$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: Z01JcDLfyDFf+s7K1iP/8GzSp811fmhYe+vnLeSy6iw= Subject key identifier: 4B:89:4F:C4:22:8F:6B:5D:EE:D6:1B:4E:16:7A:F4:E3:BE:E1:19:A5 Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0163 Signing time: Thu 15 May 2025 03:24:33 +0000 Manifest this update: Thu 15 May 2025 03:24:33 +0000 Manifest next update: Thu 22 May 2025 03:24:33 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: 3kc1IM0gSbEwW0oN1HsY1Et6mxYv9TY4q6y+Oq4+7h8=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: LI8+/YvVoONLxst6n4BQuIP1sskVexKZgRmcFhR/Qps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: May 15 03:24:33 2025 GMT Not After : May 22 03:24:33 2025 GMT Subject: CN=68255e71-5868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:ba:66:57:1f:72:52:2e:b0:67:7b:1f:1c: cc:51:ce:08:f6:c0:0c:a2:2a:47:fc:27:bd:21:b2: 5c:a1:0c:f9:83:18:f6:68:81:bf:43:74:41:a8:b1: eb:25:1c:fa:70:58:4c:a6:af:3f:d1:50:f3:c3:1d: a8:a6:c3:22:0d:9a:92:4b:fe:78:3d:22:b5:21:39: 6d:cc:fe:5a:b5:b4:1c:9d:68:49:b3:f8:41:08:a1: 7a:d8:54:d9:f8:fc:76:b4:eb:82:94:7a:63:9a:84: 25:55:06:de:de:e2:b5:05:96:80:c9:bb:85:47:da: 22:5a:a8:49:10:e1:a9:db:51:b0:48:95:2a:67:20: 59:90:64:bc:96:cd:01:74:bc:53:70:69:82:29:df: cf:d4:7a:d6:61:d3:0a:90:d7:ec:be:ea:09:54:26: fe:5d:d4:64:9c:33:5e:88:e7:47:56:75:7a:a3:4e: f6:c3:f9:d9:27:e7:6e:45:64:2c:99:f0:0d:26:c8: a7:f9:74:9a:20:4a:0f:c2:1d:15:49:6b:5e:a6:ee: c4:46:15:18:fa:2a:19:8d:c7:be:7b:0e:ab:eb:8d: 22:0c:81:12:38:43:73:a4:ab:64:d4:86:38:73:f4: 9b:cb:4b:2c:06:08:58:1b:08:c5:45:e4:9a:8f:15: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:4F:C4:22:8F:6B:5D:EE:D6:1B:4E:16:7A:F4:E3:BE:E1:19:A5 X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:54:24:21:7a:a1:ac:11:b3:86:ab:ac:8d:a9:13:ef:b6:fa: fa:e6:1a:19:61:a2:94:0c:d7:49:e4:72:cd:75:c6:f4:db:f9: b9:11:c8:53:ad:69:51:a8:91:57:82:5d:5d:aa:ef:e8:21:26: 27:fc:4d:32:28:2f:1a:46:b7:58:e1:78:42:45:76:0e:b7:81: 72:f3:f1:36:bb:13:f1:3a:c7:4d:3e:ed:c0:47:1a:b6:5f:4d: ef:34:69:31:2a:32:55:47:b5:db:23:f6:c2:ac:7f:f2:5b:aa: 43:19:17:a5:76:7c:9d:2a:99:21:f0:62:d0:ef:5d:32:83:39: b6:da:88:2a:43:48:39:af:b4:b2:d7:b8:69:e7:6b:2c:90:dd: 24:a6:f1:f0:a7:79:94:59:d1:d7:a0:90:53:22:cd:4d:3b:ef: 64:de:0f:2a:09:4d:19:28:ad:00:76:ee:75:bf:ad:e3:e1:7a: df:6e:0a:6d:8c:7e:a4:64:89:b2:c3:8f:2d:05:88:d3:5e:6a: 5d:f2:be:54:59:74:38:02:06:19:43:a3:85:d4:8c:0b:11:61: 20:16:e1:eb:11:8c:89:03:c8:86:e5:5b:f8:66:d5:62:a3:3b: 4c:78:74:b5:55:a9:11:04:7a:62:31:4c:ea:d7:9a:b0:8c:72: d7:df:89:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwNTE1MDMyNDMzWhcNMjUwNTIyMDMyNDMzWjAYMRYwFAYD VQQDEw02ODI1NWU3MS01ODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3G6ZlcfclIusGd7HxzMUc4I9sAMoipH/Ce9IbJcoQz5gxj2aIG/Q3RBqLHr JRz6cFhMpq8/0VDzwx2opsMiDZqSS/54PSK1ITltzP5atbQcnWhJs/hBCKF62FTZ +Px2tOuClHpjmoQlVQbe3uK1BZaAybuFR9oiWqhJEOGp21GwSJUqZyBZkGS8ls0B dLxTcGmCKd/P1HrWYdMKkNfsvuoJVCb+XdRknDNeiOdHVnV6o072w/nZJ+duRWQs mfANJsin+XSaIEoPwh0VSWtepu7ERhUY+ioZjce+ew6r640iDIESOENzpKtk1IY4 c/Sby0ssBghYGwjFReSajxVU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuJT8Qi j2td7tYbThZ69OO+4RmlMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1VCQheqGsEbOGq6yNqRPvtvr65hoZYaKUDNdJ5HLNdcb02/m5EchT rWlRqJFXgl1dqu/oISYn/E0yKC8aRrdY4XhCRXYOt4Fy8/E2uxPxOsdNPu3ARxq2 X03vNGkxKjJVR7XbI/bCrH/yW6pDGReldnydKpkh8GLQ710ygzm22ogqQ0g5r7Sy 17hp52sskN0kpvHwp3mUWdHXoJBTIs1NO+9k3g8qCU0ZKK0Adu51v63j4Xrfbgpt jH6kZImyw48tBYjTXmpd8r5UWXQ4AgYZQ6OF1IwLEWEgFuHrEYyJA8iG5Vv4ZtVi oztMeHS1VakRBHpiMUzq15qwjHLX34l8 -----END CERTIFICATE-----Generated at Sat May 17 00:50:04 2025 by rpki-client