$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: wL+wjN65kFC+sIRSFUYBgl0G2q7GqN28nLUQjsXgcm8= Subject key identifier: 98:65:6C:0C:5E:B9:D0:D7:C1:74:79:3E:B2:69:8A:F7:19:B3:58:9B Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: F6 Signing time: Sun 11 May 2025 04:06:28 +0000 Manifest this update: Sun 11 May 2025 04:06:28 +0000 Manifest next update: Sun 18 May 2025 04:06:28 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: 8FsQXY+FtQETCAJBd9V5RE07tSxNy9f0rDFqvQl/5Tc=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: May 11 04:06:28 2025 GMT Not After : May 18 04:06:28 2025 GMT Subject: CN=68202244-044c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b5:3c:c3:8d:11:11:01:0a:d0:f6:d7:1c:87: c7:22:ff:83:ad:fc:b2:17:35:aa:65:d4:4f:8e:63: 0b:78:3e:01:55:7e:44:3d:72:5c:b5:e8:6b:b8:1f: 19:71:d4:ea:fb:27:1e:cf:9d:1f:27:0f:d3:08:e3: 39:86:d0:c9:49:9a:75:96:4f:1f:bd:3e:9c:1b:27: 5e:c6:f4:8c:f2:ac:6f:ca:7a:7b:97:38:17:52:bc: e9:65:88:76:45:28:b3:ea:67:4c:83:61:d7:27:d7: dd:ff:2a:de:9e:ca:94:8d:cb:04:80:5f:17:f5:d1: ff:8e:3e:08:e1:58:c9:8c:f2:90:e0:83:a6:d1:62: 63:a6:d9:d8:8f:52:3b:9b:78:84:4a:ef:bf:b7:ad: ec:82:82:f1:89:a5:3e:a5:c6:09:01:8a:0c:ca:e2: 71:d2:71:3b:cb:20:cd:38:d3:8c:2c:9f:a5:6c:51: 8a:fa:bb:6e:d2:8a:eb:d5:28:db:a9:63:b6:e7:fd: 5e:d1:13:68:ab:bd:b6:04:45:62:b2:33:50:fe:81: 07:d9:21:82:0d:be:09:cc:7a:fd:06:ef:8b:ab:81: e9:d1:1e:23:11:91:0f:a6:a9:14:50:2a:53:17:ca: 8a:d0:f0:90:01:31:0f:db:cb:5c:8c:00:4c:f4:9e: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:65:6C:0C:5E:B9:D0:D7:C1:74:79:3E:B2:69:8A:F7:19:B3:58:9B X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:1a:b2:51:94:4d:40:a4:df:1d:e2:4a:54:31:4a:71:ca:05: ba:a7:eb:b7:06:44:c9:31:42:41:6f:e7:20:11:02:bd:de:c3: 43:45:e3:fd:98:48:3a:53:68:85:93:e3:77:8d:58:fb:38:b7: 60:d1:d8:89:40:c2:13:62:61:df:6d:37:6c:c0:5e:7e:36:69: 45:e9:ea:3d:66:97:27:1b:f0:18:e5:c5:70:75:44:f0:68:12: 19:2c:08:d2:2a:bd:87:43:ef:8f:2d:f5:f9:d7:21:78:72:cc: 66:5b:8d:fd:5e:db:4d:f7:8b:bd:0c:fa:45:33:06:53:bb:27: f1:6b:3c:20:cc:22:69:8a:fe:85:da:9b:b3:65:69:a6:9f:ec: f6:df:bb:1a:a2:93:f5:1a:fa:9d:0c:e8:e8:f6:7f:58:6a:b4: f1:60:94:c4:fd:b7:fd:f9:da:1f:54:35:b1:ac:94:82:0b:8e: 36:b1:70:81:97:07:87:84:7a:f5:c3:78:92:fb:bb:e3:19:7d: e1:de:fe:9d:ce:22:7c:43:c7:9a:a7:42:99:5d:53:b5:a6:f2: 68:c6:5d:54:4a:6a:b8:fd:14:78:41:88:b9:c5:90:a6:32:68: 74:9e:6d:be:d1:7d:66:cd:71:7f:f9:ed:40:f3:97:1d:cf:2c: d8:29:e8:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUwNTExMDQwNjI4WhcNMjUwNTE4MDQwNjI4WjAYMRYwFAYD VQQDEw02ODIwMjI0NC0wNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7U8w40REQEK0PbXHIfHIv+DrfyyFzWqZdRPjmMLeD4BVX5EPXJctehruB8Z cdTq+ycez50fJw/TCOM5htDJSZp1lk8fvT6cGydexvSM8qxvynp7lzgXUrzpZYh2 RSiz6mdMg2HXJ9fd/yrensqUjcsEgF8X9dH/jj4I4VjJjPKQ4IOm0WJjptnYj1I7 m3iESu+/t63sgoLxiaU+pcYJAYoMyuJx0nE7yyDNONOMLJ+lbFGK+rtu0orr1Sjb qWO25/1e0RNoq722BEVisjNQ/oEH2SGCDb4JzHr9Bu+Lq4Hp0R4jEZEPpqkUUCpT F8qK0PCQATEP28tcjABM9J7WGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhlbAxe udDXwXR5PrJpivcZs1ibMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8GrJRlE1ApN8d4kpUMUpxygW6p+u3BkTJMUJBb+cgEQK93sNDReP9 mEg6U2iFk+N3jVj7OLdg0diJQMITYmHfbTdswF5+NmlF6eo9ZpcnG/AY5cVwdUTw aBIZLAjSKr2HQ++PLfX51yF4csxmW439XttN94u9DPpFMwZTuyfxazwgzCJpiv6F 2puzZWmmn+z237saopP1GvqdDOjo9n9YarTxYJTE/bf9+dofVDWxrJSCC442sXCB lweHhHr1w3iS+7vjGX3h3v6dziJ8Q8eap0KZXVO1pvJoxl1USmq4/RR4QYi5xZCm Mmh0nm2+0X1mzXF/+e1A85cdzyzYKeg+ -----END CERTIFICATE-----Generated at Mon May 12 15:39:20 2025 by rpki-client