$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: XawnodXhybviWMump+ajKBrqjH6rn1GpaZisPs/ZMvU= Subject key identifier: 70:F8:B7:2E:21:D4:65:F1:F7:6F:37:E7:2C:48:FD:9D:6E:F4:1F:67 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B34 Signing time: Sat 10 May 2025 18:56:19 +0000 Manifest this update: Sat 10 May 2025 18:56:18 +0000 Manifest next update: Sat 17 May 2025 18:56:18 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: npvL+SKtO1FfaKBixWtWt6f/wBxddRNFthf3solaEMo=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: May 10 18:56:18 2025 GMT Not After : May 17 18:56:18 2025 GMT Subject: CN=681fa152-2fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:df:8a:cd:30:6b:64:4a:c4:8e:04:01:ec: 95:41:92:ec:93:f5:98:65:98:c0:b2:f4:04:07:a2: c3:6b:3b:31:4f:c4:a5:a4:68:c8:16:97:44:b7:31: c2:e6:d2:d6:89:78:6f:05:5c:a7:15:e2:34:9e:02: 6e:d0:42:77:d5:7d:ff:7b:96:79:01:e8:3d:a0:b5: e9:f4:f8:b1:8b:04:18:43:a0:28:68:5c:1b:5d:c8: bb:4b:e0:da:99:aa:47:71:b0:9a:9c:95:3d:a1:24: e6:45:ef:ae:b7:a0:74:05:2a:f5:a4:57:b9:50:d6: 8e:5d:1e:a1:57:19:a1:b0:98:f6:cd:43:96:29:d2: dd:b2:fa:3d:3a:c1:2a:6f:9f:09:67:cd:2b:1d:a6: 01:52:d1:0a:7e:71:b1:37:38:40:03:aa:cc:3b:97: 30:d6:15:3c:5d:c1:74:b3:f5:ee:11:e4:38:1b:ce: fe:6b:24:88:21:8a:15:07:f3:5f:67:b2:1c:40:05: 83:e4:78:18:e2:f6:df:9f:8e:7b:90:71:7a:e9:85: c7:bb:79:0c:48:37:f3:06:27:ce:6a:4a:21:1c:0f: a0:3b:8d:72:de:e4:5e:f6:f5:9c:25:66:f2:25:bf: 7d:f8:e8:01:2c:3b:17:e3:b4:2e:5c:fe:35:c7:af: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F8:B7:2E:21:D4:65:F1:F7:6F:37:E7:2C:48:FD:9D:6E:F4:1F:67 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8a:b7:a5:e6:93:80:34:7e:9d:b0:c0:af:28:c9:2d:8c:d1: de:20:f5:94:bb:f9:1f:8d:6c:f6:2a:19:3f:a6:f9:bc:a3:89: 7c:78:2c:7e:d1:9f:d5:4e:d6:5b:e8:6d:74:dc:4c:f2:b6:75: c4:01:09:38:75:6b:88:3f:fc:e7:24:05:04:e8:da:05:36:2c: 44:90:d5:f1:8a:9f:cb:8d:e3:df:50:4c:67:34:57:e8:b8:81: 29:a2:1a:30:07:b1:5c:1b:b1:bb:1b:43:be:d3:bf:6a:e7:ca: 6b:28:43:41:97:7a:ed:45:20:71:3f:25:6e:60:66:5e:49:50: 92:1f:cf:a9:e0:e8:63:5d:19:f9:43:48:be:c7:dc:13:c9:85: f7:e8:53:99:92:9f:26:2d:d7:d0:b3:6e:6b:62:8f:a3:ad:18: 52:62:6b:f8:ce:eb:e4:1f:c2:fe:db:7e:d1:b8:ee:99:c8:db: 51:24:95:d0:ab:ef:c9:59:a4:8b:88:dc:0f:6c:44:44:6a:21: bc:fa:fc:a9:07:9a:8e:53:18:a1:f4:ec:ea:e0:9e:c9:af:70: f0:b8:43:ed:72:61:a2:eb:52:91:8c:73:83:fe:20:51:6e:98: fe:77:b6:f6:2f:65:ff:1c:75:4e:c5:d5:bf:b5:55:7b:12:43: ee:f0:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUwNTEwMTg1NjE4WhcNMjUwNTE3MTg1NjE4WjAYMRYwFAYD VQQDEw02ODFmYTE1Mi0yZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWzfis0wa2RKxI4EAeyVQZLsk/WYZZjAsvQEB6LDazsxT8SlpGjIFpdEtzHC 5tLWiXhvBVynFeI0ngJu0EJ31X3/e5Z5Aeg9oLXp9PixiwQYQ6AoaFwbXci7S+Da mapHcbCanJU9oSTmRe+ut6B0BSr1pFe5UNaOXR6hVxmhsJj2zUOWKdLdsvo9OsEq b58JZ80rHaYBUtEKfnGxNzhAA6rMO5cw1hU8XcF0s/XuEeQ4G87+aySIIYoVB/Nf Z7IcQAWD5HgY4vbfn457kHF66YXHu3kMSDfzBifOakohHA+gO41y3uRe9vWcJWby Jb99+OgBLDsX47QuXP41x6/YjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD4ty4h 1GXx92835yxI/Z1u9B9nMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNirel5pOANH6dsMCvKMktjNHeIPWUu/kfjWz2Khk/pvm8o4l8eCx+ 0Z/VTtZb6G103EzytnXEAQk4dWuIP/znJAUE6NoFNixEkNXxip/LjePfUExnNFfo uIEpohowB7FcG7G7G0O+079q58prKENBl3rtRSBxPyVuYGZeSVCSH8+p4OhjXRn5 Q0i+x9wTyYX36FOZkp8mLdfQs25rYo+jrRhSYmv4zuvkH8L+237RuO6ZyNtRJJXQ q+/JWaSLiNwPbEREaiG8+vypB5qOUxih9Ozq4J7Jr3DwuEPtcmGi61KRjHOD/iBR bpj+d7b2L2X/HHVOxdW/tVV7EkPu8IFI -----END CERTIFICATE-----Generated at Sun May 11 12:34:12 2025 by rpki-client