$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: NfLSjhOQg7wEMczf5T0DpG55nj0xL8f4rI0WLU+Xb34= Subject key identifier: 13:98:A2:8A:D4:B4:DD:EA:57:88:79:E2:37:6D:D1:BE:A0:DB:79:09 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 041D Signing time: Sun 11 May 2025 00:07:38 +0000 Manifest this update: Sun 11 May 2025 00:07:37 +0000 Manifest next update: Sun 18 May 2025 00:07:37 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: Ct9xvS2ytj07nxzJxktLYdG3b21/lhXu9ATx2iqvAX4=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: May 11 00:07:37 2025 GMT Not After : May 18 00:07:37 2025 GMT Subject: CN=681fea4a-b499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:dc:d5:9d:04:45:ff:4f:fc:b6:0b:87:10:82: 12:5e:2e:cf:c1:a6:da:3f:cb:bb:76:a8:e0:3d:f1: b3:39:53:17:3d:04:3d:48:5d:ca:d0:f4:79:c2:ab: bb:9c:53:ba:0c:42:a5:fb:23:9d:c9:5c:bb:6a:98: 23:39:06:75:08:3f:87:65:08:ef:37:a1:6a:a4:5d: d2:23:46:d2:03:cb:23:c2:08:49:3c:be:07:38:cd: 04:d6:f3:27:ce:f1:85:93:0f:1f:14:3b:3b:ed:53: 4f:01:33:f7:c8:75:53:6f:16:8b:36:1f:b5:84:8a: 4b:ce:b5:eb:1a:a3:09:99:1f:e5:a4:fa:a9:a0:97: b9:6a:d6:ba:28:4d:07:c5:2c:1a:67:95:2c:3d:2d: 0c:86:29:8c:50:90:67:00:0e:aa:73:c3:d1:0a:ec: e1:a4:7a:3f:83:36:63:b8:5b:87:35:3c:9b:8d:bd: 25:07:e3:5c:71:88:38:14:a7:b1:40:b7:e6:35:36: eb:83:6e:a4:99:d5:91:b1:bd:9d:b2:79:35:07:4e: a0:12:ac:3e:2e:b7:f8:c5:99:71:34:89:02:9c:bf: 72:21:d3:76:e3:0f:35:88:f2:26:e2:26:31:9b:ec: dc:c7:10:ad:57:c3:90:74:fa:7b:18:70:fb:2b:37: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:98:A2:8A:D4:B4:DD:EA:57:88:79:E2:37:6D:D1:BE:A0:DB:79:09 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e5:a4:e7:a9:a1:ce:c8:c6:a0:ce:1b:18:f6:7d:f0:8f:c5: f8:73:ad:f8:05:61:91:af:1b:dd:ed:b8:d7:42:bb:34:64:24: d5:96:b0:5f:eb:7b:60:e9:eb:92:b8:c3:a3:b4:61:f6:7d:15: 0d:e8:c3:b2:5d:12:0f:d6:62:85:99:8c:e2:a1:90:75:19:e7: 9c:71:3f:83:4d:db:4b:3e:dc:1e:f8:db:ec:1f:d2:e2:83:6e: 36:52:ed:6c:9c:5f:3c:be:2d:30:e9:ad:3a:7c:5a:c2:1f:36: 04:c2:11:eb:f8:3d:da:95:eb:bf:25:bf:70:6c:a4:ff:e8:ad: 77:01:71:90:2e:95:08:f0:80:86:a4:02:4f:76:cc:01:fe:4b: ed:b3:36:10:53:47:8d:8a:b2:7a:75:f5:c9:74:f3:a2:d6:e2: 3e:a0:95:c7:53:3c:73:21:0a:4b:49:bf:75:6b:84:a0:14:64: cb:80:a8:32:e6:e4:69:89:ea:08:5d:62:9d:64:27:75:38:a6: d8:66:e6:f7:ae:82:c0:c6:f8:11:26:7c:d2:9d:2b:61:93:0b: 66:22:96:5b:3a:2a:89:b6:98:df:87:77:1c:75:b0:ce:45:90: 8a:ef:f4:26:26:09:25:3a:44:98:66:62:2b:34:ce:cc:98:b1: 2a:9c:25:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUwNTExMDAwNzM3WhcNMjUwNTE4MDAwNzM3WjAYMRYwFAYD VQQDEw02ODFmZWE0YS1iNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+9zVnQRF/0/8tguHEIISXi7PwabaP8u7dqjgPfGzOVMXPQQ9SF3K0PR5wqu7 nFO6DEKl+yOdyVy7apgjOQZ1CD+HZQjvN6FqpF3SI0bSA8sjwghJPL4HOM0E1vMn zvGFkw8fFDs77VNPATP3yHVTbxaLNh+1hIpLzrXrGqMJmR/lpPqpoJe5ata6KE0H xSwaZ5UsPS0MhimMUJBnAA6qc8PRCuzhpHo/gzZjuFuHNTybjb0lB+NccYg4FKex QLfmNTbrg26kmdWRsb2dsnk1B06gEqw+Lrf4xZlxNIkCnL9yIdN24w81iPIm4iYx m+zcxxCtV8OQdPp7GHD7KzcdXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOYoorU tN3qV4h54jdt0b6g23kJMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw5aTnqaHOyMagzhsY9n3wj8X4c634BWGRrxvd7bjXQrs0ZCTVlrBf 63tg6euSuMOjtGH2fRUN6MOyXRIP1mKFmYzioZB1GeeccT+DTdtLPtwe+NvsH9Li g242Uu1snF88vi0w6a06fFrCHzYEwhHr+D3aleu/Jb9wbKT/6K13AXGQLpUI8ICG pAJPdswB/kvtszYQU0eNirJ6dfXJdPOi1uI+oJXHUzxzIQpLSb91a4SgFGTLgKgy 5uRpieoIXWKdZCd1OKbYZub3roLAxvgRJnzSnSthkwtmIpZbOiqJtpjfh3ccdbDO RZCK7/QmJgklOkSYZmIrNM7MmLEqnCXx -----END CERTIFICATE-----Generated at Sun May 11 13:25:36 2025 by rpki-client