$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: nyO2GzX7sgRErBV79PTsBXnTsjJdNnfXXBSdczwJA8A= Subject key identifier: A4:58:99:50:98:05:52:08:4C:65:B0:5F:9B:E1:B5:84:5A:56:C8:4C Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 347D Signing time: Wed 14 May 2025 14:39:47 +0000 Manifest this update: Wed 14 May 2025 14:39:47 +0000 Manifest next update: Wed 21 May 2025 14:39:47 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: eeii5DtZac9bV+LsFyJmbIbQreyagE0PtsmiDYKyPEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: May 14 14:39:47 2025 GMT Not After : May 21 14:39:47 2025 GMT Subject: CN=6824ab33-2f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ba:1f:f8:1e:cf:88:dd:5f:4d:c8:6b:96:af: 77:9e:33:ab:58:30:b5:8d:35:bb:08:80:ca:7e:7d: 41:e6:89:c0:ae:20:b3:7e:29:ce:50:d5:9e:d9:e9: 41:29:c1:b5:9b:55:69:47:49:2b:91:fd:4c:b6:cc: b3:fb:cd:dc:7d:9e:e7:1e:55:db:c0:3c:8f:ee:0f: f4:6e:ab:b9:96:77:0f:63:ae:d6:52:58:a3:10:2a: 06:96:df:4c:8b:55:53:98:22:69:ee:4b:57:6f:48: b8:e1:10:21:2c:ad:f2:90:21:26:e0:9b:b8:57:8e: 9c:a7:16:95:45:b0:26:d1:91:d1:5c:48:4b:ad:4d: 40:85:3f:51:c6:21:1b:84:fd:d6:02:18:4e:97:3d: 3c:b2:f6:bc:0f:21:79:80:a1:a8:59:17:a6:36:a0: f8:29:29:56:fd:d3:16:f6:cb:3d:3d:7e:03:b7:7a: 25:2c:7f:a2:d9:96:4d:d0:0b:c2:b2:71:04:31:75: ed:de:a2:2f:8c:a4:68:09:dc:11:47:71:6d:4d:cc: ee:d0:1c:06:d6:34:cb:1d:53:d2:63:85:84:9a:54: 3e:de:d6:9f:fb:e5:1c:0f:dd:5d:fa:93:b1:26:e9: 58:c5:d5:db:c2:f2:16:2b:39:15:e0:5a:6e:0f:c1: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:58:99:50:98:05:52:08:4C:65:B0:5F:9B:E1:B5:84:5A:56:C8:4C X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:f8:91:69:37:a5:8b:10:98:29:17:31:45:a6:59:b0:26: 67:7b:09:79:58:5d:5c:25:76:bf:0d:70:e1:dd:e9:76:b6:13: b4:57:7e:22:47:09:8e:2a:86:72:22:a8:3c:34:82:7b:66:e7: fb:87:5c:c1:6f:1c:69:c1:1d:e9:9f:b0:43:30:d6:37:fb:51: 63:fe:43:07:ed:71:b1:5d:11:ef:e3:42:ff:8f:6e:46:5a:65: f0:ed:bf:6e:14:07:90:0c:d8:67:7d:e2:d0:95:45:73:db:ea: 62:44:52:1d:62:37:b6:4b:cc:e2:6c:7c:b0:b6:71:91:a1:0e: b1:2a:4c:45:88:bc:de:b7:87:40:e0:e6:d3:eb:cc:23:e7:45: 63:4c:38:ed:1d:a7:9d:7d:a1:46:d9:24:58:3e:d9:d3:47:bf: 7a:f3:bc:8f:4f:79:93:32:9a:e5:d3:fb:05:d6:ee:5e:21:6f: 31:92:97:9e:f0:5a:d1:79:09:f3:b5:43:a6:f2:82:53:13:9a: 76:61:3d:50:17:9a:9e:b4:0e:a2:3c:30:c9:3e:93:88:e3:6f: 8c:9d:cc:a7:5f:28:1f:d0:9b:15:15:1b:28:6d:26:38:1b:d8: 8f:56:10:2a:7e:dc:08:e1:75:50:91:7f:14:b7:41:d5:3c:88: 03:4e:d1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjUwNTE0MTQzOTQ3WhcNMjUwNTIxMTQzOTQ3WjAYMRYwFAYD VQQDEw02ODI0YWIzMy0yZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67of+B7PiN1fTchrlq93njOrWDC1jTW7CIDKfn1B5onAriCzfinOUNWe2elB KcG1m1VpR0krkf1Mtsyz+83cfZ7nHlXbwDyP7g/0bqu5lncPY67WUlijECoGlt9M i1VTmCJp7ktXb0i44RAhLK3ykCEm4Ju4V46cpxaVRbAm0ZHRXEhLrU1AhT9RxiEb hP3WAhhOlz08sva8DyF5gKGoWRemNqD4KSlW/dMW9ss9PX4Dt3olLH+i2ZZN0AvC snEEMXXt3qIvjKRoCdwRR3FtTczu0BwG1jTLHVPSY4WEmlQ+3taf++UcD91d+pOx JulYxdXbwvIWKzkV4FpuD8GhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRYmVCY BVIITGWwX5vhtYRaVshMMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBns/iRaTelixCYKRcxRaZZsCZnewl5WF1cJXa/DXDh3el2thO0V34i RwmOKoZyIqg8NIJ7Zuf7h1zBbxxpwR3pn7BDMNY3+1Fj/kMH7XGxXRHv40L/j25G WmXw7b9uFAeQDNhnfeLQlUVz2+piRFIdYje2S8zibHywtnGRoQ6xKkxFiLzet4dA 4ObT68wj50VjTDjtHaedfaFG2SRYPtnTR79687yPT3mTMprl0/sF1u5eIW8xkpee 8FrReQnztUOm8oJTE5p2YT1QF5qetA6iPDDJPpOI42+MncynXygf0JsVFRsobSY4 G9iPVhAqftwI4XVQkX8Ut0HVPIgDTtHo -----END CERTIFICATE-----Generated at Thu May 15 11:26:42 2025 by rpki-client