$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft File: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json) Hash identifier: ZQhMqda/vpze90PXRLJyGy/BTlmUNxjxam1kYfCBSEI= Subject key identifier: E4:23:41:7E:E1:85:6E:FE:07:0D:50:AD:30:4E:7C:C2:2A:F0:E5:C0 Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA Certificate issuer: /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft Manifest number: 089A Signing time: Sat 10 May 2025 20:15:23 +0000 Manifest this update: Sat 10 May 2025 20:15:22 +0000 Manifest next update: Sat 17 May 2025 20:15:22 +0000 Files and hashes: 1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: umlD+JfccdJmMKTg3MMGuF5/gIHEnBlaS3myWhjoIXU=) 2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: vDSnr7GTN6AmKRXToXihl2BttDhcvVIF1CJ22BM3AS0=) 3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: 6D+05PkkEBLLvv2UgX08yRx5GMb9vhbOIwJ+Ku99Ia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Validity Not Before: May 10 20:15:22 2025 GMT Not After : May 17 20:15:22 2025 GMT Subject: CN=681fb3da-eba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:c3:8f:47:85:fc:9f:32:4b:7a:68:43:c5: da:49:2a:8a:95:81:22:99:24:1f:bb:86:d4:68:68: 09:63:1f:52:0b:3d:43:cd:0a:04:51:3d:62:04:ed: be:4d:c7:8b:b2:2d:62:0a:58:bc:13:4d:15:63:77: 30:29:79:48:07:fb:0c:98:96:e8:dd:37:ba:9f:48: bf:30:c9:ea:09:51:f4:3d:b7:4c:d0:38:2a:1f:f8: 7f:52:e9:5c:48:4d:51:3c:34:c1:51:e8:03:a0:e4: 13:4a:6b:68:89:31:d5:2d:ec:e6:ac:dd:ae:22:fc: f7:55:e9:99:01:28:f1:82:0d:4d:16:bf:9c:8d:68: 76:9f:e5:c5:51:61:0b:f5:b8:46:09:20:10:d9:0f: fb:50:c9:c0:82:9f:41:8e:8c:22:08:ac:b1:2a:fd: 85:f0:37:f2:4e:ee:2b:90:7c:d1:6a:92:76:f0:ac: 34:7d:d9:b5:6d:68:c8:93:21:a1:a9:8d:bb:9c:98: 8a:47:7d:5b:a7:37:45:64:1c:95:0d:27:f3:80:43: ad:24:4d:80:79:cb:c4:d7:d8:58:b4:a9:2d:4f:bb: 6b:0d:5b:55:99:32:b1:d3:c3:fa:07:5d:db:07:84: 0c:89:c7:e9:25:85:59:b2:21:4b:19:10:be:1d:94: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:23:41:7E:E1:85:6E:FE:07:0D:50:AD:30:4E:7C:C2:2A:F0:E5:C0 X509v3 Authority Key Identifier: keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:32:3c:f9:d5:13:e0:b6:c1:6f:4f:71:46:65:f2:2a:e2:9e: 69:d1:06:28:87:78:26:d5:03:2d:c7:00:50:c4:74:80:f6:2b: a3:45:d5:ce:13:96:52:f5:09:ff:8b:a7:a7:53:e4:35:74:a8: ed:37:d9:c5:fc:4d:7a:9c:bd:f7:b8:5d:84:f1:85:77:99:cb: da:31:06:ac:9b:6b:68:0d:e5:65:af:cb:a6:98:f4:76:08:97: 6c:b9:d1:83:ab:5e:7f:e0:ac:47:01:92:0f:04:fb:2d:c8:b2: 05:0b:3e:63:9b:54:df:c1:3e:e5:51:c6:56:59:eb:61:3c:18: 1d:81:9f:b5:b3:ee:18:a0:6c:2c:e0:cc:3a:c4:30:d8:99:fe: c7:44:c2:39:45:e7:ae:97:b0:fd:71:ef:a2:d9:fa:26:9c:57: 94:48:41:7f:b4:1e:3f:35:b4:00:bd:b1:f8:0e:0d:6f:f3:fa: 28:00:bc:c4:0b:b1:8b:4c:79:eb:0c:fe:e4:f3:f8:fe:92:7b: e6:5a:2b:9b:b9:3c:6c:08:2b:54:52:69:61:0e:a7:50:a7:66: 77:8d:82:e3:78:41:f4:25:82:f5:85:0c:9f:48:d7:57:4a:2b: 35:9a:17:db:14:f6:dc:50:61:cd:a2:48:06:ce:ae:a9:36:c5: da:8b:ee:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx NTlEMjc4QkEwHhcNMjUwNTEwMjAxNTIyWhcNMjUwNTE3MjAxNTIyWjAYMRYwFAYD VQQDEw02ODFmYjNkYS1lYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxrDj0eF/J8yS3poQ8XaSSqKlYEimSQfu4bUaGgJYx9SCz1DzQoEUT1iBO2+ TceLsi1iCli8E00VY3cwKXlIB/sMmJbo3Te6n0i/MMnqCVH0PbdM0DgqH/h/Uulc SE1RPDTBUegDoOQTSmtoiTHVLezmrN2uIvz3VemZASjxgg1NFr+cjWh2n+XFUWEL 9bhGCSAQ2Q/7UMnAgp9BjowiCKyxKv2F8DfyTu4rkHzRapJ28Kw0fdm1bWjIkyGh qY27nJiKR31bpzdFZByVDSfzgEOtJE2AecvE19hYtKktT7trDVtVmTKx08P6B13b B4QMicfpJYVZsiFLGRC+HZTLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQjQX7h hW7+Bw1QrTBOfMIq8OXAMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5 QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg3Ri9BQjU2OTk5OEI5QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3Vjhx WHU1WXJnMG1ObkVWblNlTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Mjz51RPgtsFvT3FGZfIq4p5p0QYoh3gm1QMtxwBQxHSA9iujRdXO E5ZS9Qn/i6enU+Q1dKjtN9nF/E16nL33uF2E8YV3mcvaMQasm2toDeVlr8ummPR2 CJdsudGDq15/4KxHAZIPBPstyLIFCz5jm1TfwT7lUcZWWethPBgdgZ+1s+4YoGws 4Mw6xDDYmf7HRMI5Reeul7D9ce+i2fomnFeUSEF/tB4/NbQAvbH4Dg1v8/ooALzE C7GLTHnrDP7k8/j+knvmWiubuTxsCCtUUmlhDqdQp2Z3jYLjeEH0JYL1hQyfSNdX Sis1mhfbFPbcUGHNokgGzq6pNsXai+5c -----END CERTIFICATE-----Generated at Mon May 12 18:57:32 2025 by rpki-client