$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: bJz6n6ooKvw5Di/BuAfqJY5OqYmE5MVNf3QtPFmLR2I= Subject key identifier: 72:00:C6:09:D8:98:B2:9F:9F:40:B9:56:99:F5:52:59:5E:84:D8:AE Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01B4 Signing time: Fri 09 May 2025 02:20:54 +0000 Manifest this update: Fri 09 May 2025 02:20:53 +0000 Manifest next update: Fri 16 May 2025 02:20:53 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: JUFC50U81rmsIuN8LMlsO4/cfghK6XmIJbCRkCUlsbQ=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: May 9 02:20:53 2025 GMT Not After : May 16 02:20:53 2025 GMT Subject: CN=681d6686-2bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:f0:45:7a:96:df:64:b0:00:fe:b1:af:75: 13:2b:45:eb:5f:a5:ce:79:4a:14:37:75:14:60:7b: 74:41:28:fe:f8:85:8c:bf:68:42:40:00:0f:c9:4a: c4:cc:7b:9a:93:12:55:64:f5:4f:da:e2:df:e5:62: 78:b9:7e:18:24:63:7d:76:b9:2d:6c:8d:03:be:4c: 8b:81:17:8f:d2:f4:f2:6e:bd:27:2a:db:4d:20:ee: 58:e6:6f:97:85:92:a6:3c:02:7d:f4:36:a6:60:c3: d2:76:52:76:64:94:c3:17:db:de:d8:2f:58:d9:c4: b3:2c:2b:99:ec:79:1e:6b:5f:76:36:75:9c:59:eb: 9a:ab:38:8a:41:45:57:11:1c:79:23:fc:d6:78:bd: 7f:c4:18:79:eb:a0:fc:1d:3b:43:f2:96:e8:a0:73: 4a:83:37:cd:9c:06:e9:13:f7:79:28:f6:07:34:e1: d5:2e:a2:80:29:09:01:8c:b7:9e:e6:fb:06:be:9b: fd:da:e9:81:24:99:7c:b0:70:90:be:c9:40:0e:23: 65:56:94:34:b7:c8:1e:f1:a8:13:b9:e9:4d:73:20: 71:fd:eb:c2:0c:c1:3b:25:66:f4:0d:6e:e4:f8:cc: a7:db:c4:45:e8:32:2b:4f:9f:d4:49:8a:03:4d:f6: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:C6:09:D8:98:B2:9F:9F:40:B9:56:99:F5:52:59:5E:84:D8:AE X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:95:d0:d2:47:a4:72:9f:2f:dc:11:e8:bf:7e:ee:16:79:6e: be:8f:7e:b1:78:47:fc:b7:de:27:82:e1:9b:3d:ef:c8:8a:74: e3:7d:02:1e:10:88:a9:b4:13:60:d9:4a:1a:1f:cd:f7:ad:27: d2:a0:2c:ef:85:9b:13:cc:b9:0d:e4:0a:c5:7c:b1:1b:fc:a8: 37:a5:d4:13:34:60:cc:84:38:97:a1:31:68:4e:76:51:c2:a4: d9:71:64:94:0c:1d:c4:7c:78:f8:17:1a:b4:8e:85:87:19:b5: ab:c6:c9:e5:27:3f:85:3b:00:92:95:45:fe:35:b6:de:51:72: 9d:7a:5d:73:91:7a:e5:71:2c:af:41:04:6d:97:90:2b:ee:88: 37:c7:79:ad:95:e2:78:b8:c3:69:c9:63:76:8a:4a:68:68:f8: 05:c2:4c:01:e1:5f:82:f6:d2:59:f0:78:0e:7a:8b:35:4c:43: e2:b2:5e:63:3b:a9:ff:d4:cc:65:35:cc:cd:30:8c:0a:48:a1: f5:a4:cf:29:14:9a:be:a3:9a:8e:ab:82:49:60:34:87:ff:c3: 3d:62:39:80:79:f2:20:87:bf:54:d0:1f:cb:be:2c:98:a2:f2: b4:15:b2:0b:05:4c:1f:9b:48:82:55:c5:8f:e1:4c:3a:3a:97: c4:0f:2b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwNTA5MDIyMDUzWhcNMjUwNTE2MDIyMDUzWjAYMRYwFAYD VQQDEw02ODFkNjY4Ni0yYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSvwRXqW32SwAP6xr3UTK0XrX6XOeUoUN3UUYHt0QSj++IWMv2hCQAAPyUrE zHuakxJVZPVP2uLf5WJ4uX4YJGN9drktbI0DvkyLgReP0vTybr0nKttNIO5Y5m+X hZKmPAJ99DamYMPSdlJ2ZJTDF9ve2C9Y2cSzLCuZ7Hkea192NnWcWeuaqziKQUVX ERx5I/zWeL1/xBh566D8HTtD8pbooHNKgzfNnAbpE/d5KPYHNOHVLqKAKQkBjLee 5vsGvpv92umBJJl8sHCQvslADiNlVpQ0t8ge8agTuelNcyBx/evCDME7JWb0DW7k +Myn28RF6DIrT5/USYoDTfZ28wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIAxgnY mLKfn0C5Vpn1UllehNiuMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPldDSR6Ryny/cEei/fu4WeW6+j36xeEf8t94nguGbPe/IinTjfQIe EIiptBNg2UoaH833rSfSoCzvhZsTzLkN5ArFfLEb/Kg3pdQTNGDMhDiXoTFoTnZR wqTZcWSUDB3EfHj4Fxq0joWHGbWrxsnlJz+FOwCSlUX+NbbeUXKdel1zkXrlcSyv QQRtl5Ar7og3x3mtleJ4uMNpyWN2ikpoaPgFwkwB4V+C9tJZ8HgOeos1TEPisl5j O6n/1MxlNczNMIwKSKH1pM8pFJq+o5qOq4JJYDSH/8M9YjmAefIgh79U0B/LviyY ovK0FbILBUwfm0iCVcWP4Uw6OpfEDysC -----END CERTIFICATE-----Generated at Sat May 10 05:01:35 2025 by rpki-client