$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: 6ZOtm3QVpNh/G6THAfrazfISSpEVYB+fL7uPByzH9nE= Subject key identifier: A8:94:9D:DD:E8:80:05:E1:CC:2E:65:88:D2:B9:EF:E0:53:FA:70:45 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C1C Signing time: Mon 12 May 2025 17:31:18 +0000 Manifest this update: Mon 12 May 2025 17:31:17 +0000 Manifest next update: Mon 19 May 2025 17:31:17 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: gfzRssxn0a3k+xC/J5ZrDw3hkL613gntkWOPiXeOfos=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: May 12 17:31:17 2025 GMT Not After : May 19 17:31:17 2025 GMT Subject: CN=68223066-e528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:78:aa:0f:c6:35:89:f5:6e:b2:bd:9b:ac: 7d:b2:01:2e:86:db:b3:49:2b:59:8c:db:b5:4c:29: 79:68:f6:63:b3:77:a7:56:24:a0:76:ff:bd:f1:9b: 8c:4a:d5:29:c1:2e:1e:bb:d0:84:76:31:f6:a6:38: 81:61:cd:03:25:65:de:85:32:39:40:7c:20:28:a4: 1c:d8:38:dd:ff:ae:12:01:0e:91:17:2a:85:f0:9f: 67:50:24:98:43:2d:06:c7:93:bd:8b:c0:c1:f0:99: c5:86:55:37:50:6b:0b:fc:c0:a1:00:40:39:ac:bb: 32:0d:e7:89:e0:52:ee:f7:a5:a4:4e:0e:2e:d7:29: f3:51:50:fa:d0:a6:98:5e:a8:08:f6:10:ac:28:16: 54:76:f0:bd:c5:38:12:f1:d2:68:63:cf:31:40:4b: 6a:4a:c6:8d:9e:61:ed:79:0b:c7:73:d2:20:f3:e1: 42:0e:65:3f:64:fb:fe:c0:4c:2b:16:26:85:8b:f2: d2:13:c4:54:ac:eb:9a:b9:07:b8:e1:92:88:90:a1: af:23:e3:61:0e:39:f8:eb:35:4f:b1:e6:44:ae:ed: b6:67:ba:8c:d1:f3:6d:da:2a:54:da:ec:88:b1:d5: 2a:bd:89:4a:ec:6a:b8:bc:6e:9b:cd:1c:de:c9:dd: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:9D:DD:E8:80:05:E1:CC:2E:65:88:D2:B9:EF:E0:53:FA:70:45 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:85:8e:38:a4:d1:59:87:06:06:28:a8:cc:0b:8f:4a:e2: cb:09:4b:29:56:af:35:4f:40:d3:bc:a9:10:a1:e1:73:f2:9f: c4:99:15:93:2f:01:f3:db:e3:d4:a9:b2:ae:2f:1b:65:b7:ee: 26:3b:9a:25:60:64:53:2a:aa:bd:00:36:a7:a9:77:34:96:9d: 1d:b5:ae:5c:9c:3e:11:93:c9:c6:4c:ee:54:b0:16:6f:f2:91: ca:9e:c7:71:ce:a9:ff:e4:79:59:2a:b7:00:8b:6b:3a:53:c7: 6d:86:55:ce:7c:cf:60:cb:d8:52:f9:7e:e1:cc:b4:4e:4a:4e: f5:bd:41:19:68:14:09:0e:a8:50:5c:a6:3d:2c:45:bb:98:cd: e5:c3:64:f0:90:73:66:75:75:11:fd:72:6f:0b:65:74:75:3a: 36:b3:07:a4:8b:15:c0:3b:ab:1a:11:6f:49:36:7f:a5:9e:51: 1a:d5:b2:08:6b:51:95:3b:67:96:b8:45:07:c9:96:76:d1:9c: 91:c3:bf:04:ef:67:0a:1e:58:63:1d:c0:95:a2:c6:24:db:61: 7b:60:5b:78:93:11:45:db:cc:cf:a6:3e:8d:84:a4:b1:cc:8e: 2c:92:2e:72:e0:10:99:f5:6a:04:11:66:14:4d:9b:c1:49:b5: d8:2c:eb:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNTEyMTczMTE3WhcNMjUwNTE5MTczMTE3WjAYMRYwFAYD VQQDEw02ODIyMzA2Ni1lNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0J4qg/GNYn1brK9m6x9sgEuhtuzSStZjNu1TCl5aPZjs3enViSgdv+98ZuM StUpwS4eu9CEdjH2pjiBYc0DJWXehTI5QHwgKKQc2Djd/64SAQ6RFyqF8J9nUCSY Qy0Gx5O9i8DB8JnFhlU3UGsL/MChAEA5rLsyDeeJ4FLu96WkTg4u1ynzUVD60KaY XqgI9hCsKBZUdvC9xTgS8dJoY88xQEtqSsaNnmHteQvHc9Ig8+FCDmU/ZPv+wEwr FiaFi/LSE8RUrOuauQe44ZKIkKGvI+NhDjn46zVPseZEru22Z7qM0fNt2ipU2uyI sdUqvYlK7Gq4vG6bzRzeyd1NCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiUnd3o gAXhzC5liNK57+BT+nBFMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEKIWOOKTRWYcGBiiozAuPSuLLCUspVq81T0DTvKkQoeFz8p/EmRWT LwHz2+PUqbKuLxtlt+4mO5olYGRTKqq9ADanqXc0lp0dta5cnD4Rk8nGTO5UsBZv 8pHKnsdxzqn/5HlZKrcAi2s6U8dthlXOfM9gy9hS+X7hzLROSk71vUEZaBQJDqhQ XKY9LEW7mM3lw2TwkHNmdXUR/XJvC2V0dTo2swekixXAO6saEW9JNn+lnlEa1bII a1GVO2eWuEUHyZZ20ZyRw78E72cKHlhjHcCVosYk22F7YFt4kxFF28zPpj6NhKSx zI4ski5y4BCZ9WoEEWYUTZvBSbXYLOtU -----END CERTIFICATE-----Generated at Wed May 14 04:54:41 2025 by rpki-client