$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: az3MUosqZKCMO97h0X06L3mdu091jUP4uCFghTr9brM= Subject key identifier: 12:D8:D5:9D:FF:84:44:F5:C9:77:21:44:0E:DF:07:B7:71:D0:A4:D0 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: 99 Signing time: Sun 11 May 2025 05:06:49 +0000 Manifest this update: Sun 11 May 2025 05:06:48 +0000 Manifest next update: Sun 18 May 2025 05:06:48 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: psLulVHmXGQxZtHDT0cnc570Udiv8NqGCmdOj/QJQ8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: May 11 05:06:48 2025 GMT Not After : May 18 05:06:48 2025 GMT Subject: CN=68203069-9a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:26:ee:37:8c:d8:83:b4:1f:33:b9:7c:9c: d1:9b:fa:e7:72:4a:24:f8:13:3e:ec:37:3c:4f:3a: 3d:6a:81:0b:a3:b0:c8:3f:02:b9:83:fd:b5:65:87: 4d:46:a7:53:09:4a:b0:b4:8e:dd:5a:0b:5d:c1:4a: 26:0d:b7:67:ce:44:3b:7f:f7:63:b4:18:26:2d:29: 8f:63:2e:5d:45:fa:8f:65:53:e5:79:f9:b1:2c:c1: c1:2a:8d:a8:70:09:ee:d1:bf:59:95:f3:d5:bc:74: f2:78:e4:5d:24:9b:f3:f9:88:d1:c2:d7:25:12:c7: 74:09:7d:48:6e:01:ea:df:62:0a:b2:60:ca:e7:90: 3d:23:43:94:27:0c:b4:f6:0e:4c:9c:91:b7:dc:3c: 9b:02:95:8a:68:16:fe:28:87:f5:84:01:c1:c6:76: 40:92:fa:dc:c2:7e:26:95:43:cf:73:a3:1d:3a:e8: f5:d6:6b:80:2d:9c:65:2d:3c:92:5b:53:87:6b:4e: 74:c0:fc:c8:af:71:3e:4c:e5:1c:f1:07:34:6c:72: 97:7a:e6:b3:90:54:64:9a:7e:4a:4f:55:24:c8:6a: 84:5b:4b:9a:71:1a:0a:ee:25:96:37:e0:2a:fc:10: 6e:46:c6:f2:e1:a4:1b:7f:2b:fe:b6:ec:cc:4b:75: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:D5:9D:FF:84:44:F5:C9:77:21:44:0E:DF:07:B7:71:D0:A4:D0 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f9:6b:ae:a4:a6:94:c4:df:9f:91:bb:54:0e:bb:90:a4:4a: ee:0b:79:5d:99:f5:e0:71:b0:c1:ac:94:b8:84:cc:e4:16:21: 3d:8a:eb:a0:e7:75:02:45:56:03:15:10:96:35:b6:21:aa:8a: d8:f7:c4:e3:00:78:36:0e:b4:6c:6a:b9:2b:ca:e7:68:ad:f6: 58:8f:7c:a6:03:ce:60:9e:5a:10:f1:78:1f:43:e1:99:e8:04: 6b:90:8c:d4:e0:cd:15:61:62:97:99:74:e4:a3:bd:6c:64:f8: f7:29:db:ab:d0:71:20:c9:8f:7c:b9:29:5d:d4:6f:78:18:52: 0b:b0:55:d6:03:15:4d:c9:90:5d:39:04:1f:b3:cb:ae:d4:f1: e7:34:74:ac:09:26:46:f4:2f:49:c9:63:67:a4:20:06:0d:67: e4:23:11:e6:e0:5d:d0:77:0f:e8:8b:b9:0d:03:5f:43:6f:e7: 11:ff:86:70:bd:38:dd:f8:fd:e6:72:3b:62:ff:93:aa:7a:56: bb:50:a5:e0:ae:cd:55:38:06:90:b4:e0:ef:6a:d7:24:98:16: 17:40:c2:0b:fb:8f:26:11:12:83:2c:9e:9f:3a:44:d6:66:ae: e2:61:7c:f6:14:fd:70:fc:ac:f9:6a:f9:a4:30:24:d5:9f:e2: 34:be:8a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwNTExMDUwNjQ4WhcNMjUwNTE4MDUwNjQ4WjAYMRYwFAYD VQQDEw02ODIwMzA2OS05YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOQm7jeM2IO0HzO5fJzRm/rnckok+BM+7Dc8Tzo9aoELo7DIPwK5g/21ZYdN RqdTCUqwtI7dWgtdwUomDbdnzkQ7f/djtBgmLSmPYy5dRfqPZVPlefmxLMHBKo2o cAnu0b9ZlfPVvHTyeORdJJvz+YjRwtclEsd0CX1IbgHq32IKsmDK55A9I0OUJwy0 9g5MnJG33DybApWKaBb+KIf1hAHBxnZAkvrcwn4mlUPPc6MdOuj11muALZxlLTyS W1OHa050wPzIr3E+TOUc8Qc0bHKXeuazkFRkmn5KT1UkyGqEW0uacRoK7iWWN+Aq /BBuRsby4aQbfyv+tuzMS3VIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLY1Z3/ hET1yXchRA7fB7dx0KTQMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8+WuupKaUxN+fkbtUDruQpEruC3ldmfXgcbDBrJS4hMzkFiE9iuug 53UCRVYDFRCWNbYhqorY98TjAHg2DrRsarkryudorfZYj3ymA85gnloQ8XgfQ+GZ 6ARrkIzU4M0VYWKXmXTko71sZPj3Kdur0HEgyY98uSld1G94GFILsFXWAxVNyZBd OQQfs8uu1PHnNHSsCSZG9C9JyWNnpCAGDWfkIxHm4F3Qdw/oi7kNA19Db+cR/4Zw vTjd+P3mcjti/5Oqela7UKXgrs1VOAaQtODvatckmBYXQMIL+48mERKDLJ6fOkTW Zq7iYXz2FP1w/Kz5avmkMCTVn+I0vorW -----END CERTIFICATE-----Generated at Sun May 11 19:22:09 2025 by rpki-client