$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: kSfgUI7axKZ9Q3gmy4Xg/xMqDMG8EjLI+ZBO+wm8Or4= Subject key identifier: 66:7C:D1:F8:7A:54:1B:D0:D0:E4:16:D6:77:E0:10:CE:DA:FE:44:0F Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: 56 Signing time: Thu 15 May 2025 06:29:42 +0000 Manifest this update: Thu 15 May 2025 06:29:42 +0000 Manifest next update: Thu 22 May 2025 06:29:42 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: JYBMf7sWJm5M++HujG3X5hbLDQDESgk+98sDwPZD52A=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: May 15 06:29:42 2025 GMT Not After : May 22 06:29:42 2025 GMT Subject: CN=682589d6-013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:a1:8e:ce:86:df:29:0d:c2:ea:cb:31:be: 77:9b:b1:61:c0:f4:2f:3f:36:d6:81:b5:c4:8c:fc: 42:8d:a2:98:42:8d:65:2d:a9:af:66:d9:e4:47:80: 32:1b:9f:ad:b7:22:ce:94:b9:eb:3f:93:05:78:4c: a3:8f:53:0a:56:76:85:f7:fe:1a:0c:1e:62:1f:ae: 1a:64:9e:dd:07:a6:ad:e3:5b:a2:f0:3f:cd:13:4f: 1d:31:b4:86:2b:72:c1:9f:1a:a0:e0:5a:23:40:cb: 30:d0:e4:c3:b2:89:5b:16:5c:2c:01:53:1a:95:aa: 03:26:f8:d2:1a:b2:6a:bd:fa:9b:cd:1c:8c:f5:14: 99:48:22:49:46:ea:4d:9b:7c:e0:c4:d5:3a:37:23: 6f:bf:1f:a7:9a:5a:89:74:01:4b:2c:69:74:af:66: ae:b5:b4:0d:42:0a:a7:1a:45:2d:e8:38:d5:51:fb: e6:95:f4:17:56:77:54:d5:6a:29:04:a0:28:6a:53: d8:ec:96:01:e1:91:a2:9e:9b:7e:ed:a3:58:2e:40: cf:98:80:52:22:b8:fb:59:b2:de:c7:29:d8:fb:69: 3d:f1:20:bc:56:df:e4:fb:03:16:ce:76:ce:24:7f: 37:80:77:31:b7:89:06:6b:79:d4:f9:39:d6:38:a5: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7C:D1:F8:7A:54:1B:D0:D0:E4:16:D6:77:E0:10:CE:DA:FE:44:0F X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b5:e3:fc:3d:eb:5e:7c:31:b2:e8:58:d1:0c:4d:e2:30:84: 0e:b8:e3:f2:92:60:b3:26:9e:1c:50:e3:ff:15:14:a8:69:dd: ee:0e:f6:f7:2b:04:e5:3d:bf:8f:cf:81:00:e7:fd:b5:7f:d7: 2b:4a:d7:d5:ac:21:e0:a3:87:bd:cd:0b:78:70:50:ae:00:04: 67:01:75:77:52:70:1f:4c:26:7c:33:72:6d:dd:c2:6c:ed:8b: eb:60:b2:69:ec:56:d2:68:6c:70:63:24:50:1a:c2:0f:6c:d6: fc:c7:95:0c:f5:18:33:55:23:8a:22:d2:9e:85:2e:86:76:86: e7:53:b4:8d:8c:3f:4b:2a:a0:20:d2:3e:a7:07:57:96:cb:df: 1b:03:65:dc:7a:63:27:7c:e7:46:de:ea:07:fd:ed:3d:f2:8a: 62:48:67:a9:1f:f1:56:9d:ae:5f:ff:ce:02:ae:f4:08:43:95: db:7f:49:5f:e8:1a:6b:53:6b:ca:64:fe:72:f0:81:a6:17:dd: 83:e5:39:cb:ad:56:09:51:81:77:82:02:fc:6a:d3:5f:36:33: f6:74:5a:f0:19:09:45:11:14:5c:3d:a3:82:c2:9f:89:fc:50: ae:19:5e:6b:37:42:8b:1c:66:81:40:63:87:47:55:b5:c2:5e: 49:d4:84:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoMTcxRUREM0Y3Nzg1RTBGNTM4NTU2RjlFRjI2QkVENzE2 NjlFOEQ4QzAeFw0yNTA1MTUwNjI5NDJaFw0yNTA1MjIwNjI5NDJaMBgxFjAUBgNV BAMTDTY4MjU4OWQ2LTAxM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDROKGOzobfKQ3C6ssxvnebsWHA9C8/NtaBtcSM/EKNophCjWUtqa9m2eRHgDIb n623Is6Uues/kwV4TKOPUwpWdoX3/hoMHmIfrhpknt0Hpq3jW6LwP80TTx0xtIYr csGfGqDgWiNAyzDQ5MOyiVsWXCwBUxqVqgMm+NIasmq9+pvNHIz1FJlIIklG6k2b fODE1To3I2+/H6eaWol0AUssaXSvZq61tA1CCqcaRS3oONVR++aV9BdWd1TVaikE oChqU9jslgHhkaKem37to1guQM+YgFIiuPtZst7HKdj7aT3xILxW3+T7AxbOds4k fzeAdzG3iQZredT5OdY4pROXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZnzR+HpU G9DQ5BbWd+AQztr+RA8wHwYDVR0jBBgwFoAUFx7dP3eF4PU4VW+e8mvtcWaejYww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0I1NjAwQUVDQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRng3ZFAzZUY0UFU0VlctZThtdnRjV2Flall3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0I1NjAwQUVDQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL0Z4N2RQM2VGNFBV NFZXLWU4bXZ0Y1dhZWpZdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABi14/w96158MbLoWNEMTeIwhA644/KSYLMmnhxQ4/8VFKhp3e4O9vcr BOU9v4/PgQDn/bV/1ytK19WsIeCjh73NC3hwUK4ABGcBdXdScB9MJnwzcm3dwmzt i+tgsmnsVtJobHBjJFAawg9s1vzHlQz1GDNVI4oi0p6FLoZ2hudTtI2MP0sqoCDS PqcHV5bL3xsDZdx6Yyd850be6gf97T3yimJIZ6kf8Vadrl//zgKu9AhDldt/SV/o GmtTa8pk/nLwgaYX3YPlOcutVglRgXeCAvxq0182M/Z0WvAZCUURFFw9o4LCn4n8 UK4ZXms3QoscZoFAY4dHVbXCXknUhFs= -----END CERTIFICATE-----Generated at Thu May 15 16:33:02 2025 by rpki-client