$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: f8/YfvPbgX5acx6A5git00g4hX4V9a/ZGz/JnzXysK4= Subject key identifier: E5:74:50:F6:1D:C6:FE:0A:4C:BF:82:4F:AB:23:A4:DB:94:D1:52:95 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F2A Signing time: Mon 12 May 2025 17:32:07 +0000 Manifest this update: Mon 12 May 2025 17:32:07 +0000 Manifest next update: Mon 19 May 2025 17:32:07 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: GZmSR9hX28fO9fduLmkj/Nq9ZT27cRw/AlKJwNZ8Cwg=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: May 12 17:32:07 2025 GMT Not After : May 19 17:32:07 2025 GMT Subject: CN=68223097-8f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:f5:dd:4c:4e:d5:09:4b:e2:47:ae:8c:b5: 4b:5a:13:29:67:ba:98:5a:2f:8d:70:38:35:5f:15: 3b:54:0b:37:93:13:cd:6c:34:16:30:9a:51:9e:3e: 25:eb:4f:a8:56:0f:7c:f8:3d:21:65:35:6a:a4:83: 84:30:e7:f5:2b:ed:93:b5:ee:f6:38:b2:a0:a9:94: 1c:2f:84:27:01:f2:8d:cd:de:0b:1e:97:b3:e3:55: 2c:37:28:f0:db:70:99:87:3b:f9:fa:3d:b2:be:24: 22:16:13:1c:93:8a:a6:bc:65:ef:f4:38:c7:c8:5f: 6e:03:29:a8:86:9a:a3:b6:1b:f4:0e:4b:57:b2:d4: c0:a0:72:82:95:bd:cb:38:a5:b4:11:13:41:2d:13: 29:50:d5:53:13:d4:13:51:35:41:1a:3e:78:b6:e4: 6f:b0:1b:8c:c5:55:1a:be:ea:84:ac:87:a9:a8:05: 7b:e2:a3:b4:4a:b3:e7:8c:94:99:76:f8:57:7b:5f: 5f:14:63:78:a9:eb:93:fb:35:25:20:53:62:25:a9: b8:7f:19:ac:d1:e1:c0:30:6b:ef:74:1e:19:07:b1: 7f:6b:32:d2:d6:e5:c2:e7:ce:04:67:a7:76:7d:c3: ef:24:a3:98:ab:ee:da:8b:50:0c:f5:d8:d3:55:6d: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:50:F6:1D:C6:FE:0A:4C:BF:82:4F:AB:23:A4:DB:94:D1:52:95 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:11:d8:87:76:a8:32:b9:56:69:04:db:24:79:70:fd:45:94: 6c:df:3b:41:17:8f:72:1e:48:b4:7c:cc:b3:f9:d3:77:eb:0a: 1e:05:5d:25:a8:30:43:7d:5e:87:77:4c:a9:cd:4e:06:e4:a2: 9c:59:bd:0d:eb:e6:3b:61:10:c6:59:8b:ef:6c:f0:0b:3b:bf: 36:49:36:05:38:0c:4f:4e:1b:ec:5a:dc:0b:81:25:59:c7:7c: c7:40:38:60:4d:c7:0b:61:fb:6d:64:8b:88:0b:f3:e3:cc:76: 24:09:88:af:21:c5:c1:97:e2:19:54:fb:f3:4f:ba:e4:79:7a: 33:68:c8:0e:35:5b:08:49:3b:a4:eb:ab:a6:f3:5e:28:a4:50: da:d5:36:fd:1d:32:07:18:ba:36:bc:bb:99:65:ee:b8:f0:73: 8a:7b:ee:d8:92:53:6f:f7:8f:df:d6:11:15:9d:77:da:4f:c3: a9:4f:3b:d3:ca:6d:04:6d:89:e0:dd:c6:ed:66:b0:1e:d1:5e: 0c:24:c0:8a:d8:84:ec:b9:21:31:a2:44:c6:86:6c:51:01:3c: 57:cc:d4:46:ae:0c:a2:6c:80:f3:d1:4b:21:8c:80:51:ca:09: c5:5f:f5:1d:35:ce:7b:b9:df:e7:69:0e:ee:5a:d3:e1:db:cc: f2:59:5d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNTEyMTczMjA3WhcNMjUwNTE5MTczMjA3WjAYMRYwFAYD VQQDEw02ODIyMzA5Ny04ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhn13UxO1QlL4keujLVLWhMpZ7qYWi+NcDg1XxU7VAs3kxPNbDQWMJpRnj4l 60+oVg98+D0hZTVqpIOEMOf1K+2Tte72OLKgqZQcL4QnAfKNzd4LHpez41UsNyjw 23CZhzv5+j2yviQiFhMck4qmvGXv9DjHyF9uAymohpqjthv0DktXstTAoHKClb3L OKW0ERNBLRMpUNVTE9QTUTVBGj54tuRvsBuMxVUavuqErIepqAV74qO0SrPnjJSZ dvhXe19fFGN4qeuT+zUlIFNiJam4fxms0eHAMGvvdB4ZB7F/azLS1uXC584EZ6d2 fcPvJKOYq+7ai1AM9djTVW3pdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV0UPYd xv4KTL+CT6sjpNuU0VKVMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQEdiHdqgyuVZpBNskeXD9RZRs3ztBF49yHki0fMyz+dN36woeBV0l qDBDfV6Hd0ypzU4G5KKcWb0N6+Y7YRDGWYvvbPALO782STYFOAxPThvsWtwLgSVZ x3zHQDhgTccLYfttZIuIC/PjzHYkCYivIcXBl+IZVPvzT7rkeXozaMgONVsISTuk 66um814opFDa1Tb9HTIHGLo2vLuZZe648HOKe+7YklNv94/f1hEVnXfaT8OpTzvT ym0EbYng3cbtZrAe0V4MJMCK2ITsuSExokTGhmxRATxXzNRGrgyibIDz0UshjIBR ygnFX/UdNc57ud/naQ7uWtPh28zyWV23 -----END CERTIFICATE-----Generated at Tue May 13 13:32:21 2025 by rpki-client