$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: hf9B1xuj+oosyfcHlTrkmUR1cOyqFw2jYAGiQlXkbz8= Subject key identifier: 75:FC:FD:61:DB:A1:ED:A1:60:69:81:11:D0:2F:22:8B:D6:68:4B:69 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 01B5 Signing time: Tue 13 May 2025 02:23:08 +0000 Manifest this update: Tue 13 May 2025 02:23:08 +0000 Manifest next update: Tue 20 May 2025 02:23:08 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: VKHOMzZ06Cos17R39ms4cDkNfH2P09gkU/tDzpmYK/g=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: May 13 02:23:08 2025 GMT Not After : May 20 02:23:08 2025 GMT Subject: CN=6822ad0c-2b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:57:25:9a:ac:99:45:da:80:b7:7c:ad:7c:50: 6f:ff:cc:24:97:45:56:ff:ef:89:0a:34:3b:ca:2a: ce:84:55:d8:22:bc:8d:ef:be:40:72:45:be:d2:a0: e7:ad:4a:5c:e5:20:eb:7b:fd:61:e6:5c:53:7a:fb: 89:c1:3e:cf:85:bd:97:94:45:be:d3:78:b2:37:8d: 89:5f:cf:8a:22:fc:24:ec:d5:21:61:4d:d2:da:a2: bd:1e:f1:04:df:0d:4c:3c:61:c3:7b:c6:0d:2d:d9: 38:06:da:24:16:7f:8d:ca:72:e1:79:37:f0:a4:02: 85:48:2d:ed:87:a1:25:b1:cf:ec:df:92:2b:b6:9d: 32:c7:8e:04:a5:02:ef:75:3c:32:15:ce:ad:7b:53: 21:98:38:5a:3a:79:fe:fa:49:7a:d9:ff:05:e2:31: 0a:e8:3d:9b:ae:32:ac:81:5f:6a:6d:99:78:31:b1: b3:12:01:91:70:6f:d9:fd:e3:93:97:d1:77:60:b7: e0:8b:db:82:75:58:f1:d7:56:b2:d9:d2:02:22:46: fb:fe:c9:61:43:08:a1:54:1c:2f:dc:34:a3:6b:39: 52:4e:67:8c:2e:1f:3c:8e:db:2e:55:3b:f2:aa:6a: 82:f3:a9:c2:f6:4a:64:cf:7c:7d:f1:a8:9b:96:a7: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FC:FD:61:DB:A1:ED:A1:60:69:81:11:D0:2F:22:8B:D6:68:4B:69 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6c:45:4e:ef:27:a6:ad:47:45:b5:01:41:b5:11:9c:ae:eb: 1e:be:e1:7c:4a:29:3f:07:04:70:38:e3:65:8c:ba:53:93:47: 1d:17:46:81:5a:e7:aa:0a:8c:bd:e0:9f:3e:a3:fa:4f:a1:15: 70:27:d6:7d:53:a5:95:6f:1b:04:50:ea:ba:a1:a9:3e:92:c9: 4e:0a:1c:5a:f3:e5:bf:48:79:b0:ae:5f:05:3a:99:5e:a5:96: 0e:2a:35:ae:6e:d5:df:0a:4d:cf:c8:d7:7c:dc:c8:71:c8:85: 5b:62:ec:df:ce:c7:54:75:4c:7a:4e:5e:b9:06:51:53:b7:5b: ac:c6:04:d3:61:14:93:0b:c1:89:a4:16:95:cb:9a:04:34:d0: 0a:5d:0d:11:a3:3c:e4:52:91:ac:5a:7c:da:42:bc:4d:f2:6e: ec:b9:25:b8:f2:5d:3c:e3:f3:64:e9:ac:c2:8f:48:4d:19:fe: 71:6a:ac:b1:d2:0a:97:31:7a:99:24:e4:fc:12:42:ac:9b:cc: 98:a6:1c:20:c2:f1:5b:66:35:a7:c7:67:0c:ae:86:a9:0c:8f: 53:7c:4a:93:63:cb:b3:76:68:5a:6e:4a:ad:19:b7:f6:6f:bf: 56:05:f9:9b:f8:80:f3:8e:6e:ca:8d:f1:b4:d8:13:9f:ff:e1: 67:e7:5f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUwNTEzMDIyMzA4WhcNMjUwNTIwMDIyMzA4WjAYMRYwFAYD VQQDEw02ODIyYWQwYy0yYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lclmqyZRdqAt3ytfFBv/8wkl0VW/++JCjQ7yirOhFXYIryN775AckW+0qDn rUpc5SDre/1h5lxTevuJwT7Phb2XlEW+03iyN42JX8+KIvwk7NUhYU3S2qK9HvEE 3w1MPGHDe8YNLdk4BtokFn+NynLheTfwpAKFSC3th6Elsc/s35Irtp0yx44EpQLv dTwyFc6te1MhmDhaOnn++kl62f8F4jEK6D2brjKsgV9qbZl4MbGzEgGRcG/Z/eOT l9F3YLfgi9uCdVjx11ay2dICIkb7/slhQwihVBwv3DSjazlSTmeMLh88jtsuVTvy qmqC86nC9kpkz3x98aiblqcHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX8/WHb oe2hYGmBEdAvIovWaEtpMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBebEVO7yemrUdFtQFBtRGcrusevuF8Sik/BwRwOONljLpTk0cdF0aB WueqCoy94J8+o/pPoRVwJ9Z9U6WVbxsEUOq6oak+kslOChxa8+W/SHmwrl8FOple pZYOKjWubtXfCk3PyNd83MhxyIVbYuzfzsdUdUx6Tl65BlFTt1usxgTTYRSTC8GJ pBaVy5oENNAKXQ0RozzkUpGsWnzaQrxN8m7suSW48l084/Nk6azCj0hNGf5xaqyx 0gqXMXqZJOT8EkKsm8yYphwgwvFbZjWnx2cMroapDI9TfEqTY8uzdmhabkqtGbf2 b79WBfmb+IDzjm7KjfG02BOf/+Fn51+d -----END CERTIFICATE-----Generated at Tue May 13 22:01:32 2025 by rpki-client