$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: bkYRCwbfLNoCxaMD3Ttbh6D0n+CtIyJPi9uPTGtNojs= Subject key identifier: FC:92:9A:31:C1:B4:04:6D:5B:6B:BF:7D:BB:F4:16:61:B3:6B:59:56 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 1042 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 102B Signing time: Mon 12 May 2025 17:21:08 +0000 Manifest this update: Mon 12 May 2025 17:21:08 +0000 Manifest next update: Mon 19 May 2025 17:21:08 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: YG+jsdhBILrpQVczxI9BEs0KyYZ/Fo+VFWyD3FWq8ZY=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: SaPDHfkJq6+olJp+pCEwWUsbU8ig75YR7kl23PYTmrE=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4162 (0x1042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B, serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: May 12 17:21:08 2025 GMT Not After : May 19 17:21:08 2025 GMT Subject: CN=68222e04-3d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:18:a4:f6:bb:da:fb:0d:73:ba:ec:ed:17: c8:e3:71:70:12:3d:1d:b5:6f:a7:85:7a:08:5f:5f: f5:c3:48:81:0a:ac:b5:71:6d:4e:9d:2f:38:af:60: 12:7a:ea:7d:8f:01:c8:60:91:75:99:7b:69:40:f6: 74:85:14:96:22:c6:8d:ee:a0:20:47:2a:de:e0:6e: 3f:c3:91:9d:b9:bb:f1:a3:9f:dd:c4:17:a9:58:ef: 60:90:77:27:71:a9:2a:84:14:b6:86:ce:7d:d7:f1: af:f7:37:01:23:b3:cd:d3:b6:3f:81:f6:95:57:fa: 91:12:64:c9:3f:68:21:ac:1a:d1:eb:d5:c1:66:3c: d4:84:ee:9f:91:be:56:e1:35:8d:72:25:fc:b6:43: 68:e9:22:6a:03:a1:59:b5:4b:2d:2c:46:ad:28:cc: dd:e4:59:f5:17:9f:d3:ad:9a:ee:b0:be:3a:a4:7f: 07:a1:35:b3:eb:06:9a:58:f6:e8:3d:b4:23:6f:2a: 94:8d:16:ab:17:83:f5:30:cc:8d:bd:c6:aa:a0:c1: ec:7a:b8:87:33:7f:2d:08:5a:ae:9c:89:b5:37:1a: 67:a8:89:19:2f:0c:93:d5:57:a4:32:b9:cf:20:62: 2b:17:63:a5:a7:08:1c:fe:35:4d:cc:e7:e1:4e:7d: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:9A:31:C1:B4:04:6D:5B:6B:BF:7D:BB:F4:16:61:B3:6B:59:56 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:75:ff:6e:4c:38:7a:ae:bc:94:ec:c3:0b:19:97:49:d2:53: 23:05:a6:3c:f6:eb:a2:53:58:ac:5e:a9:96:e2:f0:59:42:e6: 82:50:74:8d:e2:97:29:e8:bd:20:97:03:84:6a:5a:f1:5c:0e: d1:f9:4d:bf:3e:d4:a3:de:4c:f7:05:d0:8f:56:14:9e:a0:bd: 25:91:87:34:db:c1:a3:74:12:af:79:dc:dc:30:f0:71:4f:3e: 98:00:f4:65:0a:d5:88:d1:01:11:a2:59:32:29:91:cd:d8:50: 7a:5d:72:f1:65:73:b3:83:1b:83:01:9d:12:e0:ab:82:04:52: 7e:84:19:cb:ab:b4:40:0e:82:e7:88:27:25:ae:23:23:ca:2b: ff:84:60:6f:fd:99:e3:a3:8f:bf:23:11:ef:c3:3c:d5:8c:7d: 93:d0:09:a3:fa:ad:86:d3:3b:df:a6:7e:9b:71:93:1b:e4:24: bb:47:87:b1:6f:e3:5c:e0:6b:d8:b0:6f:dd:ee:c0:74:d9:c4: 9b:fc:e7:c0:44:3b:4c:7b:5f:b9:44:25:02:20:b9:d2:5a:48: 2c:f2:ba:9a:d9:bf:c5:cc:c7:b5:d6:fb:5c:2e:48:93:6a:1e: 7b:20:12:b7:ea:62:2c:ac:0e:fb:59:cd:04:2d:ce:fd:34:1e: cb:13:3c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjUwNTEyMTcyMTA4WhcNMjUwNTE5MTcyMTA4WjAYMRYwFAYD VQQDEw02ODIyMmUwNC0zZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CsYpPa72vsNc7rs7RfI43FwEj0dtW+nhXoIX1/1w0iBCqy1cW1OnS84r2AS eup9jwHIYJF1mXtpQPZ0hRSWIsaN7qAgRyre4G4/w5Gdubvxo5/dxBepWO9gkHcn cakqhBS2hs591/Gv9zcBI7PN07Y/gfaVV/qREmTJP2ghrBrR69XBZjzUhO6fkb5W 4TWNciX8tkNo6SJqA6FZtUstLEatKMzd5Fn1F5/TrZrusL46pH8HoTWz6waaWPbo PbQjbyqUjRarF4P1MMyNvcaqoMHseriHM38tCFqunIm1NxpnqIkZLwyT1VekMrnP IGIrF2Olpwgc/jVNzOfhTn0phQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPySmjHB tARtW2u/fbv0FmGza1lWMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCdf9uTDh6rryU7MMLGZdJ0lMjBaY89uuiU1isXqmW4vBZQuaCUHSN 4pcp6L0glwOEalrxXA7R+U2/PtSj3kz3BdCPVhSeoL0lkYc028GjdBKvedzcMPBx Tz6YAPRlCtWI0QERolkyKZHN2FB6XXLxZXOzgxuDAZ0S4KuCBFJ+hBnLq7RADoLn iCclriMjyiv/hGBv/Znjo4+/IxHvwzzVjH2T0Amj+q2G0zvfpn6bcZMb5CS7R4ex b+Nc4GvYsG/d7sB02cSb/OfARDtMe1+5RCUCILnSWkgs8rqa2b/FzMe11vtcLkiT ah57IBK36mIsrA77Wc0ELc79NB7LEzxL -----END CERTIFICATE-----Generated at Wed May 14 11:19:53 2025 by rpki-client