$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: SzFiB4wiA8uKu06rD5BTV3c5VLIjrtsa2uE7a8mC/Fs= Subject key identifier: 22:86:A2:CE:B5:E0:45:9B:D5:FD:3E:17:DA:71:99:42:8A:11:B7:56 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 86 Signing time: Sat 03 May 2025 05:54:32 +0000 Manifest this update: Sat 03 May 2025 05:54:32 +0000 Manifest next update: Sat 10 May 2025 05:54:32 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: kY7thzOIDzPS49Z7t7S5VBiAxiekYLsebuUmw0K3jGo=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: May 3 05:54:32 2025 GMT Not After : May 10 05:54:32 2025 GMT Subject: CN=6815af98-6b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:d1:2f:ac:5c:49:50:84:73:12:0f:0b:4f: da:cc:33:6c:47:51:dc:1c:ab:41:04:52:26:e3:41: 08:ff:ec:8c:39:fd:a5:34:ba:ac:5e:db:e1:08:3f: 26:f9:74:1c:55:d9:6a:32:aa:64:5e:75:2b:c1:c6: 22:f3:5c:53:9b:a0:f4:3e:96:4f:80:76:4e:a6:ab: a3:77:6e:68:ec:b0:13:0a:f5:20:1d:bc:0c:1e:e2: 49:4f:26:65:54:2e:01:9e:15:e3:dd:9f:dd:82:b4: e3:ae:91:72:bc:49:b6:f0:42:ad:1e:a0:c5:6b:cf: e4:27:3b:d6:9c:58:10:e0:00:a4:b2:11:79:4f:a5: 8a:ab:f1:0d:fd:e9:cb:59:fc:38:84:3f:16:67:7a: 6c:79:5a:d2:3b:bf:85:d3:79:96:f0:ea:55:46:34: c6:81:a7:d2:f3:1c:fc:f1:26:ee:c7:13:a3:7e:67: 31:1c:d7:fa:bb:ea:08:1f:a1:11:3b:8a:30:1d:c4: fb:8e:eb:23:2f:b7:f8:eb:54:c6:39:b3:a3:6a:5b: 48:25:cc:b9:2c:ad:78:67:65:50:3e:b9:bb:e2:92: 7b:88:98:8f:69:ca:2e:28:a4:07:4b:0e:65:d5:82: e1:e8:d4:34:1b:74:96:91:77:bd:fe:db:56:6e:3f: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:86:A2:CE:B5:E0:45:9B:D5:FD:3E:17:DA:71:99:42:8A:11:B7:56 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:76:24:db:35:f9:71:56:c3:0f:90:e1:87:64:66:84:71:dc: 06:29:cd:4a:c7:b9:8f:ec:a0:f0:33:03:d6:26:6a:10:78:28: b8:5a:16:44:19:55:5c:b6:ee:7b:c7:25:70:8f:df:f1:07:94: 07:ff:a2:07:3a:f3:32:09:89:e1:2c:97:c7:3d:b4:db:9b:f0: e9:94:9d:6b:2c:a5:a8:28:f5:c9:57:81:aa:16:3d:f8:4e:89: f6:35:4f:a0:cb:d7:4a:d7:34:f0:6c:a7:dd:29:74:1d:3e:30: c1:ac:4f:6a:66:57:3b:9f:91:18:69:67:51:74:8b:a5:9a:6e: b7:71:63:e0:cc:af:06:74:f0:44:aa:4a:2a:f2:5f:71:b5:9e: 01:b3:c0:d2:c9:c5:33:0c:26:b3:15:05:4d:da:be:97:43:38: 3a:58:99:ae:65:75:3a:bf:fd:8a:62:ae:c7:d3:39:53:de:9b: f5:d9:56:48:03:07:2d:b5:1f:c5:07:06:9a:83:48:4e:19:29: 3f:3b:d8:aa:19:00:e4:04:79:d7:5d:7e:42:b9:13:d0:02:83: f4:f4:1b:20:d0:44:4f:e7:3e:7d:16:d8:d9:80:7e:ae:a8:5a: 88:67:79:9c:aa:3d:74:b7:d4:a7:4f:29:37:63:fe:4a:c8:0f: 33:06:55:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwNTAzMDU1NDMyWhcNMjUwNTEwMDU1NDMyWjAYMRYwFAYD VQQDEw02ODE1YWY5OC02YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0HRL6xcSVCEcxIPC0/azDNsR1HcHKtBBFIm40EI/+yMOf2lNLqsXtvhCD8m +XQcVdlqMqpkXnUrwcYi81xTm6D0PpZPgHZOpqujd25o7LATCvUgHbwMHuJJTyZl VC4BnhXj3Z/dgrTjrpFyvEm28EKtHqDFa8/kJzvWnFgQ4ACkshF5T6WKq/EN/enL Wfw4hD8WZ3pseVrSO7+F03mW8OpVRjTGgafS8xz88SbuxxOjfmcxHNf6u+oIH6ER O4owHcT7jusjL7f461TGObOjaltIJcy5LK14Z2VQPrm74pJ7iJiPacouKKQHSw5l 1YLh6NQ0G3SWkXe9/ttWbj9VHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKGos61 4EWb1f0+F9pxmUKKEbdWMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXdiTbNflxVsMPkOGHZGaEcdwGKc1Kx7mP7KDwMwPWJmoQeCi4WhZE GVVctu57xyVwj9/xB5QH/6IHOvMyCYnhLJfHPbTbm/DplJ1rLKWoKPXJV4GqFj34 Ton2NU+gy9dK1zTwbKfdKXQdPjDBrE9qZlc7n5EYaWdRdIulmm63cWPgzK8GdPBE qkoq8l9xtZ4Bs8DSycUzDCazFQVN2r6XQzg6WJmuZXU6v/2KYq7H0zlT3pv12VZI AwcttR/FBwaag0hOGSk/O9iqGQDkBHnXXX5CuRPQAoP09Bsg0ERP5z59FtjZgH6u qFqIZ3mcqj10t9SnTyk3Y/5KyA8zBlUQ -----END CERTIFICATE-----Generated at Mon May 5 03:22:10 2025 by rpki-client