$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft File: FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json) Hash identifier: KQ/U89Jj1DllHaM/C0+R7SDaOUgym9kD9veBWs/F3Nk= Subject key identifier: 2A:23:07:4B:A2:7D:7D:06:F6:18:B8:B9:2E:0A:31:EB:27:9C:4D:1B Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 Certificate issuer: /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69 Certificate serial: 3280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft Manifest number: 9A07 Signing time: Mon 12 May 2025 15:14:53 +0000 Manifest this update: Mon 12 May 2025 15:14:52 +0000 Manifest next update: Mon 19 May 2025 15:14:52 +0000 Files and hashes: 1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: m+Nmxi62eKk4fCk31y0+IsSfAMOq2G3pqTvNEFvKZVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12928 (0x3280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69 Validity Not Before: May 12 15:14:52 2025 GMT Not After : May 19 15:14:52 2025 GMT Subject: CN=6822106d-40bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:64:5c:bb:62:62:e0:04:2a:18:0b:0d:69:38: f3:e9:96:67:cd:96:d1:0f:12:e0:42:ac:08:12:e6: 0d:69:06:4a:fd:d9:37:c2:09:3c:46:14:fd:54:31: 15:ec:d9:fd:f4:04:37:75:c3:c6:d8:62:4e:67:3a: 47:e3:37:e8:cf:93:68:28:b7:3f:a2:18:c9:70:ce: c2:57:8b:f5:3a:40:5e:c5:96:fe:a2:06:30:30:51: 42:4b:10:14:71:de:a0:93:b1:5a:72:a6:9f:79:16: c2:25:06:c2:df:3f:2b:22:2b:c3:cc:ee:a2:47:a2: a2:67:3c:4b:eb:09:17:08:79:00:39:f5:f5:cb:7c: 6f:89:56:21:42:a1:60:72:cf:3f:ab:98:85:0e:c9: 0b:11:ad:1d:73:ca:f6:b6:cf:64:93:c5:dd:17:96: 52:4f:58:2f:55:a3:dc:63:ec:25:12:9b:80:48:f0: f7:8e:14:5e:7b:fa:46:d0:85:24:a0:44:5c:a3:e2: d5:44:bd:b3:fa:c6:14:74:61:93:2e:cc:f8:8d:f6: 80:2e:0e:74:fe:d3:e8:84:06:ca:95:0e:c2:52:48: 80:41:db:eb:38:aa:3d:b5:0a:72:24:14:25:7f:74: 2b:7e:4c:2c:04:cd:43:58:6e:5a:72:6f:73:9a:24: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:23:07:4B:A2:7D:7D:06:F6:18:B8:B9:2E:0A:31:EB:27:9C:4D:1B X509v3 Authority Key Identifier: keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9d:9c:a8:26:cc:d1:c7:57:de:0d:c1:f8:22:42:2f:8f:16: 17:12:81:34:99:05:e3:8e:04:65:07:f2:c9:8d:d7:33:e6:5c: 2c:55:7d:f7:01:69:ce:99:ee:bf:52:2f:f9:71:b2:6e:c0:e5: 75:8a:61:47:a3:45:39:73:89:58:a5:d2:7c:d8:5b:57:1e:66: 7f:d3:75:87:44:a8:ad:8b:01:6b:08:db:46:c4:68:db:68:34: 27:28:3d:1c:ed:6b:39:ba:93:7b:6e:22:2b:32:29:d1:3b:79: 4d:b4:80:01:be:b8:78:55:dc:fe:e6:4f:87:a4:35:84:d0:a7: e7:73:91:3f:a2:2c:74:22:fa:82:63:57:0b:22:57:d7:d4:56: 7c:65:87:03:38:c7:5f:6c:15:2e:c8:e3:b7:ea:53:fe:40:b2: fc:70:fa:d0:b2:b4:6d:38:df:cf:ee:25:12:9e:9f:f0:8b:04: 39:23:75:18:9a:2e:d5:e5:ca:d8:a1:1c:3c:22:c0:23:67:17: 2d:e1:d3:92:fa:b3:27:99:d5:14:40:c4:3d:20:b2:03:22:11: 7d:55:52:98:53:1a:cd:87:84:6a:83:b7:37:ed:33:72:44:79: c7:e3:57:f4:9e:ae:21:87:08:a2:95:18:db:37:24:21:f7:15: 12:f8:7c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDE0MTVGMjgxMUMwMzdGMzY0Q0M1ODcxODBCRjI0MDc5 NUIwNDNBNjkwHhcNMjUwNTEyMTUxNDUyWhcNMjUwNTE5MTUxNDUyWjAYMRYwFAYD VQQDEw02ODIyMTA2ZC00MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WRcu2Ji4AQqGAsNaTjz6ZZnzZbRDxLgQqwIEuYNaQZK/dk3wgk8RhT9VDEV 7Nn99AQ3dcPG2GJOZzpH4zfoz5NoKLc/ohjJcM7CV4v1OkBexZb+ogYwMFFCSxAU cd6gk7FacqafeRbCJQbC3z8rIivDzO6iR6KiZzxL6wkXCHkAOfX1y3xviVYhQqFg cs8/q5iFDskLEa0dc8r2ts9kk8XdF5ZST1gvVaPcY+wlEpuASPD3jhRee/pG0IUk oERco+LVRL2z+sYUdGGTLsz4jfaALg50/tPohAbKlQ7CUkiAQdvrOKo9tQpyJBQl f3QrfkwsBM1DWG5acm9zmiQoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCojB0ui fX0G9hi4uS4KMesnnE0bMB8GA1UdIwQYMBaAFBQV8oEcA382TMWHGAvyQHlbBDpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6Wk14WWNZQ19KQWVWc0VP bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCWHlnUndEZnpaTXhZY1lDX0pBZVZzRU9tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6 Wk14WWNZQ19KQWVWc0VPbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAenZyoJszRx1feDcH4IkIvjxYXEoE0mQXjjgRlB/LJjdcz5lwsVX33 AWnOme6/Ui/5cbJuwOV1imFHo0U5c4lYpdJ82FtXHmZ/03WHRKitiwFrCNtGxGjb aDQnKD0c7Ws5upN7biIrMinRO3lNtIABvrh4Vdz+5k+HpDWE0Kfnc5E/oix0IvqC Y1cLIlfX1FZ8ZYcDOMdfbBUuyOO36lP+QLL8cPrQsrRtON/P7iUSnp/wiwQ5I3UY mi7V5crYoRw8IsAjZxct4dOS+rMnmdUUQMQ9ILIDIhF9VVKYUxrNh4Rqg7c37TNy RHnH41f0nq4hhwiilRjbNyQh9xUS+Hyx -----END CERTIFICATE-----Generated at Tue May 13 22:49:44 2025 by rpki-client