$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: Q1d2jHv9VF4+IX6Dx2OecPdeRQxnasM3RHqkFOglvrE= Subject key identifier: 30:74:12:46:26:59:82:00:D9:17:2A:F5:36:4B:E4:39:54:5E:83:BB Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01B5 Signing time: Sun 11 May 2025 02:08:26 +0000 Manifest this update: Sun 11 May 2025 02:08:26 +0000 Manifest next update: Sun 18 May 2025 02:08:26 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: Q2epsas60EClLYQ2QDDG4k6dTPzsnQ2liOuuY+/tC10=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: May 11 02:08:26 2025 GMT Not After : May 18 02:08:26 2025 GMT Subject: CN=6820069a-ceb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:f3:ac:8f:39:5a:97:a6:f6:01:71:57:53: da:7e:b3:59:94:46:1b:5a:33:6c:e5:7b:ad:b6:0a: a1:7b:ca:e4:47:a1:b7:7b:04:c5:de:0c:cb:d2:df: f1:fc:06:bb:97:45:e6:58:9b:68:f6:b2:cd:98:98: 3b:59:5b:fc:b2:f6:01:07:f2:89:61:a0:e5:e8:c9: d4:52:8d:41:bf:df:b4:ce:e6:fa:2f:e4:23:b0:7c: 29:c2:4e:0a:4e:59:72:f0:ea:47:10:2f:74:f3:67: d1:7f:12:b5:8c:44:82:3b:1a:ff:5a:16:14:9b:eb: d5:fc:8a:01:15:cf:73:1b:6d:11:bc:86:67:b7:50: bd:01:76:84:bb:ea:b9:9e:d9:a3:30:2a:45:0d:ec: c9:76:cb:e0:be:6e:05:8c:07:7f:b7:86:07:2a:51: ea:1c:bd:98:9e:b1:ac:5a:1b:1a:52:69:df:d8:d3: 6d:7f:d7:32:dd:60:87:83:c9:5e:54:22:2d:ff:5b: 74:de:a3:56:43:34:46:37:a9:4a:11:e1:a0:86:e6: 23:f5:2d:af:f9:b3:ec:cd:a9:ea:33:2c:f6:34:8a: 4e:eb:c2:ea:42:d2:91:5e:a3:83:15:0d:4b:9a:5e: 5f:d0:8d:ac:d7:80:34:a3:7c:49:12:77:52:fc:51: d3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:12:46:26:59:82:00:D9:17:2A:F5:36:4B:E4:39:54:5E:83:BB X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c3:77:e5:2c:2c:9c:1e:40:1b:7d:97:21:bb:d4:24:3b:8a: 6e:a0:3e:a6:0f:ef:07:10:d3:94:93:2e:37:76:7a:a3:64:24: 0c:15:8f:fd:45:96:c3:b2:9b:e1:d5:cd:28:e0:a1:5b:48:1f: 93:69:ff:9c:61:58:c7:cf:c9:e7:8f:9f:a5:c1:fc:13:ad:e1: 08:68:c5:85:4f:84:a9:22:31:59:fb:73:3d:18:51:d9:66:07: cb:f7:63:1f:da:b5:66:e5:d0:03:56:60:29:3d:65:67:06:5b: eb:23:49:73:57:64:f4:ae:ab:1c:d3:22:f3:1d:79:72:dd:d1: ce:7e:ae:63:68:22:88:fe:07:b2:c9:bc:cd:30:3f:9b:86:9b: 25:f2:e9:76:ae:8f:33:c1:13:07:69:0a:65:f7:cf:b0:c1:4b: c3:fb:6e:fa:51:1b:67:1e:d7:a1:4e:0b:d4:68:47:c6:d1:92: 43:ee:03:9f:6b:8e:d2:dd:49:53:69:59:9d:03:4c:80:0a:5d: ad:3b:bc:fc:d2:d4:17:a1:8b:03:66:11:32:a2:1a:0a:6b:4f: a6:da:f3:f5:8c:8c:fd:a4:fe:e6:d1:93:0e:22:c3:f7:68:c5: ad:06:26:35:bc:2d:12:02:39:81:f3:a0:0c:59:13:6f:02:d2: 66:69:a8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwNTExMDIwODI2WhcNMjUwNTE4MDIwODI2WjAYMRYwFAYD VQQDEw02ODIwMDY5YS1jZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl3zrI85Wpem9gFxV1PafrNZlEYbWjNs5Xuttgqhe8rkR6G3ewTF3gzL0t/x /Aa7l0XmWJto9rLNmJg7WVv8svYBB/KJYaDl6MnUUo1Bv9+0zub6L+QjsHwpwk4K Tlly8OpHEC9082fRfxK1jESCOxr/WhYUm+vV/IoBFc9zG20RvIZnt1C9AXaEu+q5 ntmjMCpFDezJdsvgvm4FjAd/t4YHKlHqHL2YnrGsWhsaUmnf2NNtf9cy3WCHg8le VCIt/1t03qNWQzRGN6lKEeGghuYj9S2v+bPszanqMyz2NIpO68LqQtKRXqODFQ1L ml5f0I2s14A0o3xJEndS/FHT2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB0EkYm WYIA2Rcq9TZL5DlUXoO7MB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlw3flLCycHkAbfZchu9QkO4puoD6mD+8HENOUky43dnqjZCQMFY/9 RZbDspvh1c0o4KFbSB+Taf+cYVjHz8nnj5+lwfwTreEIaMWFT4SpIjFZ+3M9GFHZ ZgfL92Mf2rVm5dADVmApPWVnBlvrI0lzV2T0rqsc0yLzHXly3dHOfq5jaCKI/gey ybzNMD+bhpsl8ul2ro8zwRMHaQpl98+wwUvD+276URtnHtehTgvUaEfG0ZJD7gOf a47S3UlTaVmdA0yACl2tO7z80tQXoYsDZhEyohoKa0+m2vP1jIz9pP7m0ZMOIsP3 aMWtBiY1vC0SAjmB86AMWRNvAtJmaajo -----END CERTIFICATE-----Generated at Mon May 12 22:47:24 2025 by rpki-client