$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: a/b+U1Ukl9wsbb/uQhZcreKFmJnBtdeF/075SQjWp1k= Subject key identifier: 1C:E4:5F:DB:84:F3:65:2C:18:6A:54:72:29:FA:BC:30:F7:3D:D7:6C Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: B4 Signing time: Fri 09 May 2025 05:06:35 +0000 Manifest this update: Fri 09 May 2025 05:06:35 +0000 Manifest next update: Fri 16 May 2025 05:06:35 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: OWLBFW57JqzO4tg85IgDSaaOcqGnMfJ/icLNI2ZTJd8=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: rqaw6gYQFHtDXhAs9qwdnQlxs87gmG1kJR92kC6fKaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: May 9 05:06:35 2025 GMT Not After : May 16 05:06:35 2025 GMT Subject: CN=681d8d5b-3366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:bc:06:0c:e4:ab:6d:a9:90:34:83:53:2b: f2:c0:00:47:80:a4:70:f3:ec:6a:50:6d:ad:17:f1: dc:c9:f7:ca:14:82:e9:d9:b2:4f:50:66:8a:c3:89: 0b:e4:79:5c:d0:65:d2:27:8a:d7:28:69:21:09:1d: fe:77:f4:99:ed:91:a2:c5:13:5e:f9:0c:71:8a:d0: f6:39:e5:e8:b0:80:d9:a0:1f:7f:79:a2:80:12:ac: b1:c5:2f:2d:04:7e:63:44:ae:ed:e0:74:8f:27:85: f7:51:fd:f4:43:5c:55:30:86:d5:15:ef:79:2b:7c: f6:b5:66:43:d8:cd:e7:93:38:bb:8a:62:24:57:fc: 64:e4:6d:57:5a:0c:b0:8f:6d:3f:fe:39:f8:b6:4c: 19:23:11:fb:06:6c:64:01:aa:23:09:b8:c1:9b:82: e1:88:eb:51:40:d5:92:87:98:2a:b8:10:af:e5:92: 4b:1a:26:a2:bd:e7:46:46:72:b2:34:1a:6f:36:84: 21:b3:eb:26:0d:90:5f:d7:f8:45:5b:96:11:19:4b: a4:b1:8e:a1:9f:e5:9c:20:19:75:19:7c:61:b4:29: 47:05:cb:b1:ec:e4:a5:93:1e:d0:e5:49:cb:58:8c: 2b:5e:2b:e6:e4:2a:08:76:d4:12:e7:8d:9e:f2:59: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E4:5F:DB:84:F3:65:2C:18:6A:54:72:29:FA:BC:30:F7:3D:D7:6C X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4d:aa:67:23:27:1a:b0:9f:79:49:fb:bf:4a:a7:96:b4:5c: 8c:cf:b5:fb:75:be:e9:a3:99:06:0e:b6:5b:39:ff:e1:a5:3e: 32:4a:78:8e:e6:80:0f:4f:32:fc:4a:fe:26:62:06:28:3b:74: f2:dd:43:a2:e9:dd:23:99:4e:d2:c6:93:28:56:c7:de:71:79: 9f:97:78:a8:dc:ab:8d:c1:1b:98:dd:5b:26:b6:39:44:79:95: 3f:19:ba:de:38:18:96:7d:56:d7:38:5d:7f:57:9c:df:40:ce: 96:43:c6:8c:4d:2c:88:23:38:23:84:36:6e:73:07:f3:ee:6a: 53:9c:07:b9:68:75:61:b4:09:ef:b5:e3:f7:4a:c7:63:3e:36: 40:9d:56:11:fa:e0:0d:2e:1d:e7:3a:fc:dc:ef:f8:b1:71:09: 95:39:28:d8:fb:19:35:68:27:28:d7:51:d9:e1:2f:f8:66:43: cb:a0:b5:cb:ec:9c:0b:c3:1f:49:05:27:13:43:bd:97:72:19: b6:1a:0d:a7:70:b9:b0:4c:25:ae:41:92:bd:78:00:b5:ee:72: 5f:3e:df:11:27:de:36:38:f3:df:ec:cd:20:9a:98:33:2d:2b: 0c:6e:fb:8c:53:47:de:78:14:5a:3e:15:88:21:1e:ce:1e:dd: be:1d:be:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUwNTA5MDUwNjM1WhcNMjUwNTE2MDUwNjM1WjAYMRYwFAYD VQQDEw02ODFkOGQ1Yi0zMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuy8Bgzkq22pkDSDUyvywABHgKRw8+xqUG2tF/HcyffKFILp2bJPUGaKw4kL 5Hlc0GXSJ4rXKGkhCR3+d/SZ7ZGixRNe+QxxitD2OeXosIDZoB9/eaKAEqyxxS8t BH5jRK7t4HSPJ4X3Uf30Q1xVMIbVFe95K3z2tWZD2M3nkzi7imIkV/xk5G1XWgyw j20//jn4tkwZIxH7BmxkAaojCbjBm4LhiOtRQNWSh5gquBCv5ZJLGiaivedGRnKy NBpvNoQhs+smDZBf1/hFW5YRGUuksY6hn+WcIBl1GXxhtClHBcux7OSlkx7Q5UnL WIwrXivm5CoIdtQS542e8llpeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzkX9uE 82UsGGpUcin6vDD3PddsMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMTapnIycasJ95Sfu/SqeWtFyMz7X7db7po5kGDrZbOf/hpT4ySniO 5oAPTzL8Sv4mYgYoO3Ty3UOi6d0jmU7SxpMoVsfecXmfl3io3KuNwRuY3VsmtjlE eZU/GbreOBiWfVbXOF1/V5zfQM6WQ8aMTSyIIzgjhDZucwfz7mpTnAe5aHVhtAnv teP3SsdjPjZAnVYR+uANLh3nOvzc7/ixcQmVOSjY+xk1aCco11HZ4S/4ZkPLoLXL 7JwLwx9JBScTQ72Xchm2Gg2ncLmwTCWuQZK9eAC17nJfPt8RJ942OPPf7M0gmpgz LSsMbvuMU0feeBRaPhWIIR7OHt2+Hb6X -----END CERTIFICATE-----Generated at Sat May 10 16:39:03 2025 by rpki-client