$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: 2gpcrihwsvbH88LU8OZxZ2XIuxCdrR7L1ftiCUnT7Ac= Subject key identifier: 8D:FC:AD:7A:2E:5C:98:00:5A:13:E1:33:16:CB:57:77:6F:D1:55:88 Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 05D7 Signing time: Sat 10 May 2025 22:37:40 +0000 Manifest this update: Sat 10 May 2025 22:37:40 +0000 Manifest next update: Sat 17 May 2025 22:37:40 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: VSsEtkU+YqNF8g/qafsW2KLwaatwMJaCwnsFvDH/3H0=) 2: 62A74238F77711ECB847DF59C4F9AE02.roa (hash: 6NdpyGpyyLoYdKu6Nb7ZVSWNHzCDx7e5IsoyvgK7mq8=) 3: 1EB401948C6511EF881C050EC4F9AE02.roa (hash: 7C+LAYCC66gUOAU+HwT+tfX4EWextGNzWYx6BmysCZA=) 4: F4E815CC699611EE81E3E33CC4F9AE02.roa (hash: plWOD3DLVqnkQtuQl4y0tsk6pTGSRdQR9cDYcE3hB9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: May 10 22:37:40 2025 GMT Not After : May 17 22:37:40 2025 GMT Subject: CN=681fd534-75e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:71:ce:20:2c:81:92:00:2c:40:15:ae:e9: 15:57:33:4d:ce:7d:dd:af:f7:f2:c4:3a:6d:1f:27: 2a:77:d8:ba:24:fb:65:10:c6:85:dd:41:8f:6d:d6: 0b:2f:e8:dc:5a:c0:ab:6c:4d:ec:94:59:94:fa:d5: ff:1c:8d:50:59:a8:a4:e6:a7:57:bd:13:bd:0d:72: c6:5c:af:bf:32:a6:7f:60:18:b3:68:29:7e:38:7a: d0:83:38:a1:14:45:c8:68:7d:36:28:94:a3:31:0e: dc:2a:41:c9:92:dd:94:2d:ea:6e:2d:43:9a:aa:50: aa:50:b9:6b:7b:3e:d7:19:a5:3e:b5:d7:99:d1:d3: ff:cc:90:6a:5a:3f:91:0e:64:50:27:99:e2:5a:cd: 4f:46:2b:33:41:59:61:f2:4a:cd:ad:49:74:69:89: 6a:26:dc:cc:2f:e7:a8:2d:69:2f:5b:c9:90:31:f7: 33:fc:60:95:63:70:7d:0a:24:11:eb:89:a1:4b:7a: 53:ef:4d:f4:19:45:df:11:c8:d2:be:f6:e5:1d:f4: e3:be:4e:ed:5e:a3:f2:91:ae:41:c1:d1:ce:25:69: 04:41:41:ad:72:ca:91:a9:d6:67:f6:bd:cc:13:18: 07:b6:2e:63:79:50:83:74:38:40:6d:89:76:55:8f: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:AD:7A:2E:5C:98:00:5A:13:E1:33:16:CB:57:77:6F:D1:55:88 X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:f2:c1:d8:f6:bf:33:87:15:e4:1a:80:45:df:09:f1:a4: c5:c6:ea:fe:15:b5:2f:da:54:1a:87:ec:42:e3:72:35:7e:f7: 23:77:a3:2f:9b:4b:8c:6b:8a:31:39:51:53:ad:4f:73:43:a9: 51:65:87:20:bf:11:f7:d8:56:64:ab:e1:71:28:7d:44:ae:9b: 13:7f:a1:21:fc:cd:c6:ad:bc:e5:a0:e7:e0:e8:21:60:97:ca: 26:a4:25:74:e0:b1:05:78:bb:ce:ec:2d:c8:cc:20:d0:cf:18: c2:99:03:d5:9b:7e:a6:bf:30:dc:6e:d6:5e:6f:11:06:05:67: c2:db:57:50:1c:40:81:1c:12:30:e9:73:94:72:ea:36:b3:e7: 1f:d7:ce:8e:eb:c3:da:2c:10:86:e7:b9:3e:17:1c:47:7f:62: 3c:97:0d:d8:0c:73:c3:f4:3a:a1:ff:01:29:ce:a8:a7:a1:4c: 03:49:ae:ca:c9:4c:52:35:bf:7e:50:c4:78:5b:75:92:c6:55: 52:ac:0a:45:21:74:05:f0:fc:f8:a4:dd:f8:93:5f:46:38:02: 0e:08:ea:53:e1:c6:a8:86:38:ba:94:b0:ff:61:a3:e9:ce:6e: 6b:30:38:c4:dd:91:1e:08:6c:f6:87:c2:73:45:22:ed:7d:c8: dd:46:b8:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjUwNTEwMjIzNzQwWhcNMjUwNTE3MjIzNzQwWjAYMRYwFAYD VQQDEw02ODFmZDUzNC03NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18VxziAsgZIALEAVrukVVzNNzn3dr/fyxDptHycqd9i6JPtlEMaF3UGPbdYL L+jcWsCrbE3slFmU+tX/HI1QWaik5qdXvRO9DXLGXK+/MqZ/YBizaCl+OHrQgzih FEXIaH02KJSjMQ7cKkHJkt2ULepuLUOaqlCqULlrez7XGaU+tdeZ0dP/zJBqWj+R DmRQJ5niWs1PRiszQVlh8krNrUl0aYlqJtzML+eoLWkvW8mQMfcz/GCVY3B9CiQR 64mhS3pT7030GUXfEcjSvvblHfTjvk7tXqPyka5BwdHOJWkEQUGtcsqRqdZn9r3M ExgHti5jeVCDdDhAbYl2VY8trwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI38rXou XJgAWhPhMxbLV3dv0VWIMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9PLB2Pa/M4cV5BqARd8J8aTFxur+FbUv2lQah+xC43I1fvcjd6Mv m0uMa4oxOVFTrU9zQ6lRZYcgvxH32FZkq+FxKH1ErpsTf6Eh/M3GrbzloOfg6CFg l8ompCV04LEFeLvO7C3IzCDQzxjCmQPVm36mvzDcbtZebxEGBWfC21dQHECBHBIw 6XOUcuo2s+cf186O68PaLBCG57k+FxxHf2I8lw3YDHPD9Dqh/wEpzqinoUwDSa7K yUxSNb9+UMR4W3WSxlVSrApFIXQF8Pz4pN34k19GOAIOCOpT4caohji6lLD/YaPp zm5rMDjE3ZEeCGz2h8JzRSLtfcjdRrhd -----END CERTIFICATE-----Generated at Mon May 12 19:34:05 2025 by rpki-client