$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json) Hash identifier: gHRShJREXVKMkNgRUZJBT8AYUtaTVNM2QhxoLZ9j12c= Subject key identifier: 88:88:EA:13:CF:21:6E:A8:B4:F9:54:F5:D3:76:B6:9D:C1:11:70:32 Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft Manifest number: 01A4 Signing time: Mon 05 May 2025 02:16:07 +0000 Manifest this update: Mon 05 May 2025 02:16:07 +0000 Manifest next update: Mon 12 May 2025 02:16:07 +0000 Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: Zt/hTGehH57YRH+UARswfJG/7cj4/hR4vwSQH3j70Dw=) 2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: CsAbRFqHcEIzwNgcJyTBhfAP0i1+CDL52//CVRtHe84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: May 5 02:16:07 2025 GMT Not After : May 12 02:16:07 2025 GMT Subject: CN=68181f67-7b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d5:7b:2e:05:d8:75:d9:f3:07:b6:4c:7e:6c: 45:fa:9a:b7:b7:b9:6a:2d:2f:e8:b0:b9:47:27:42: 56:86:2c:66:a9:5e:af:6e:7a:3a:63:3d:8a:5e:9f: 42:a5:2d:d6:41:6f:88:a0:8e:54:23:bd:75:da:b9: 75:2f:a5:8d:ea:51:9e:c1:49:7c:56:2c:23:83:e7: ce:a4:05:98:3e:72:99:34:c0:35:95:b2:c0:54:cb: 22:43:5e:c4:c4:c1:00:48:79:6c:85:8f:fd:9f:8a: 0b:12:38:c2:80:f9:2f:0d:7b:79:52:d1:f2:b0:b9: 05:6a:95:5c:4b:c7:74:58:f1:e1:26:57:b0:64:56: 1f:0f:fe:98:5a:21:8d:bf:31:66:32:be:ac:84:71: dc:38:d9:bf:8e:01:b3:20:f9:f7:9c:21:b4:39:15: b4:e5:56:d3:5a:eb:30:53:ab:8d:30:7b:14:52:c1: 3e:b2:40:a1:2e:38:2a:ac:ee:8d:a3:58:1f:6b:c1: 14:37:90:f6:10:aa:7a:1e:dc:1e:07:95:7d:de:97: b8:8e:dc:cc:1b:c4:b5:02:40:b0:ca:4f:78:dd:05: 97:3d:91:4a:f2:be:c3:19:ab:cc:45:c6:3e:f0:cc: 9f:29:90:ae:91:ec:56:85:eb:97:19:85:8f:97:51: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:88:EA:13:CF:21:6E:A8:B4:F9:54:F5:D3:76:B6:9D:C1:11:70:32 X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a7:0a:90:8f:d8:86:6f:cb:fb:75:c4:9a:58:ab:1f:4f:ac: 42:ae:57:65:f7:c9:c4:68:ba:7d:e0:0e:6b:c3:4f:59:f9:c2: 55:17:4d:52:61:b8:50:13:ac:06:b6:16:43:1c:eb:d3:de:f2: 37:97:7c:39:10:49:46:6f:2c:03:2e:49:e6:0c:e7:88:d2:da: a9:3e:22:08:47:d6:a2:22:7d:f8:d7:87:e4:84:a1:db:8e:7e: c7:56:94:58:a9:0c:c5:8c:0b:3e:6f:97:0e:87:0f:c7:81:4b: c2:38:ca:ab:b8:07:18:27:7e:bf:cd:ca:5a:d2:26:80:9e:bd: 63:b9:0a:ce:2a:3c:20:3b:d3:30:83:fb:64:da:78:b0:d7:b9: 37:2e:97:65:93:28:56:94:e2:32:37:e6:02:80:3e:8e:ed:85: 11:01:66:43:ea:c8:76:16:4a:53:f0:4b:1d:f8:0a:f1:c0:d2: 04:de:a8:95:29:41:bb:f6:26:a1:c8:cf:61:fc:a3:7c:86:34: b9:95:75:b0:fe:46:13:98:00:90:54:82:b9:a7:c1:36:7f:f3: 50:7f:3d:f0:40:b3:5e:a1:25:17:cf:98:52:95:be:79:8f:d5: f1:77:33:56:d5:72:24:9b:f6:f3:ff:18:54:2f:b2:78:62:28: 06:3a:1c:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjUwNTA1MDIxNjA3WhcNMjUwNTEyMDIxNjA3WjAYMRYwFAYD VQQDEw02ODE4MWY2Ny03YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79V7LgXYddnzB7ZMfmxF+pq3t7lqLS/osLlHJ0JWhixmqV6vbno6Yz2KXp9C pS3WQW+IoI5UI7112rl1L6WN6lGewUl8Viwjg+fOpAWYPnKZNMA1lbLAVMsiQ17E xMEASHlshY/9n4oLEjjCgPkvDXt5UtHysLkFapVcS8d0WPHhJlewZFYfD/6YWiGN vzFmMr6shHHcONm/jgGzIPn3nCG0ORW05VbTWuswU6uNMHsUUsE+skChLjgqrO6N o1gfa8EUN5D2EKp6HtweB5V93pe4jtzMG8S1AkCwyk943QWXPZFK8r7DGavMRcY+ 8MyfKZCukexWheuXGYWPl1FJNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiI6hPP IW6otPlU9dN2tp3BEXAyMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn LVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBipwqQj9iGb8v7dcSaWKsfT6xCrldl98nEaLp94A5rw09Z+cJVF01S YbhQE6wGthZDHOvT3vI3l3w5EElGbywDLknmDOeI0tqpPiIIR9aiIn3414fkhKHb jn7HVpRYqQzFjAs+b5cOhw/HgUvCOMqruAcYJ36/zcpa0iaAnr1juQrOKjwgO9Mw g/tk2niw17k3LpdlkyhWlOIyN+YCgD6O7YURAWZD6sh2FkpT8Esd+ArxwNIE3qiV KUG79iahyM9h/KN8hjS5lXWw/kYTmACQVIK5p8E2f/NQfz3wQLNeoSUXz5hSlb55 j9XxdzNW1XIkm/bz/xhUL7J4YigGOhwv -----END CERTIFICATE-----Generated at Mon May 5 09:07:27 2025 by rpki-client