$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: 9MK85xX46Ku/QFEwkiOgkSn53Yl5xP2jMppAnc7aiZM= Subject key identifier: 48:F6:40:4A:3E:F1:8D:74:45:36:83:EF:40:B0:07:46:D7:97:DF:9A Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 0835 Signing time: Mon 12 May 2025 20:36:21 +0000 Manifest this update: Mon 12 May 2025 20:36:20 +0000 Manifest next update: Mon 19 May 2025 20:36:20 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: INSsdZdBRYvhiGiDzWp0qjIL6q8lNiKJIz2YcXZYgzM=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: b2CWId8MqaA56uaZG0XW2vwyQDys6FvCX/OsZrpS0Q0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: May 12 20:36:20 2025 GMT Not After : May 19 20:36:20 2025 GMT Subject: CN=68225bc5-8336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:c4:4f:39:22:3d:7d:d8:22:b9:08:9a:6f: 26:36:1e:42:50:e2:21:8e:3e:f3:1a:82:89:39:a9: c3:18:af:97:e4:ea:92:78:84:68:77:48:ce:cd:77: a5:9b:77:84:3e:ca:cb:da:26:f2:ae:06:f0:45:61: e1:74:a6:02:c4:e2:a6:f2:a6:34:e6:fb:6f:79:8f: 5a:50:33:ad:41:bd:4e:64:0d:e0:c0:07:0d:25:db: ee:4e:6c:10:2b:d4:fb:ab:37:37:6c:55:63:f4:e2: 6e:8d:bb:95:50:7f:08:14:06:f6:1a:ad:ee:3b:5a: 0d:21:0a:1e:5d:17:37:e1:ba:33:3b:d9:9d:28:1e: 3c:e7:cc:db:96:0e:0a:71:e0:a5:05:8b:3b:cb:11: 4d:80:2e:57:01:bd:ae:10:b1:a2:65:eb:bb:8a:d4: 8d:d4:08:50:b5:5e:19:86:0e:d4:5a:de:5c:d3:25: e2:47:85:8f:dd:4a:66:19:c8:f7:b2:74:30:8b:71: 67:8a:9f:2b:02:4f:24:59:2f:64:9f:dd:19:04:84: 81:38:f1:cf:b6:5c:43:b3:8a:21:b5:d2:99:6d:dc: 12:b3:82:60:a4:0b:f2:bc:10:7f:96:24:97:8b:ca: 6a:ba:5d:48:3e:45:9b:fb:9d:ee:3b:d6:1f:13:0f: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F6:40:4A:3E:F1:8D:74:45:36:83:EF:40:B0:07:46:D7:97:DF:9A X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a1:d7:8f:df:8c:fd:d1:1b:a2:db:95:a4:7d:c6:7e:b6:d6: e6:51:70:1c:9f:1b:70:57:c2:e8:f1:01:22:6e:5d:ae:af:1f: d9:0b:8d:9d:57:6b:0a:e7:47:e7:30:ca:c3:cb:53:27:df:58: 57:4f:74:ab:26:cf:f9:5e:f9:ea:85:d6:a0:f5:a5:a1:f1:6f: 17:67:fb:6a:e5:49:4a:3c:49:48:e0:fc:f0:4c:fc:a7:10:79: 34:d4:cb:c5:3e:b6:a1:44:36:f9:20:b4:dd:3a:c5:83:b6:c0: ee:ed:b2:67:44:43:85:cf:f8:c6:f3:bf:07:a3:77:65:93:10: ff:d8:99:e9:52:4b:78:32:0b:77:04:88:f9:a2:39:1c:cd:4f: 9b:68:2f:c2:8b:b8:f1:5b:d3:02:59:d4:5e:fc:7b:c8:81:79: 37:e5:cf:65:aa:d3:e4:fc:53:e1:7c:da:f7:d1:9d:3c:4c:c1: a7:29:37:ae:3a:b4:df:1c:1f:23:80:06:7b:32:da:cb:70:75: 43:84:fa:c7:bb:41:0b:a7:63:aa:3d:be:b5:a9:f7:dc:40:26: 96:55:d6:5b:8c:df:c2:29:1e:18:24:0b:3f:72:20:b7:a9:01: ff:46:c5:70:e5:5f:64:e2:8e:a0:28:24:6e:a0:50:fe:62:d1: 5e:e4:ee:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjUwNTEyMjAzNjIwWhcNMjUwNTE5MjAzNjIwWjAYMRYwFAYD VQQDEw02ODIyNWJjNS04MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcHETzkiPX3YIrkImm8mNh5CUOIhjj7zGoKJOanDGK+X5OqSeIRod0jOzXel m3eEPsrL2ibyrgbwRWHhdKYCxOKm8qY05vtveY9aUDOtQb1OZA3gwAcNJdvuTmwQ K9T7qzc3bFVj9OJujbuVUH8IFAb2Gq3uO1oNIQoeXRc34bozO9mdKB4858zblg4K ceClBYs7yxFNgC5XAb2uELGiZeu7itSN1AhQtV4Zhg7UWt5c0yXiR4WP3UpmGcj3 snQwi3Fnip8rAk8kWS9kn90ZBISBOPHPtlxDs4ohtdKZbdwSs4JgpAvyvBB/liSX i8pqul1IPkWb+53uO9YfEw+YuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj2QEo+ 8Y10RTaD70CwB0bXl9+aMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAodeP34z90Rui25WkfcZ+ttbmUXAcnxtwV8Lo8QEibl2urx/ZC42d V2sK50fnMMrDy1Mn31hXT3SrJs/5Xvnqhdag9aWh8W8XZ/tq5UlKPElI4PzwTPyn EHk01MvFPrahRDb5ILTdOsWDtsDu7bJnREOFz/jG878Ho3dlkxD/2JnpUkt4Mgt3 BIj5ojkczU+baC/Ci7jxW9MCWdRe/HvIgXk35c9lqtPk/FPhfNr30Z08TMGnKTeu OrTfHB8jgAZ7MtrLcHVDhPrHu0ELp2OqPb61qffcQCaWVdZbjN/CKR4YJAs/ciC3 qQH/RsVw5V9k4o6gKCRuoFD+YtFe5O4q -----END CERTIFICATE-----Generated at Tue May 13 21:58:05 2025 by rpki-client