$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: Apc6MF726CauCDbEesWKCz6+4t63ZDFBQ6p2jiMwonY= Subject key identifier: 03:45:47:F0:B8:D3:22:73:6B:6E:D0:6C:66:1F:FB:B1:7D:FB:3B:8F Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 351B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 34CC Signing time: Mon 12 May 2025 14:25:34 +0000 Manifest this update: Mon 12 May 2025 14:25:33 +0000 Manifest next update: Mon 19 May 2025 14:25:33 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: Tyh7MOjGHRHtDEU5Z4mKNUq2bOHAq+HJbdMMS0lGo7E=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13595 (0x351b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: May 12 14:25:33 2025 GMT Not After : May 19 14:25:33 2025 GMT Subject: CN=682204de-17ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:5d:6c:32:99:9f:dc:14:52:4f:2f:71:75: 7d:ab:31:c9:aa:1c:fe:f3:b0:32:2b:29:29:dd:4e: d5:d6:77:78:e6:7f:48:4b:0c:14:73:a7:ec:c3:49: ad:ae:8b:5d:b0:17:42:4f:2f:46:77:4a:d5:63:08: e0:7d:8c:81:7e:f8:32:0a:a4:41:a1:5a:92:22:df: 3e:01:60:e7:88:9c:45:fc:b3:b5:d8:4e:ce:7f:fb: f6:3b:59:82:f3:b1:41:a9:ae:89:0d:77:74:a7:f1: cf:1b:46:e9:f8:92:9c:88:b8:09:7a:cf:33:12:f9: d3:69:e2:f7:d2:c5:f1:ad:35:05:dc:7e:9e:da:fa: 1e:89:9e:ea:21:8b:7c:b5:3b:f3:df:3f:ee:a8:48: e6:c8:f3:41:86:96:00:15:ef:95:bf:b5:0e:08:fa: 33:0a:db:d7:2e:91:4f:00:e8:29:ee:0b:a3:07:90: d7:f8:41:ed:58:e1:d0:b9:c9:58:43:6b:14:ad:fb: 5e:d6:54:68:3c:b6:ad:1d:63:b5:c8:36:2a:fa:cf: d1:39:95:1a:7b:59:8e:5b:69:00:4c:d4:29:30:8b: e4:f7:e0:ab:20:f8:7b:ca:ef:7e:4e:b9:26:d7:c2: 62:1d:25:04:e0:08:5d:31:26:e5:0c:08:7b:bb:bb: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:45:47:F0:B8:D3:22:73:6B:6E:D0:6C:66:1F:FB:B1:7D:FB:3B:8F X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:14:b4:09:2b:77:54:bc:71:68:fc:67:98:9d:df:ba:5c:43: 53:93:f4:14:a4:11:55:48:19:ae:5c:6d:9f:75:c8:2c:2c:55: 04:be:c4:c2:31:84:80:43:c3:3d:42:b4:e5:8f:16:3e:ca:f0: cd:10:3e:08:c6:fd:7d:04:aa:84:ed:96:36:7f:28:10:18:93: 48:6e:55:b1:9e:ae:fc:0f:61:2d:df:ec:84:fd:76:78:f0:bd: 4b:0d:df:2f:46:1f:76:cf:1c:47:e8:10:76:ea:a1:fb:63:f6: ad:d7:1a:e2:e1:84:f4:a5:69:51:ab:27:66:fb:d3:d4:27:aa: 62:bd:16:cc:80:2e:7b:a7:94:44:f7:ba:d8:31:2c:02:91:f7: 62:f0:56:bd:f1:80:4e:2b:cc:e6:89:8b:62:f7:71:23:60:0a: 9c:8b:5c:22:1e:52:41:bb:06:fc:29:70:cd:3f:77:3a:c2:6d: c5:77:c8:3b:b3:9f:4b:8f:6d:3a:a1:6e:29:60:d6:d7:ae:2b: ce:14:38:be:e6:bc:ed:49:ee:86:39:4f:60:34:0a:ab:c7:fb: 37:2b:8c:29:2a:4e:f9:4a:12:11:57:20:11:84:13:34:bb:9a: 07:88:51:8c:1c:b2:d2:53:8f:33:09:1f:3d:98:2a:54:6d:2a: da:4d:8e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwNTEyMTQyNTMzWhcNMjUwNTE5MTQyNTMzWjAYMRYwFAYD VQQDEw02ODIyMDRkZS0xN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nhdbDKZn9wUUk8vcXV9qzHJqhz+87AyKykp3U7V1nd45n9ISwwUc6fsw0mt rotdsBdCTy9Gd0rVYwjgfYyBfvgyCqRBoVqSIt8+AWDniJxF/LO12E7Of/v2O1mC 87FBqa6JDXd0p/HPG0bp+JKciLgJes8zEvnTaeL30sXxrTUF3H6e2voeiZ7qIYt8 tTvz3z/uqEjmyPNBhpYAFe+Vv7UOCPozCtvXLpFPAOgp7gujB5DX+EHtWOHQuclY Q2sUrfte1lRoPLatHWO1yDYq+s/ROZUae1mOW2kATNQpMIvk9+CrIPh7yu9+Trkm 18JiHSUE4AhdMSblDAh7u7sdyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANFR/C4 0yJza27QbGYf+7F9+zuPMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUFLQJK3dUvHFo/GeYnd+6XENTk/QUpBFVSBmuXG2fdcgsLFUEvsTC MYSAQ8M9QrTljxY+yvDNED4Ixv19BKqE7ZY2fygQGJNIblWxnq78D2Et3+yE/XZ4 8L1LDd8vRh92zxxH6BB26qH7Y/at1xri4YT0pWlRqydm+9PUJ6pivRbMgC57p5RE 97rYMSwCkfdi8Fa98YBOK8zmiYti93EjYAqci1wiHlJBuwb8KXDNP3c6wm3Fd8g7 s59Lj206oW4pYNbXrivOFDi+5rztSe6GOU9gNAqrx/s3K4wpKk75ShIRVyARhBM0 u5oHiFGMHLLSU48zCR89mCpUbSraTY56 -----END CERTIFICATE-----Generated at Tue May 13 01:53:12 2025 by rpki-client