$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: ujPXUgq+VLgsXd51Uo6beS1QnSsJHxrQxmrtGYfjhdo= Subject key identifier: 5D:4E:09:CA:2F:42:3C:B5:FC:B0:14:E3:CD:37:D0:34:AB:C9:99:D4 Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: AB Signing time: Tue 13 May 2025 05:15:59 +0000 Manifest this update: Tue 13 May 2025 05:15:58 +0000 Manifest next update: Tue 20 May 2025 05:15:58 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 2zT0logV9onc0meWEPEkjjNLMoyPRmVKTjcNtIcsGNA=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: May 13 05:15:58 2025 GMT Not After : May 20 05:15:58 2025 GMT Subject: CN=6822d58e-0cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:03:95:af:30:68:30:ee:8a:6b:ad:58:43: 30:ce:fc:d1:bb:88:46:d5:2b:6c:9c:2d:79:59:19: dc:74:a7:cf:9f:e2:d9:b0:01:6d:2d:9b:2f:1b:7b: f4:7c:45:63:42:55:b3:d0:a5:9f:81:bf:86:6d:74: 37:bf:38:20:22:0d:fb:93:57:14:f2:83:74:a1:a7: bb:87:74:98:c3:43:5a:03:72:b4:14:db:95:2f:cf: 02:c6:59:c0:e4:64:6f:bb:33:d3:84:06:69:72:85: 22:85:d5:c4:ae:ee:db:31:92:6d:44:72:43:84:b5: 53:05:25:83:2d:ae:a5:6f:4f:70:40:c9:58:f5:f2: e2:66:e5:0f:b6:36:4d:f6:22:5f:5e:01:72:e5:66: 17:b5:f4:bd:03:86:a0:ae:2e:d1:6b:db:e4:47:b1: a4:19:d0:a3:3d:bb:17:6c:9e:35:12:d8:5a:60:c8: 19:12:04:4f:3a:92:85:97:7a:5e:c9:87:23:05:4a: 37:ce:6d:61:ef:51:25:2b:51:e1:7f:73:94:b0:84: b2:f9:96:79:82:69:96:5d:32:05:43:ba:20:cc:a4: 78:63:1d:9a:fe:cb:32:86:43:a6:e5:83:97:60:c6: 4f:72:5e:b3:57:8b:24:2e:20:e5:da:bd:59:1c:de: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:09:CA:2F:42:3C:B5:FC:B0:14:E3:CD:37:D0:34:AB:C9:99:D4 X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:28:bc:12:14:5b:34:0a:a7:98:50:16:a2:7b:c9:84:cb: 2e:5a:d5:9d:fa:be:dd:60:48:00:43:ef:7e:6e:70:68:f8:95: fe:e1:63:66:1d:b7:a6:19:e9:10:ed:e0:9f:98:5e:43:e8:6c: d2:6d:de:62:06:79:49:b6:42:34:03:c1:68:69:75:2a:f4:d4: 69:1e:dd:52:31:42:29:95:72:39:f2:a6:7a:19:74:23:f3:14: 0d:e2:5d:1e:d0:3d:f9:15:8b:35:99:44:51:d2:7c:23:74:26: 09:bd:29:ec:13:cf:e7:d6:87:07:56:dd:74:fb:fb:49:23:2f: b2:88:84:b4:7d:c0:76:f3:5f:e5:af:9f:53:73:3d:b0:70:f2: fa:5a:11:65:3b:11:5e:1f:5d:4d:ba:d2:4d:a0:65:05:7f:e9: 7f:58:7a:38:37:b1:5f:40:e9:25:72:79:c9:66:c4:f5:64:f3: 93:5c:9d:3d:8b:f2:ff:50:b1:d7:ef:b8:48:41:9f:c5:97:23: d4:d3:8e:14:5e:a2:2e:62:36:a1:fd:b1:83:d6:c3:fe:8c:09: 0d:26:49:43:99:be:a1:39:06:9c:7b:2a:0d:59:ad:30:68:46: e7:8b:81:ae:12:bb:d4:90:f7:76:e3:4f:a7:d4:df:11:ca:65: 43:5e:43:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUwNTEzMDUxNTU4WhcNMjUwNTIwMDUxNTU4WjAYMRYwFAYD VQQDEw02ODIyZDU4ZS0wY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P0Dla8waDDuimutWEMwzvzRu4hG1StsnC15WRncdKfPn+LZsAFtLZsvG3v0 fEVjQlWz0KWfgb+GbXQ3vzggIg37k1cU8oN0oae7h3SYw0NaA3K0FNuVL88CxlnA 5GRvuzPThAZpcoUihdXEru7bMZJtRHJDhLVTBSWDLa6lb09wQMlY9fLiZuUPtjZN 9iJfXgFy5WYXtfS9A4agri7Ra9vkR7GkGdCjPbsXbJ41EthaYMgZEgRPOpKFl3pe yYcjBUo3zm1h71ElK1Hhf3OUsISy+ZZ5gmmWXTIFQ7ogzKR4Yx2a/ssyhkOm5YOX YMZPcl6zV4skLiDl2r1ZHN4x+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1OCcov Qjy1/LAU48030DSryZnUMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTSi8EhRbNAqnmFAWonvJhMsuWtWd+r7dYEgAQ+9+bnBo+JX+4WNm HbemGekQ7eCfmF5D6GzSbd5iBnlJtkI0A8FoaXUq9NRpHt1SMUIplXI58qZ6GXQj 8xQN4l0e0D35FYs1mURR0nwjdCYJvSnsE8/n1ocHVt10+/tJIy+yiIS0fcB281/l r59Tcz2wcPL6WhFlOxFeH11NutJNoGUFf+l/WHo4N7FfQOklcnnJZsT1ZPOTXJ09 i/L/ULHX77hIQZ/FlyPU044UXqIuYjah/bGD1sP+jAkNJklDmb6hOQaceyoNWa0w aEbni4GuErvUkPd240+n1N8RymVDXkO0 -----END CERTIFICATE-----Generated at Thu May 15 00:02:14 2025 by rpki-client