$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: SgRdkofSASQDxcGZbCznw+l1G8jW0vVxjG9LcaGUnEo= Subject key identifier: 32:0C:0B:15:3C:D9:4A:C1:7D:14:4A:D3:28:71:B6:E4:99:49:9F:AF Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 0847 Signing time: Mon 12 May 2025 20:46:52 +0000 Manifest this update: Mon 12 May 2025 20:46:51 +0000 Manifest next update: Mon 19 May 2025 20:46:51 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: AxUjfPdDXCzDrJSEQF1QjYA2DZJP33rD4O4Ww3xyCSg=) 2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: SNPBwQUb1RKoaTQTNrfH32vnIjaOv9HeTlrUpVnkMgc=) 3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: KtUrm2foeaUuoNmWh4nKKxxCo2xUAoGCx8YrdIKIWS8=) 4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: eiCuC1YeFyOuHPZHqPQ601dUszGySRFgdPdOWzMPWtY=) 5: 6D0768C2770711EFBA70CE36C4F9AE02.roa (hash: tEuFHPIEilNpnG2svl8ZjY076owwpchb5SOYj1BIOvg=) 6: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: P543uAxi61jv6pAr/0Afy+uliwnXO1AO2KiTZ1BtODA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: May 12 20:46:51 2025 GMT Not After : May 19 20:46:51 2025 GMT Subject: CN=68225e3c-6c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:3b:bd:6a:68:c1:e3:4e:bf:05:60:75:e3: 79:54:d5:20:fc:1e:59:23:ad:1c:e3:cd:24:f5:41: 66:ab:e1:99:6f:28:d2:66:52:21:b5:4a:1e:39:00: 3c:61:4a:58:d4:8b:95:b0:a7:13:01:a1:18:83:f4: c7:54:0d:67:19:8f:d6:f9:d0:12:44:ca:07:95:4c: 13:ec:54:b5:ef:8a:ff:44:b5:f1:b1:d7:43:e4:83: 9f:25:a4:70:5c:51:c1:4d:ed:08:b8:bf:a7:f4:a0: b9:5a:43:17:7f:e9:65:aa:7b:54:58:4a:7d:3f:5b: 81:64:d1:d8:a5:4c:03:4c:e2:7f:ec:d8:6b:b3:50: cc:df:e7:ae:2f:40:6f:1e:d8:e5:ee:d1:7e:15:5d: 67:ca:e5:1a:6c:c9:bf:c5:34:10:71:6d:ba:bb:c1: 8e:ba:ba:e5:e3:8f:6f:92:94:6c:40:8e:68:e6:1c: 9b:fe:2f:55:1f:17:58:29:87:03:7f:a5:4e:f9:65: 11:81:97:0e:e7:03:ad:c9:b3:65:7c:98:b8:65:81: 92:68:bd:2f:ae:ee:f0:2f:03:1b:48:c4:20:95:73: 0a:42:dc:ad:87:be:b6:c1:24:b7:e8:24:b1:5f:d7: e0:d0:9f:8a:5f:5a:f6:81:01:2b:f6:9f:32:50:f1: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:0B:15:3C:D9:4A:C1:7D:14:4A:D3:28:71:B6:E4:99:49:9F:AF X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:1e:96:69:89:71:07:ec:71:cc:db:6a:4b:7a:ed:4e:a4:2e: 1e:a7:23:20:fb:e8:0a:e0:e2:02:e2:49:d6:0e:64:e9:e8:05: 28:0c:4f:a5:cd:4a:5b:07:95:f6:b6:a0:9d:0e:55:41:9c:81: ff:1c:98:72:29:61:82:c2:f4:02:cf:57:b0:4a:bb:1e:3b:fa: 19:36:3b:0f:5f:49:6a:da:d3:71:e2:ee:d4:25:6f:db:a0:9a: 81:72:c9:74:78:65:4c:7a:d6:1c:70:c0:11:b4:e7:32:fb:14: ec:f2:01:ab:87:04:b2:08:03:ac:32:cd:d6:f6:45:c5:3d:35: b8:06:22:cc:d1:0c:dc:d6:b5:af:39:4c:93:39:e1:bd:a4:1d: 63:45:45:2b:56:a2:92:fc:7d:d6:32:f6:e1:a3:74:18:1a:ef: 60:2d:5d:f2:73:fd:0c:04:06:b7:35:f8:5f:c1:fd:c8:00:ff: 10:04:e0:8c:52:e1:aa:4e:e5:65:39:f8:eb:47:16:f8:4c:77: 1b:a4:8d:58:d3:7d:13:1a:a1:fe:68:fa:fc:e7:34:3b:56:07: 04:f8:d5:13:94:3b:6e:80:7c:bd:ad:ed:53:d7:a6:81:a7:f9: 47:75:8c:11:36:fc:e0:44:59:55:36:e7:e8:c4:93:b9:d5:50: 9e:16:77:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUwNTEyMjA0NjUxWhcNMjUwNTE5MjA0NjUxWjAYMRYwFAYD VQQDEw02ODIyNWUzYy02YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudk7vWpoweNOvwVgdeN5VNUg/B5ZI60c480k9UFmq+GZbyjSZlIhtUoeOQA8 YUpY1IuVsKcTAaEYg/THVA1nGY/W+dASRMoHlUwT7FS174r/RLXxsddD5IOfJaRw XFHBTe0IuL+n9KC5WkMXf+llqntUWEp9P1uBZNHYpUwDTOJ/7Nhrs1DM3+euL0Bv Htjl7tF+FV1nyuUabMm/xTQQcW26u8GOurrl449vkpRsQI5o5hyb/i9VHxdYKYcD f6VO+WURgZcO5wOtybNlfJi4ZYGSaL0vru7wLwMbSMQglXMKQtyth762wSS36CSx X9fg0J+KX1r2gQEr9p8yUPHZ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIMCxU8 2UrBfRRK0yhxtuSZSZ+vMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcHpZpiXEH7HHM22pLeu1OpC4epyMg++gK4OIC4knWDmTp6AUoDE+l zUpbB5X2tqCdDlVBnIH/HJhyKWGCwvQCz1ewSrseO/oZNjsPX0lq2tNx4u7UJW/b oJqBcsl0eGVMetYccMARtOcy+xTs8gGrhwSyCAOsMs3W9kXFPTW4BiLM0Qzc1rWv OUyTOeG9pB1jRUUrVqKS/H3WMvbho3QYGu9gLV3yc/0MBAa3Nfhfwf3IAP8QBOCM UuGqTuVlOfjrRxb4THcbpI1Y030TGqH+aPr85zQ7VgcE+NUTlDtugHy9re1T16aB p/lHdYwRNvzgRFlVNufoxJO51VCeFneL -----END CERTIFICATE-----Generated at Tue May 13 15:13:19 2025 by rpki-client