$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: mmI4OhhYdsmwdv5oiKweIs1oBUsaG7/ON/rx0u2umO8= Subject key identifier: 75:A0:37:11:22:1D:42:07:2E:2F:EA:DC:99:B3:31:AD:27:8C:DA:77 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BB9 Signing time: Sun 04 May 2025 18:44:08 +0000 Manifest this update: Sun 04 May 2025 18:44:08 +0000 Manifest next update: Sun 11 May 2025 18:44:08 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: iPrlSgd9NrGYEofdnG3xEAASepP+msNkj3e8DoZP2yM=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: May 4 18:44:08 2025 GMT Not After : May 11 18:44:08 2025 GMT Subject: CN=6817b578-a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:11:78:9d:de:b5:44:99:08:7c:e7:d1:33: 28:ee:2a:00:af:05:b6:40:c0:66:1d:bf:49:16:bb: b6:0d:69:3a:43:97:27:78:1f:69:c2:73:97:88:18: ff:33:45:97:d2:ef:ca:89:40:0b:85:48:18:e7:96: 2f:ec:c9:34:84:3e:f7:cc:95:ce:58:49:6d:4e:2e: d6:b6:94:8c:ea:bb:06:6f:4d:08:cd:89:12:ae:26: 70:d3:8c:4e:cb:9d:ba:1b:5c:80:10:b8:7f:39:e5: 00:d7:c7:bb:95:ed:51:0f:69:ad:f2:d3:33:51:48: 2f:e4:8c:6e:8b:e9:2c:5b:30:22:07:d7:a2:31:c0: a5:a6:b6:bb:97:66:f9:fa:25:9f:31:d9:81:47:a8: f9:f2:d8:9d:b2:e9:a0:c3:4c:8a:6b:5b:a7:46:82: 29:fd:72:68:41:5c:89:fb:46:25:a1:f7:cb:98:02: 3a:a0:47:4e:4b:18:93:a7:85:4a:12:6f:5c:1f:b8: d2:54:e0:b1:1e:53:84:b8:e1:90:c7:9a:17:96:ef: 8f:8e:73:85:bd:17:05:f2:e9:f5:09:48:0d:64:f4: 7f:b8:c9:9b:b6:c5:61:e9:6f:3c:c0:6b:a4:76:88: c9:28:52:b6:e2:ac:80:55:ab:ab:38:e5:a8:5f:d0: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A0:37:11:22:1D:42:07:2E:2F:EA:DC:99:B3:31:AD:27:8C:DA:77 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:14:2e:ba:19:85:7e:88:00:95:47:99:1a:c8:72:23:e1:50: c6:ac:96:9b:ef:19:ba:1f:2e:7e:f9:a6:0e:fa:42:cd:aa:ff: 41:f3:56:e4:07:98:23:a4:d4:97:47:de:10:f2:4d:f3:0a:c1: 39:4a:f9:7c:e4:62:6f:a9:54:12:05:80:6b:f6:8e:a3:dd:b8: 75:a8:72:f3:b0:3c:8f:0f:04:d4:74:9c:b6:23:a2:65:ab:7e: b4:62:66:81:86:e4:1e:84:74:24:56:7f:f5:7e:e5:f8:9c:0d: f0:9b:3d:6e:ed:71:7a:66:eb:65:66:56:2f:20:38:3b:ca:98: 87:d5:f1:b5:a6:67:60:1c:94:99:f5:b4:a7:c5:4d:a1:57:22: a1:4d:08:e0:8b:c9:04:24:cf:0d:bf:18:35:67:9b:98:20:70: d7:6c:99:9d:15:52:bc:6f:aa:05:ab:16:48:72:67:7f:c2:dc: eb:a5:93:fb:7b:cf:29:e2:b1:81:69:38:c8:6d:3e:60:9b:dd: 26:a5:25:b1:aa:76:f3:0b:0a:d5:e6:99:78:35:5c:28:da:90: 10:74:20:f0:83:07:9b:c4:ac:50:86:f0:a6:8a:d6:e9:e5:20: 35:3f:cb:a9:be:20:9a:6d:41:74:b5:76:42:8f:07:72:27:a4: 4f:33:60:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwNTA0MTg0NDA4WhcNMjUwNTExMTg0NDA4WjAYMRYwFAYD VQQDEw02ODE3YjU3OC1hN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxegReJ3etUSZCHzn0TMo7ioArwW2QMBmHb9JFru2DWk6Q5cneB9pwnOXiBj/ M0WX0u/KiUALhUgY55Yv7Mk0hD73zJXOWEltTi7WtpSM6rsGb00IzYkSriZw04xO y526G1yAELh/OeUA18e7le1RD2mt8tMzUUgv5Ixui+ksWzAiB9eiMcClpra7l2b5 +iWfMdmBR6j58tidsumgw0yKa1unRoIp/XJoQVyJ+0YloffLmAI6oEdOSxiTp4VK Em9cH7jSVOCxHlOEuOGQx5oXlu+PjnOFvRcF8un1CUgNZPR/uMmbtsVh6W88wGuk dojJKFK24qyAVaurOOWoX9DugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWgNxEi HUIHLi/q3JmzMa0njNp3MB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/FC66GYV+iACVR5kayHIj4VDGrJab7xm6Hy5++aYO+kLNqv9B81bk B5gjpNSXR94Q8k3zCsE5Svl85GJvqVQSBYBr9o6j3bh1qHLzsDyPDwTUdJy2I6Jl q360YmaBhuQehHQkVn/1fuX4nA3wmz1u7XF6ZutlZlYvIDg7ypiH1fG1pmdgHJSZ 9bSnxU2hVyKhTQjgi8kEJM8Nvxg1Z5uYIHDXbJmdFVK8b6oFqxZIcmd/wtzrpZP7 e88p4rGBaTjIbT5gm90mpSWxqnbzCwrV5pl4NVwo2pAQdCDwgwebxKxQhvCmitbp 5SA1P8upviCabUF0tXZCjwdyJ6RPM2Cj -----END CERTIFICATE-----Generated at Mon May 5 02:57:15 2025 by rpki-client