$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: p+z+4z0SNJ555CugM3pzvftvnfVPwnOLs/lA2qHrWok= Subject key identifier: 70:93:7F:9F:62:5F:4C:59:0D:A1:F0:42:FF:0D:56:95:28:31:30:88 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 38A6 Signing time: Sat 10 May 2025 14:35:42 +0000 Manifest this update: Sat 10 May 2025 14:35:42 +0000 Manifest next update: Sat 17 May 2025 14:35:42 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: GW/5i2iReSZvD+aJtQ4k++aWxxSQ/rb/XfLEiYo2Zzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: May 10 14:35:42 2025 GMT Not After : May 17 14:35:42 2025 GMT Subject: CN=681f643e-93dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:17:81:cc:5d:4a:60:91:30:53:0b:43:29: da:52:d7:33:a5:ff:30:55:6f:4f:5b:58:e2:c8:17: f2:b1:10:b4:cc:b2:79:2e:47:fe:65:75:a2:a7:ab: 16:f0:64:20:bc:75:d6:88:8e:e7:40:ab:1a:a9:c5: d6:82:6c:f7:fc:b3:6a:be:87:2b:1a:f8:c2:4c:4c: ef:91:d1:af:17:59:18:a3:e5:c5:0c:d5:7c:0e:fb: 6e:44:38:c7:7c:fc:42:b8:54:f1:1e:7b:42:c0:b2: df:1b:f2:7b:8a:68:22:04:44:da:45:4e:ca:3d:5e: de:cf:cd:80:b3:60:84:77:bf:a4:95:30:b3:75:b6: 76:88:80:91:73:84:b6:ae:b3:cc:e4:fb:93:65:fa: b8:3b:d0:fa:1a:9d:86:ba:5e:56:ee:e3:fe:fd:e5: a2:ca:c8:93:cc:a5:94:55:45:4b:29:b7:00:aa:f8: ca:99:67:c3:03:7c:e4:e0:b6:04:e6:e3:68:8f:9d: a4:1d:34:10:94:72:48:d0:6b:da:91:b5:51:ab:f5: 6e:78:4c:6d:43:01:4d:b9:aa:b6:6f:0f:da:fd:8e: 39:6d:ff:de:90:44:ee:58:e5:fb:05:f4:ec:7b:0f: 0b:33:45:3a:81:2d:61:cc:e6:4e:b4:55:4a:8c:92: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:93:7F:9F:62:5F:4C:59:0D:A1:F0:42:FF:0D:56:95:28:31:30:88 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c7:20:fc:18:b3:de:34:9a:1f:e0:55:9c:32:0b:0a:53:ae: e8:e8:bd:73:6b:c8:02:ba:0c:e8:c4:98:96:10:15:9a:d1:c7: 38:53:c3:8e:46:c8:bd:4e:b0:83:8d:54:0e:55:e4:1d:01:d4: d8:6d:09:4d:7b:e2:16:74:4b:9d:59:00:79:c3:81:65:68:a2: cc:0d:b8:e4:4d:4b:ac:c8:8d:4c:79:c7:84:e6:f5:29:bd:30: 53:dd:8a:e9:d0:25:66:7a:50:a6:b4:19:ab:a4:ef:d0:fc:3b: 8d:c1:06:b0:c4:b8:53:2e:fa:30:b2:25:00:c5:aa:ce:56:27: dd:80:47:2a:c9:b3:30:c3:59:e0:59:48:29:dc:fa:5b:08:7c: da:1c:bf:d2:b9:43:30:ed:13:ab:13:fc:b9:1d:22:b9:df:19: b7:b2:5c:df:51:3c:e1:09:6b:75:b6:7e:fb:31:1b:72:3a:e2: b1:3d:f6:33:c6:27:c2:81:eb:9e:3a:f6:f8:2d:c3:ea:dc:36: 72:41:eb:23:48:03:59:0b:44:07:a5:22:87:3e:3b:ef:fb:06: 91:a3:25:82:bb:61:dc:f0:90:2b:8d:e8:35:5a:d8:3a:2d:a7: 50:ce:75:c0:89:7b:39:99:d9:fa:b2:09:da:36:93:25:30:a7: 44:a1:15:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUwNTEwMTQzNTQyWhcNMjUwNTE3MTQzNTQyWjAYMRYwFAYD VQQDEw02ODFmNjQzZS05M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EsXgcxdSmCRMFMLQynaUtczpf8wVW9PW1jiyBfysRC0zLJ5Lkf+ZXWip6sW 8GQgvHXWiI7nQKsaqcXWgmz3/LNqvocrGvjCTEzvkdGvF1kYo+XFDNV8DvtuRDjH fPxCuFTxHntCwLLfG/J7imgiBETaRU7KPV7ez82As2CEd7+klTCzdbZ2iICRc4S2 rrPM5PuTZfq4O9D6Gp2Gul5W7uP+/eWiysiTzKWUVUVLKbcAqvjKmWfDA3zk4LYE 5uNoj52kHTQQlHJI0GvakbVRq/VueExtQwFNuaq2bw/a/Y45bf/ekETuWOX7BfTs ew8LM0U6gS1hzOZOtFVKjJL3vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCTf59i X0xZDaHwQv8NVpUoMTCIMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQxyD8GLPeNJof4FWcMgsKU67o6L1za8gCugzoxJiWEBWa0cc4U8OO Rsi9TrCDjVQOVeQdAdTYbQlNe+IWdEudWQB5w4FlaKLMDbjkTUusyI1MeceE5vUp vTBT3Yrp0CVmelCmtBmrpO/Q/DuNwQawxLhTLvowsiUAxarOVifdgEcqybMww1ng WUgp3PpbCHzaHL/SuUMw7ROrE/y5HSK53xm3slzfUTzhCWt1tn77MRtyOuKxPfYz xifCgeueOvb4LcPq3DZyQesjSANZC0QHpSKHPjvv+waRoyWCu2Hc8JArjeg1Wtg6 LadQznXAiXs5mdn6sgnaNpMlMKdEoRXT -----END CERTIFICATE-----Generated at Mon May 12 01:27:13 2025 by rpki-client