$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: KaiRU7S5aariHbNnWP45RHoKo3w1uWfYBZDR+GKHz/U= Subject key identifier: E4:AC:B3:22:48:83:23:CA:73:7C:77:D4:E5:7D:86:8D:E1:22:94:A2 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 115A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1153 Signing time: Wed 14 May 2025 17:22:27 +0000 Manifest this update: Wed 14 May 2025 17:22:26 +0000 Manifest next update: Wed 21 May 2025 17:22:26 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: 4pjZ3R6R5pI7TLQyiUR/gS81j9iu19nAaECspThC9PM=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4442 (0x115a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: May 14 17:22:26 2025 GMT Not After : May 21 17:22:26 2025 GMT Subject: CN=6824d152-93ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:41:e3:3f:3b:e3:39:37:2b:39:6c:04:59:91: 0d:ca:a2:0e:9f:b9:1d:47:86:9f:c9:99:f5:32:46: 02:c1:d0:26:f0:c7:14:55:7c:a4:08:a8:01:77:b6: a8:27:46:00:9b:cd:31:bf:76:be:c1:cc:b4:40:9e: 7a:00:05:16:a0:86:f2:74:c9:5d:5a:b8:67:c7:99: ba:c7:5d:a0:2b:b1:4e:0a:62:15:29:7e:12:78:ff: 1e:15:c0:8a:a2:6e:8f:e3:59:f6:1b:27:97:c9:52: 78:c2:ae:8c:f0:06:a1:4e:5c:54:2e:1c:90:68:cf: 41:3d:84:31:48:a5:28:e4:8b:e1:fe:66:d4:62:f1: af:93:14:a6:76:da:c0:15:57:e6:46:38:94:40:eb: 14:56:b2:ae:cf:a8:ec:21:a8:74:3c:6f:7e:8a:31: bd:f7:26:68:de:69:09:ca:51:f9:c8:03:6a:43:2c: 51:cb:5c:51:18:28:0c:d3:80:b7:df:99:86:a2:3b: ef:f6:8d:36:af:ec:49:10:32:6b:33:c9:a6:12:04: 94:7f:71:98:cb:82:7b:43:66:f6:a4:f4:47:72:63: 3b:2e:70:87:33:f5:d4:32:64:e5:aa:5d:f7:d1:a8: ce:d1:22:9d:22:39:52:9d:71:50:53:08:f6:e7:a3: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AC:B3:22:48:83:23:CA:73:7C:77:D4:E5:7D:86:8D:E1:22:94:A2 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4d:16:61:6f:d7:0b:ce:a3:63:2a:b1:f5:54:aa:85:26:c8: d2:28:01:c9:1a:4f:d7:31:8c:87:47:48:b9:13:02:37:6a:55: 22:f8:5e:da:4d:eb:91:06:7c:77:33:b1:62:c2:b1:c8:bb:3f: 76:54:8e:ec:4f:fc:88:48:44:6b:a1:30:c3:dc:2b:6d:28:01: 91:25:ae:78:6d:72:99:b1:a9:5f:90:95:24:e0:53:48:a9:61: 7b:40:c6:e6:3d:e9:fc:33:e3:58:b7:ac:4d:2a:53:f3:70:cd: 55:08:62:7f:00:0d:ad:1b:8b:ca:e5:63:ab:fc:aa:72:02:08: 0c:cb:74:1b:d5:45:12:17:a2:f8:5a:da:8e:2e:e6:a5:8a:c5: 4a:09:92:d2:b8:1f:8e:0c:f2:62:9e:ed:43:4f:ef:20:dd:48: b6:d7:7f:c5:10:b9:a3:0b:0b:57:2f:61:0c:48:75:f5:36:e7: a7:39:cd:37:26:2b:b4:29:67:87:20:67:12:0c:53:4f:6c:67: f0:aa:6a:a5:8b:ea:61:bb:f5:d4:f5:48:e3:93:09:ca:84:6c: 58:b9:7a:b5:ed:86:96:a6:52:fd:0d:89:dc:98:a4:d0:04:e8: b8:24:ec:2c:94:9c:c0:ea:9f:46:33:07:41:a0:75:e6:54:3a: 83:4c:8b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwNTE0MTcyMjI2WhcNMjUwNTIxMTcyMjI2WjAYMRYwFAYD VQQDEw02ODI0ZDE1Mi05M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEHjPzvjOTcrOWwEWZENyqIOn7kdR4afyZn1MkYCwdAm8McUVXykCKgBd7ao J0YAm80xv3a+wcy0QJ56AAUWoIbydMldWrhnx5m6x12gK7FOCmIVKX4SeP8eFcCK om6P41n2GyeXyVJ4wq6M8AahTlxULhyQaM9BPYQxSKUo5Ivh/mbUYvGvkxSmdtrA FVfmRjiUQOsUVrKuz6jsIah0PG9+ijG99yZo3mkJylH5yANqQyxRy1xRGCgM04C3 35mGojvv9o02r+xJEDJrM8mmEgSUf3GYy4J7Q2b2pPRHcmM7LnCHM/XUMmTlql33 0ajO0SKdIjlSnXFQUwj256PonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSssyJI gyPKc3x31OV9ho3hIpSiMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuTRZhb9cLzqNjKrH1VKqFJsjSKAHJGk/XMYyHR0i5EwI3alUi+F7a TeuRBnx3M7FiwrHIuz92VI7sT/yISERroTDD3CttKAGRJa54bXKZsalfkJUk4FNI qWF7QMbmPen8M+NYt6xNKlPzcM1VCGJ/AA2tG4vK5WOr/KpyAggMy3Qb1UUSF6L4 WtqOLualisVKCZLSuB+ODPJinu1DT+8g3Ui213/FELmjCwtXL2EMSHX1NuenOc03 Jiu0KWeHIGcSDFNPbGfwqmqli+phu/XU9UjjkwnKhGxYuXq17YaWplL9DYncmKTQ BOi4JOwslJzA6p9GMwdBoHXmVDqDTIs/ -----END CERTIFICATE-----Generated at Fri May 16 09:53:15 2025 by rpki-client