$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: 9vTMrkMT4D6hcfXeWm+u0YeeSN00vWUYuj29kqUvYx8= Subject key identifier: BB:D8:A0:11:05:37:3A:48:42:F0:D3:72:53:45:7E:FC:23:2E:03:76 Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 0670 Signing time: Mon 12 May 2025 22:07:37 +0000 Manifest this update: Mon 12 May 2025 22:07:36 +0000 Manifest next update: Mon 19 May 2025 22:07:36 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: WwGOidQOLfyx7eVHFCmImyYv3tjaLrGkcd2DIiW4tJg=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: CJrC42fEHsl4a4F29xS9BQgj5clgqDLXG0TYmKNYKAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4, serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: May 12 22:07:36 2025 GMT Not After : May 19 22:07:36 2025 GMT Subject: CN=68227128-fada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:bb:20:e4:6e:0e:35:42:c2:f8:37:7b:7c: c2:23:80:6a:36:f5:51:70:4a:e0:86:6f:b6:5c:bd: 33:76:fd:10:f9:2e:7e:a2:18:b8:dd:80:8f:d2:3b: a2:48:62:5c:20:48:c6:50:23:94:32:00:b2:de:e8: aa:a4:f1:ea:99:e0:4d:cc:99:5e:a1:ed:68:cc:f4: 8c:5a:40:ad:27:58:ba:b3:1d:ed:c7:f6:6b:88:6a: 96:2b:80:96:49:42:a2:af:18:72:e7:42:85:e1:b4: e7:8f:88:54:37:aa:70:bd:fd:d8:42:85:fd:a6:81: 78:e0:ee:9d:ae:ed:aa:ca:37:13:98:bf:fe:28:54: 72:24:30:0e:4d:4d:e8:6a:7a:43:ec:75:11:95:1d: e8:f5:f6:61:f5:88:38:cc:18:ed:61:94:91:12:58: d3:21:f6:0a:a0:7c:a6:93:d7:9d:67:00:8a:94:e8: cf:60:ef:50:e0:48:2a:ed:74:66:37:04:37:dd:a8: ab:e0:b9:f9:9e:66:bd:a4:5e:1b:8d:e0:8b:ca:a8: f4:cf:c5:25:b7:a9:53:91:1e:6a:1d:5d:53:a0:24: 42:49:05:f0:95:1c:62:ac:c8:f6:ef:f0:1b:93:58: 00:c0:3c:bb:dc:ae:23:e9:3d:76:18:5b:bc:bb:06: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:A0:11:05:37:3A:48:42:F0:D3:72:53:45:7E:FC:23:2E:03:76 X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7a:7a:af:2c:83:f1:db:ef:04:5b:a5:32:6f:ca:1b:33:46: 81:07:de:e1:81:ef:74:3b:8c:9f:07:23:18:6a:fe:d9:7e:7e: 52:72:24:25:a5:8d:93:8e:5e:8a:eb:8c:c6:9c:f1:94:d2:a0: 8e:98:06:6c:e1:87:3d:1e:83:63:f0:fb:57:ad:5c:cb:9b:ea: 9e:e5:e2:af:96:a2:14:48:dc:fb:37:ac:30:67:a7:41:6f:82: 83:7f:14:28:3d:60:fc:36:ea:d0:d9:29:f2:08:d5:c3:fa:90: 9f:6d:f1:f7:fc:79:9c:7f:88:f9:c7:7a:5c:0a:c6:7c:97:2a: 5b:d3:59:b0:c3:17:eb:d3:e3:28:e7:e6:19:12:fb:da:81:e3: 1d:f3:8a:04:7a:84:a1:b2:12:c7:a7:77:a2:d8:f4:11:b0:fa: bb:04:66:2d:52:6e:8d:6c:1f:dc:46:96:cb:cc:1a:47:f6:82: 53:ab:49:b7:c0:71:50:af:84:51:62:f9:f7:c1:1d:96:46:4f: af:ad:86:4f:34:b8:7f:ee:d7:b4:35:d0:76:b2:3d:40:f2:01: 94:0d:e2:d8:02:d7:2c:0d:05:66:f5:95:09:77:32:83:a2:f9: e8:ab:b2:d2:36:03:20:8e:eb:51:6e:ee:e8:3f:a2:1b:63:6a: ad:0d:f6:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjUwNTEyMjIwNzM2WhcNMjUwNTE5MjIwNzM2WjAYMRYwFAYD VQQDEw02ODIyNzEyOC1mYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZG7IORuDjVCwvg3e3zCI4BqNvVRcErghm+2XL0zdv0Q+S5+ohi43YCP0jui SGJcIEjGUCOUMgCy3uiqpPHqmeBNzJleoe1ozPSMWkCtJ1i6sx3tx/ZriGqWK4CW SUKirxhy50KF4bTnj4hUN6pwvf3YQoX9poF44O6dru2qyjcTmL/+KFRyJDAOTU3o anpD7HURlR3o9fZh9Yg4zBjtYZSREljTIfYKoHymk9edZwCKlOjPYO9Q4Egq7XRm NwQ33air4Ln5nma9pF4bjeCLyqj0z8Ult6lTkR5qHV1ToCRCSQXwlRxirMj27/Ab k1gAwDy73K4j6T12GFu8uwaC4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvYoBEF NzpIQvDTclNFfvwjLgN2MB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3enqvLIPx2+8EW6Uyb8obM0aBB97hge90O4yfByMYav7Zfn5SciQl pY2Tjl6K64zGnPGU0qCOmAZs4Yc9HoNj8PtXrVzLm+qe5eKvlqIUSNz7N6wwZ6dB b4KDfxQoPWD8NurQ2SnyCNXD+pCfbfH3/Hmcf4j5x3pcCsZ8lypb01mwwxfr0+Mo 5+YZEvvageMd84oEeoShshLHp3ei2PQRsPq7BGYtUm6NbB/cRpbLzBpH9oJTq0m3 wHFQr4RRYvn3wR2WRk+vrYZPNLh/7te0NdB2sj1A8gGUDeLYAtcsDQVm9ZUJdzKD ovnoq7LSNgMgjutRbu7oP6IbY2qtDfZ6 -----END CERTIFICATE-----Generated at Tue May 13 18:33:32 2025 by rpki-client