$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: UA9SKRL7q4RqHtJo+8b/fSnFxO7HOA5RWFCZVQdGha8= Subject key identifier: 28:8F:CF:FE:22:A0:A8:D0:5B:2A:7A:12:89:1C:92:F9:7E:1A:AE:FB Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 07 Signing time: Fri 09 May 2025 10:55:04 +0000 Manifest this update: Fri 09 May 2025 10:55:03 +0000 Manifest next update: Fri 16 May 2025 10:55:03 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: DhtK/172ErRU2VG3t6INVus6+ZIvOWvPDgpb5fMgRiU=) 2: 0D3E842A2CC411F0BE055183C4F9AE02.roa (hash: 09bruj3TalJP6Y1h1557C9qlj//+rwqx2YkxXAQbspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 10:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: May 9 10:55:03 2025 GMT Not After : May 16 10:55:03 2025 GMT Subject: CN=681ddf08-0537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:be:ac:b1:5d:8e:a0:39:f0:69:b2:39:1a: d2:16:ec:43:13:96:f7:22:41:81:c9:b2:8a:7f:2c: 72:b1:15:b9:75:b2:ec:d7:c3:65:c8:16:66:e7:65: 17:f3:c5:30:33:28:b9:ed:63:58:24:ca:d0:0c:55: cf:7d:78:5b:07:82:17:23:5c:20:74:a7:85:e0:a4: 29:a4:f6:c4:1b:c7:d4:e8:41:41:e0:a2:6f:b5:f6: cc:3d:60:c5:5b:7f:85:db:87:12:5e:53:99:9e:fe: fa:3a:a8:ed:d4:cc:aa:f1:ae:e3:91:95:ca:d2:7b: c8:66:cc:d8:6e:ea:37:48:8a:d2:df:1f:41:23:43: 17:fa:76:71:a7:7f:d3:87:6e:6d:02:1b:fb:92:fc: 67:a1:c4:a0:89:f8:23:87:0d:46:fb:27:f4:8a:54: 7d:72:fd:81:b2:6e:59:2b:75:51:33:9c:6c:a9:54: ba:ac:58:b9:6e:7f:30:2d:80:88:ea:4f:e7:2a:cd: 2e:b8:ed:5f:05:dc:23:06:d5:5b:4c:90:5a:82:d1: 14:71:26:b9:b9:a0:d9:b5:fe:dd:51:ab:80:6b:d0: ad:24:66:5c:94:b2:55:8c:cd:57:40:a5:7d:57:02: dd:fc:73:f8:1c:88:9f:d2:4b:91:6a:86:81:6d:c3: b7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8F:CF:FE:22:A0:A8:D0:5B:2A:7A:12:89:1C:92:F9:7E:1A:AE:FB X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bc:62:08:8e:2b:dc:32:fc:38:c5:61:92:fc:3a:4b:df:93: e7:e9:b0:fd:e8:39:db:ea:61:ae:79:d4:9b:23:f2:e3:10:ec: 37:46:00:e0:91:c1:91:1e:6a:f4:28:e3:d2:34:bd:ab:79:15: 2e:2d:7d:8c:b8:63:bd:d6:5d:2d:af:af:a6:81:e0:ab:ea:47: da:1b:d0:8b:0e:ae:60:88:2e:3e:24:26:34:9e:1c:5c:74:3d: e9:62:b8:67:46:75:88:25:93:61:99:74:b8:db:0c:26:e1:e8: 6b:c8:51:44:3e:d2:1d:ba:78:40:57:50:1e:41:66:e8:41:8d: 7c:60:68:68:59:3b:1a:f7:e5:99:2f:ff:e3:ee:b7:c6:69:51: 75:46:d6:82:dd:e8:68:08:c8:f3:af:cd:2e:e3:0f:9b:f2:61: 2b:d9:cf:ea:ee:73:88:8d:0c:bc:39:88:2f:cd:84:ff:32:6f: ce:e2:af:ec:a9:bb:c0:e8:c3:1e:23:d9:b1:7e:ed:e4:81:d3: 3a:b0:ea:44:cb:51:c0:d2:74:3d:1f:65:7f:c7:2a:38:bc:2d: 95:1c:5a:c6:09:62:b6:0c:a2:12:29:d7:bf:e3:c9:49:6c:55: 45:80:89:7a:0e:6a:d9:67:ea:b1:6e:95:e4:93:a9:1c:97:60: 1c:10:f5:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ5QjExMC8GA1UEBRMoN0YwMzk3QzZBOTRFNTI1OTc2ODM0QkJGRDU4MDJGMTVC Nzk1RkI4RTAeFw0yNTA1MDkxMDU1MDNaFw0yNTA1MTYxMDU1MDNaMBgxFjAUBgNV BAMTDTY4MWRkZjA4LTA1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQFL6ssV2OoDnwabI5GtIW7EMTlvciQYHJsop/LHKxFbl1suzXw2XIFmbnZRfz xTAzKLntY1gkytAMVc99eFsHghcjXCB0p4XgpCmk9sQbx9ToQUHgom+19sw9YMVb f4XbhxJeU5me/vo6qO3UzKrxruORlcrSe8hmzNhu6jdIitLfH0EjQxf6dnGnf9OH bm0CG/uS/GehxKCJ+COHDUb7J/SKVH1y/YGyblkrdVEznGypVLqsWLlufzAtgIjq T+cqzS647V8F3CMG1VtMkFqC0RRxJrm5oNm1/t1Rq4Br0K0kZlyUslWMzVdApX1X At38c/gciJ/SS5FqhoFtw7fVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKI/P/iKg qNBbKnoSiRyS+X4arvswHwYDVR0jBBgwFoAUfwOXxqlOUll2g0u/1YAvFbeV+44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDlCL0IyQTU3N0MyMjc0 NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZndPWHhxbE9VbGwyZzB1XzFZQXZGYmVWLTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDlCL0IyQTU3N0MyMjc0NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxs MmcwdV8xWUF2RmJlVi00NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALW8YgiOK9wy/DjFYZL8Okvfk+fpsP3oOdvqYa551Jsj8uMQ7DdGAOCR wZEeavQo49I0vat5FS4tfYy4Y73WXS2vr6aB4KvqR9ob0IsOrmCILj4kJjSeHFx0 PeliuGdGdYglk2GZdLjbDCbh6GvIUUQ+0h26eEBXUB5BZuhBjXxgaGhZOxr35Zkv /+Put8ZpUXVG1oLd6GgIyPOvzS7jD5vyYSvZz+ruc4iNDLw5iC/NhP8yb87ir+yp u8Dowx4j2bF+7eSB0zqw6kTLUcDSdD0fZX/HKji8LZUcWsYJYrYMohIp17/jyUls VUWAiXoOatln6rFuleSTqRyXYBwQ9S4= -----END CERTIFICATE-----Generated at Sat May 10 16:43:27 2025 by rpki-client