$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: 3HndMSu4UD+jtPVunqlP52bLQ/UBhKg8nPkufSSIhJ4= Subject key identifier: 35:D0:23:E7:35:3A:52:84:EE:58:BC:39:AD:F2:FE:A1:40:92:81:32 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 0141 Signing time: Sat 17 May 2025 03:55:35 +0000 Manifest this update: Sat 17 May 2025 03:55:34 +0000 Manifest next update: Sat 24 May 2025 03:55:34 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: QffwosppQWktra5Wvf23sA7ukU2fOCr9isI6Z/rl0jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: May 17 03:55:34 2025 GMT Not After : May 24 03:55:34 2025 GMT Subject: CN=682808b7-ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:79:41:5a:70:57:f6:9d:db:b8:7c:40:f0: ef:92:b4:8a:cc:fe:f4:0d:bd:91:ec:c8:d1:07:6c: b6:8b:26:da:99:dd:ba:46:fd:c8:c2:61:1e:c8:85: 50:bd:7b:1a:d1:d5:bc:bc:43:f1:cd:79:79:2b:dc: 38:0e:2a:8e:58:81:0a:6d:71:fe:bf:4c:87:42:1f: d5:8e:28:98:26:33:3e:64:75:fe:f2:27:f5:b0:11: b5:67:0a:d3:41:56:f8:70:b7:c7:fb:16:b0:85:3b: 14:60:2d:fd:cf:c5:48:a3:01:b1:d1:8c:32:c8:aa: 7f:ed:37:10:72:be:ac:19:07:69:b2:a4:e3:54:f6: 2b:3c:34:aa:50:c5:34:71:98:e3:f7:f2:4a:e5:ed: f4:3c:c8:6b:6a:f6:bd:4f:2b:34:9e:d8:2b:ce:6c: 36:82:c8:5b:b1:63:35:13:48:e8:fd:80:6a:ae:d2: 75:8c:41:7e:f8:d6:16:0c:06:bf:4d:40:43:bd:02: 7f:00:30:63:ef:94:b4:da:eb:f5:a2:86:90:53:1e: ae:57:4b:39:04:75:84:bc:ad:4d:2a:bd:5d:e4:5b: 82:8d:ba:67:f4:68:cc:12:dd:5c:33:42:73:dc:d0: f4:99:90:ec:9b:9b:41:7c:5e:3d:4f:dd:c2:c2:7f: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:23:E7:35:3A:52:84:EE:58:BC:39:AD:F2:FE:A1:40:92:81:32 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:54:1b:62:2f:91:e2:d1:ac:34:7a:41:2b:8f:0c:56:5b: 58:0f:d7:dd:98:bf:d3:12:2f:9c:ef:a1:bb:f6:5b:9e:f6:19: 97:90:3b:af:cd:15:cf:8a:71:65:56:c5:88:d7:84:cb:91:f7: 05:aa:58:45:ec:c3:f1:6a:4a:24:23:94:1a:79:e2:1b:78:2b: 1e:f6:a9:4c:42:a7:c8:a6:35:73:b1:b0:90:65:77:b0:74:bd: 95:44:29:f3:e7:38:8c:78:b1:04:ea:57:84:e3:cb:47:6c:01: 6b:bd:65:3b:27:8d:87:99:d4:71:6f:04:51:61:74:d5:00:ac: 1e:88:f4:64:9e:c7:36:2e:d7:4c:84:f6:03:67:38:ad:1f:fe: 51:1c:bd:ec:ee:f2:51:da:a4:65:e3:c2:0f:77:06:5b:d4:47: f3:a1:e8:5f:c5:a5:be:02:b2:3a:d3:b7:6d:13:71:4b:eb:75: d2:85:44:fb:f2:3b:93:18:6d:f4:9c:13:43:f4:6a:02:84:4b: e2:29:2e:f4:e7:17:02:40:f8:a3:2f:09:75:49:7d:1e:43:56: 78:0f:a1:f2:d1:02:4c:ed:f6:f8:c9:62:b4:1c:06:03:26:b0: ef:62:31:c3:28:7a:3d:e0:54:8f:cc:1c:62:b4:d3:5e:71:b3: 04:8f:36:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUwNTE3MDM1NTM0WhcNMjUwNTI0MDM1NTM0WjAYMRYwFAYD VQQDEw02ODI4MDhiNy1hZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxZ5QVpwV/ad27h8QPDvkrSKzP70Db2R7MjRB2y2iybamd26Rv3IwmEeyIVQ vXsa0dW8vEPxzXl5K9w4DiqOWIEKbXH+v0yHQh/VjiiYJjM+ZHX+8if1sBG1ZwrT QVb4cLfH+xawhTsUYC39z8VIowGx0YwyyKp/7TcQcr6sGQdpsqTjVPYrPDSqUMU0 cZjj9/JK5e30PMhrava9Tys0ntgrzmw2gshbsWM1E0jo/YBqrtJ1jEF++NYWDAa/ TUBDvQJ/ADBj75S02uv1ooaQUx6uV0s5BHWEvK1NKr1d5FuCjbpn9GjMEt1cM0Jz 3ND0mZDsm5tBfF49T93Cwn9krwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXQI+c1 OlKE7li8Oa3y/qFAkoEyMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBefFQbYi+R4tGsNHpBK48MVltYD9fdmL/TEi+c76G79lue9hmXkDuv zRXPinFlVsWI14TLkfcFqlhF7MPxakokI5QaeeIbeCse9qlMQqfIpjVzsbCQZXew dL2VRCnz5ziMeLEE6leE48tHbAFrvWU7J42HmdRxbwRRYXTVAKweiPRknsc2LtdM hPYDZzitH/5RHL3s7vJR2qRl48IPdwZb1EfzoehfxaW+ArI607dtE3FL63XShUT7 8juTGG30nBND9GoChEviKS705xcCQPijLwl1SX0eQ1Z4D6Hy0QJM7fb4yWK0HAYD JrDvYjHDKHo94FSPzBxitNNecbMEjzak -----END CERTIFICATE-----Generated at Sat May 17 06:47:03 2025 by rpki-client