$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json) Hash identifier: FMmuAOI+ZdIEpGnbeqz5WyKPx7/JgdZT4bpyKeWHEiA= Subject key identifier: 4A:C0:0B:7E:B2:36:23:E6:89:9A:46:99:EB:B8:6C:78:F8:9D:B2:4B Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft Manifest number: 089C Signing time: Mon 12 May 2025 21:37:34 +0000 Manifest this update: Mon 12 May 2025 21:37:33 +0000 Manifest next update: Mon 19 May 2025 21:37:33 +0000 Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: 9rzBU3fZZpP3Y37jbKmbvuMzG83Hjv8diZyCCkINoxU=) 2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Validity Not Before: May 12 21:37:33 2025 GMT Not After : May 19 21:37:33 2025 GMT Subject: CN=68226a1e-6d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:12:57:44:42:72:30:51:0e:1b:b2:84:6d: 99:1b:90:46:b6:2d:27:bc:97:15:96:b8:ab:a1:1a: 1f:c7:57:58:0a:b5:d9:fc:74:fe:51:d2:29:92:fb: 08:1f:be:c5:1e:1b:12:d0:99:e6:f2:ee:0b:05:94: bf:2c:3b:39:02:78:3c:20:0e:93:71:5c:d2:60:6c: a2:81:b6:8f:ac:95:80:08:a4:02:bb:79:a4:5c:65: 5e:b8:98:d8:3e:87:35:82:0f:54:fa:50:fb:45:fd: 3e:9d:89:f2:96:59:fd:c1:66:55:d8:8a:8c:5b:3d: 26:17:0f:5b:be:c1:20:45:ad:ea:e1:c5:47:98:82: 98:33:bf:32:1a:25:26:1f:bf:3b:8c:cd:6b:9e:32: 3e:91:c8:bd:92:3d:02:cf:bf:1b:dc:0e:45:2c:98: 68:41:04:24:5c:a5:93:d8:71:b1:15:d8:3b:a7:bd: f5:11:bc:76:f0:1e:52:db:86:ff:e9:8e:8a:1f:36: 84:76:c8:b5:85:c8:6c:6f:1c:07:e9:7c:54:f9:ee: bf:8a:74:29:35:7e:85:b8:ac:7c:e9:9e:f3:1b:fb: ae:83:26:3e:b4:81:a6:5a:5f:63:54:11:a7:78:5d: d6:7c:c0:a9:48:e7:14:67:82:09:dc:04:0e:86:72: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:0B:7E:B2:36:23:E6:89:9A:46:99:EB:B8:6C:78:F8:9D:B2:4B X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:85:e8:54:06:9e:e1:40:34:d0:fc:6e:e2:f1:a1:9a:e8:a4: fa:25:cd:4b:63:62:6d:3b:b8:f9:9a:34:77:ac:6a:e7:be:a8: 84:0d:e9:be:12:dd:76:d8:2d:c6:8e:42:c5:cc:29:a8:62:ab: 54:3c:c5:05:cb:ad:25:d1:c0:83:0c:89:71:bd:65:64:53:54: 41:ac:94:e7:92:7b:d7:24:c5:d6:a6:02:da:b7:e8:5a:2a:bb: 7b:ac:60:87:22:5e:e5:c3:89:1b:5f:64:6f:70:ec:e6:12:55: 33:39:77:8c:83:da:69:20:56:6a:0a:7b:8e:0d:fe:f1:e9:c0: e4:72:31:cc:21:30:1a:8f:87:ea:7e:41:7f:27:fd:54:65:90: d3:13:57:87:b1:c5:ed:7c:cc:1f:44:03:6f:3a:9b:38:60:bd: 11:48:40:45:69:d4:58:af:c2:4d:96:44:a9:6a:b8:a3:de:59: a1:6e:61:42:fc:fe:ff:2f:be:74:0d:b3:cb:b1:90:bd:f6:94: ca:e2:af:c1:c8:b3:e8:5d:e5:29:16:65:7c:20:66:5e:7b:e1: 68:87:96:75:0e:8b:db:ea:7f:12:16:d3:de:f5:64:95:3f:aa: 19:86:e7:a7:fc:fd:f8:3b:d6:68:00:cd:e1:df:ef:eb:ab:5f: 9b:a6:ae:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjUwNTEyMjEzNzMzWhcNMjUwNTE5MjEzNzMzWjAYMRYwFAYD VQQDEw02ODIyNmExZS02ZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngYSV0RCcjBRDhuyhG2ZG5BGti0nvJcVlriroRofx1dYCrXZ/HT+UdIpkvsI H77FHhsS0Jnm8u4LBZS/LDs5Ang8IA6TcVzSYGyigbaPrJWACKQCu3mkXGVeuJjY Poc1gg9U+lD7Rf0+nYnylln9wWZV2IqMWz0mFw9bvsEgRa3q4cVHmIKYM78yGiUm H787jM1rnjI+kci9kj0Cz78b3A5FLJhoQQQkXKWT2HGxFdg7p731Ebx28B5S24b/ 6Y6KHzaEdsi1hchsbxwH6XxU+e6/inQpNX6FuKx86Z7zG/uugyY+tIGmWl9jVBGn eF3WfMCpSOcUZ4IJ3AQOhnKyFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErAC36y NiPmiZpGmeu4bHj4nbJLMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80 X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUhehUBp7hQDTQ/G7i8aGa6KT6Jc1LY2JtO7j5mjR3rGrnvqiEDem+ Et122C3GjkLFzCmoYqtUPMUFy60l0cCDDIlxvWVkU1RBrJTnknvXJMXWpgLat+ha Krt7rGCHIl7lw4kbX2RvcOzmElUzOXeMg9ppIFZqCnuODf7x6cDkcjHMITAaj4fq fkF/J/1UZZDTE1eHscXtfMwfRANvOps4YL0RSEBFadRYr8JNlkSparij3lmhbmFC /P7/L750DbPLsZC99pTK4q/ByLPoXeUpFmV8IGZee+Foh5Z1Dovb6n8SFtPe9WSV P6oZhuen/P34O9ZoAM3h3+/rq1+bpq4d -----END CERTIFICATE-----Generated at Tue May 13 14:14:00 2025 by rpki-client