$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: iMUD/jvtrMwg3KUYZOSjeN4iLYaazmjLweCp5lF2omA= Subject key identifier: AF:AF:B3:88:8E:00:66:52:80:64:AA:59:9D:9A:21:B8:1C:46:D1:CB Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1917 Signing time: Wed 14 May 2025 17:28:59 +0000 Manifest this update: Wed 14 May 2025 17:28:59 +0000 Manifest next update: Wed 21 May 2025 17:28:59 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Atj1w28oNRO8e3iixVsdx7+SVpmBmcWt4psa0ZaH31U=) 2: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=) 3: E62A9F32CA6611EFAA521732C4F9AE02.roa (hash: SRGrWvEKnqS2fW0dxExdAox7hHbXysmPC91QCe7MKXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: May 14 17:28:59 2025 GMT Not After : May 21 17:28:59 2025 GMT Subject: CN=6824d2db-444f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:ac:31:0d:49:af:0a:2e:2c:3d:d5:03:a8: 1e:2a:c6:52:1e:67:a0:6d:5f:46:5c:00:bf:92:5f: 6e:70:3f:29:38:98:26:af:ef:61:a1:f7:54:80:39: bb:c2:5a:b6:62:f3:e8:23:77:4b:44:ba:9d:a3:06: 52:a6:8a:5a:53:62:e4:47:db:74:1a:a5:bb:0c:e5: 8f:af:47:ee:05:8e:22:1d:a1:7f:16:9c:6d:b4:23: fa:2e:72:e8:f5:9e:5a:be:61:1c:e2:cb:ef:f7:97: 06:ba:01:27:dd:64:d3:d8:2c:8b:ad:97:94:10:83: b2:4f:91:6f:cc:56:db:63:18:29:4c:c4:e1:ba:3e: 2d:ae:0f:7f:2f:19:bb:bd:55:a4:42:03:fc:da:f9: 9a:6a:51:82:2c:7e:2d:aa:cf:ff:38:86:1b:6f:af: 24:b3:d0:94:7f:83:c2:09:b2:63:7a:1e:80:f4:b4: 04:69:9e:80:e3:2a:89:41:76:c7:d1:4a:c0:52:b4: 0c:b4:47:7f:72:43:5d:e2:a8:ab:c2:94:06:da:04: 18:78:c0:a6:93:9e:02:b1:21:a2:c9:cc:86:c2:12: 1d:11:94:38:dc:f7:90:c9:7a:f5:da:ba:2d:4b:d3: ea:94:fb:19:e3:5b:bf:3d:7e:3e:ef:f1:bd:9e:79: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AF:B3:88:8E:00:66:52:80:64:AA:59:9D:9A:21:B8:1C:46:D1:CB X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:da:6c:e3:fb:f2:70:2a:2b:ee:45:ae:7b:e5:08:87:a1:ad: e8:7d:ca:ce:db:e4:73:8b:ea:70:7d:80:5e:30:ef:10:0e:4e: 63:2e:91:ce:08:10:75:18:05:be:d2:28:ee:28:84:72:53:47: 3f:0a:b9:1f:9c:f5:68:43:aa:22:3a:89:3b:97:18:b4:89:c6: 2b:55:80:09:e1:21:1c:17:80:40:55:1a:06:03:26:28:02:9a: 3b:2d:86:e0:e0:d2:e0:0f:43:ce:e2:55:c2:72:0e:6e:5d:74: f0:91:83:46:ec:a0:f5:3f:c2:ee:10:23:d1:97:26:19:5e:5e: 87:09:ed:a0:b5:8b:09:b7:44:d9:97:6a:0c:35:d7:e9:f0:0b: f1:06:4d:b2:f1:61:a1:57:2e:f4:da:eb:67:b7:da:d5:af:68: 2f:5f:33:11:d5:8e:f8:a0:d4:80:47:36:e4:7a:31:4b:82:9c: 9f:ca:35:4e:87:26:ee:25:9d:e0:e5:9d:4c:7c:58:a5:c7:9d: 32:14:f6:1e:43:ee:e3:6f:aa:33:0f:f8:5c:5d:86:02:54:14: d5:50:41:55:a4:e5:4b:d8:51:f3:31:0e:42:a8:21:4f:5d:a0: 7b:d8:90:75:8a:b5:d2:08:2c:9a:40:ec:17:60:de:75:f7:c5: 52:8b:d1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUwNTE0MTcyODU5WhcNMjUwNTIxMTcyODU5WjAYMRYwFAYD VQQDEw02ODI0ZDJkYi00NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VKsMQ1JrwouLD3VA6geKsZSHmegbV9GXAC/kl9ucD8pOJgmr+9hofdUgDm7 wlq2YvPoI3dLRLqdowZSpopaU2LkR9t0GqW7DOWPr0fuBY4iHaF/FpxttCP6LnLo 9Z5avmEc4svv95cGugEn3WTT2CyLrZeUEIOyT5FvzFbbYxgpTMThuj4trg9/Lxm7 vVWkQgP82vmaalGCLH4tqs//OIYbb68ks9CUf4PCCbJjeh6A9LQEaZ6A4yqJQXbH 0UrAUrQMtEd/ckNd4qirwpQG2gQYeMCmk54CsSGiycyGwhIdEZQ43PeQyXr12rot S9PqlPsZ41u/PX4+7/G9nnkxMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+vs4iO AGZSgGSqWZ2aIbgcRtHLMB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC2mzj+/JwKivuRa575QiHoa3ofcrO2+Rzi+pwfYBeMO8QDk5jLpHO CBB1GAW+0ijuKIRyU0c/CrkfnPVoQ6oiOok7lxi0icYrVYAJ4SEcF4BAVRoGAyYo Apo7LYbg4NLgD0PO4lXCcg5uXXTwkYNG7KD1P8LuECPRlyYZXl6HCe2gtYsJt0TZ l2oMNdfp8AvxBk2y8WGhVy702utnt9rVr2gvXzMR1Y74oNSARzbkejFLgpyfyjVO hybuJZ3g5Z1MfFilx50yFPYeQ+7jb6ozD/hcXYYCVBTVUEFVpOVL2FHzMQ5CqCFP XaB72JB1irXSCCyaQOwXYN5198VSi9GE -----END CERTIFICATE-----Generated at Fri May 16 18:29:54 2025 by rpki-client