$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: ApW28Vs2DP+lBKVfSfFGhcJne8vHaBNpszCh0lsvYkI= Subject key identifier: B0:01:D8:C5:28:17:1E:05:4D:5D:7D:6F:90:FA:C5:BD:0F:7A:53:85 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0AD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0ACA Signing time: Sat 10 May 2025 19:13:26 +0000 Manifest this update: Sat 10 May 2025 19:13:25 +0000 Manifest next update: Sat 17 May 2025 19:13:25 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: VAUsjzNjyoXyifZH84xu8sJPl8EFeer0Pf2c9dzOQ08=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2774 (0xad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: May 10 19:13:25 2025 GMT Not After : May 17 19:13:25 2025 GMT Subject: CN=681fa556-c1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:fb:63:b9:eb:96:14:f3:4b:79:cc:31:69: 89:6e:4b:ee:71:8c:96:fd:4a:56:e3:ff:64:47:44: 32:f7:14:db:24:10:70:58:72:5d:01:6c:ab:8f:80: 8b:e8:8a:c7:a8:fa:ee:de:55:bd:72:d5:d5:df:e7: 85:e9:4b:19:ef:f6:23:75:52:fd:80:4b:be:39:9b: 6c:17:b2:bb:6f:c2:94:0d:39:07:b2:f9:a4:7c:ab: 3e:d1:31:5e:1e:66:e1:99:57:d6:ba:09:58:38:8b: 43:77:8c:d7:45:91:9f:36:be:7b:c9:00:53:10:4f: 40:b0:bb:7f:ef:a6:6c:0b:71:38:5c:ce:34:a3:02: 26:0d:88:bf:55:aa:08:ef:58:59:2d:76:cf:a0:ab: 1c:0e:11:d8:25:0d:7b:4f:cb:56:5c:b6:2d:14:ba: e3:82:b6:0f:d2:e2:14:c6:e3:99:32:c0:91:bd:16: 09:e7:04:ed:1e:93:5b:64:a0:bf:1e:15:fd:6c:59: 40:bd:8f:d6:92:29:5c:aa:f2:24:17:a3:82:00:92: 86:b9:02:9a:9d:66:cc:8f:52:57:58:1a:34:6b:2f: 95:55:6a:3a:c6:4d:4f:f4:f9:8a:06:63:00:af:54: e8:fd:5c:d3:0c:91:ba:f5:55:1b:b6:be:2e:eb:71: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:01:D8:C5:28:17:1E:05:4D:5D:7D:6F:90:FA:C5:BD:0F:7A:53:85 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:21:4d:1d:f3:2f:71:7a:3e:e8:ce:77:af:11:d7:f0:24: fa:57:99:74:06:3f:7a:53:0d:1e:8a:8a:d4:13:d5:d7:ce:c7: b0:7d:e6:e7:bd:b0:8a:4b:03:ad:e1:93:c7:d3:7a:33:9a:56: e0:8f:80:ff:5d:65:da:76:1e:0c:9b:6d:ed:4f:f4:8f:37:40: 1b:ae:df:d2:c9:3a:41:dc:28:13:c7:66:bf:cd:01:51:a8:32: 1a:b8:a1:60:71:f1:ee:a2:af:91:27:34:5d:ce:b7:32:17:06: f7:55:76:be:8a:65:f8:08:8f:48:48:f7:a0:30:a7:c7:14:ca: 49:d3:55:1c:42:cb:7d:f6:10:d6:2d:65:b2:1c:75:0c:ad:47: f6:b3:67:a4:4e:1f:b8:dd:7c:6d:3c:c0:1b:54:6f:19:d7:1b: a8:5f:f6:98:d6:57:f3:b9:2b:61:ea:f9:bc:32:a3:9a:e5:a4: dc:3f:66:61:a0:2d:2d:ed:e4:05:b6:f4:b5:ce:6e:af:f0:f6: 0f:eb:23:ae:ae:21:bd:78:68:d4:f2:17:06:e8:ab:ca:87:dd: 7d:15:9c:00:8b:58:15:e7:32:02:55:2a:76:3e:62:0c:f5:e2: 58:aa:8c:81:0c:54:6d:e5:b9:91:19:ea:92:b8:bf:ab:85:4c: 65:43:a1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNTEwMTkxMzI1WhcNMjUwNTE3MTkxMzI1WjAYMRYwFAYD VQQDEw02ODFmYTU1Ni1jMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDT7Y7nrlhTzS3nMMWmJbkvucYyW/UpW4/9kR0Qy9xTbJBBwWHJdAWyrj4CL 6IrHqPru3lW9ctXV3+eF6UsZ7/YjdVL9gEu+OZtsF7K7b8KUDTkHsvmkfKs+0TFe HmbhmVfWuglYOItDd4zXRZGfNr57yQBTEE9AsLt/76ZsC3E4XM40owImDYi/VaoI 71hZLXbPoKscDhHYJQ17T8tWXLYtFLrjgrYP0uIUxuOZMsCRvRYJ5wTtHpNbZKC/ HhX9bFlAvY/WkilcqvIkF6OCAJKGuQKanWbMj1JXWBo0ay+VVWo6xk1P9PmKBmMA r1To/VzTDJG69VUbtr4u63HlPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAB2MUo Fx4FTV19b5D6xb0PelOFMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqKiFNHfMvcXo+6M53rxHX8CT6V5l0Bj96Uw0eiorUE9XXzsewfebn vbCKSwOt4ZPH03ozmlbgj4D/XWXadh4Mm23tT/SPN0Abrt/SyTpB3CgTx2a/zQFR qDIauKFgcfHuoq+RJzRdzrcyFwb3VXa+imX4CI9ISPegMKfHFMpJ01UcQst99hDW LWWyHHUMrUf2s2ekTh+43XxtPMAbVG8Z1xuoX/aY1lfzuSth6vm8MqOa5aTcP2Zh oC0t7eQFtvS1zm6v8PYP6yOuriG9eGjU8hcG6KvKh919FZwAi1gV5zICVSp2PmIM 9eJYqoyBDFRt5bmRGeqSuL+rhUxlQ6Hb -----END CERTIFICATE-----Generated at Mon May 12 18:48:29 2025 by rpki-client