 11:c8:ce:ad:fb:55:d8:7b:0d:14:11:a9:38:12:6f: ce:49:06:d4:e0:da:39:a0:d9:3c:ab:da:27:06:30: bb:90:de:2c:4c:4d:33:ac:4b:06:00:12:4a:4e:f3: 67:e0:13:93:60:41:9c:16:a1:49:b9:2b:2a:fc:29: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:BF:65:D2:95:5A:B0:34:95:BB:E8:C5:2D:16:C1:E3:BE:7D:86 X509v3 Authority Key Identifier: keyid:9F:E1:5A:9A:54:BA:55:35:D2:97:45:88:05:C4:70:36:2E:D8:71:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-FamlS6VTXSl0WIBcRwNi7YcXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916943B/64F31C065AE911EAAC8F520EC4F9AE02/n-FamlS6VTXSl0WIBcRwNi7YcXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:47:f9:59:f5:99:80:f2:5a:9e:9e:13:14:72:ae:df:b9: 3f:a4:7c:39:c0:35:aa:45:5d:d2:36:1e:97:3a:ed:13:d9:40: 1c:c4:e6:34:43:4e:ac:fc:19:e1:e2:85:d7:66:52:d3:75:85: 43:30:5c:3a:aa:ba:37:74:67:42:a6:26:ac:91:bb:e2:0b:46: c8:2e:08:f0:e1:b5:de:3a:6a:fc:dd:ba:41:0f:da:f3:66:ac: 7a:1f:2c:8b:5b:aa:92:2e:50:80:80:e1:12:bd:72:de:7d:4d: 76:f6:da:c7:c1:86:f3:8f:81:44:23:d0:82:4f:ad:cf:3c:39: 61:e8:a3:0f:d6:c5:59:7d:5c:cb:c8:d6:9e:9c:8f:db:5c:28: d5:3b:fc:a2:29:30:c7:3c:b2:20:e0:45:69:68:fd:1a:f0:39: 45:12:02:3e:6a:1e:3f:9a:b5:1c:dd:10:a1:75:2f:2a:41:b2: 1d:cc:c2:fd:fd:e8:d8:84:05:9f:7f:11:9c:44:34:c7:76:b8: 21:34:37:dc:3e:08:76:bb:4d:3f:d4:e8:eb:4a:a4:32:40:6b: 65:9d:94:43:41:df:bf:ec:04:dd:05:cb:ab:3e:b7:c8:64:d7: d7:2c:c5:17:2d:d8:e1:94:e9:89:57:a3:8c:2d:3c:d2:9f:74: 1a:35:3a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0M0IxMTAvBgNVBAUTKDlGRTE1QTlBNTRCQTU1MzVEMjk3NDU4ODA1QzQ3MDM2 MkVEODcxNzMwHhcNMjUwNTEwMTkyMTI4WhcNMjUwNTE3MTkyMTI4WjAYMRYwFAYD VQQDEw02ODFmYTczOC03MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRlcZQDFxyTd/AmLSbPRj24qgnZuyVGlfv2M7BWl43zxvvAW/iQ1BUg40hjx h/8WAGs7sHhX3RypoGSAPwoqIsXQIAmq0Nh+k0kld5WKyum2Dp4FSK1NIbCD0u4z T8KjyvI/d4gRluMFqc2PTk2a4JxsgQgRPpUCNhbirqgSZevDIFEueqQg5V6GXERS AySXnuePFqlr7UaQV3cZm5XeX2/Mg2TgK52xmj8hv3WEeLaU8+RwmL5VOHrxjZO0 eD2kn8URyM6t+1XYew0UEak4Em/OSQbU4No5oNk8q9onBjC7kN4sTE0zrEsGABJK TvNn4BOTYEGcFqFJuSsq/CmHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH3v2XS lVqwNJW76MUtFsHjvn2GMB8GA1UdIwQYMBaAFJ/hWppUulU10pdFiAXEcDYu2HFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQzQi82NEYzMUMwNjVB RTkxMUVBQUM4RjUyMEVDNEY5QUUwMi9uLUZhbWxTNlZUWFNsMFdJQmNSd05pN1lj WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24tRmFtbFM2VlRYU2wwV0lCY1J3Tmk3WWNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQzQi82NEYzMUMwNjVBRTkxMUVBQUM4RjUyMEVDNEY5QUUwMi9uLUZhbWxTNlZU WFNsMFdJQmNSd05pN1ljWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTEf5WfWZgPJanp4TFHKu37k/pHw5wDWqRV3SNh6XOu0T2UAcxOY0 Q06s/Bnh4oXXZlLTdYVDMFw6qro3dGdCpiaskbviC0bILgjw4bXeOmr83bpBD9rz Zqx6HyyLW6qSLlCAgOESvXLefU129trHwYbzj4FEI9CCT63PPDlh6KMP1sVZfVzL yNaenI/bXCjVO/yiKTDHPLIg4EVpaP0a8DlFEgI+ah4/mrUc3RChdS8qQbIdzML9 /ejYhAWffxGcRDTHdrghNDfcPgh2u00/1OjrSqQyQGtlnZRDQd+/7ATdBcurPrfI ZNfXLMUXLdjhlOmJV6OMLTzSn3QaNTrC -----END CERTIFICATE-----Generated at Sat May 10 22:04:58 2025 by rpki-client