$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: OBRewg1tjfZKiSYY9U9rZrX8b0W6wsGb3R/OHKJsNzI= Subject key identifier: 26:1F:FE:2C:34:59:DB:D3:18:DC:50:0E:85:EA:2D:A5:C0:2D:99:4A Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9A02 Signing time: Sat 10 May 2025 15:14:34 +0000 Manifest this update: Sat 10 May 2025 15:14:33 +0000 Manifest next update: Sat 17 May 2025 15:14:33 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: mNI65WKi9XvjGJ0L0KM4fqFKOhGTiHTdGqGfylmwOP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: May 10 15:14:33 2025 GMT Not After : May 17 15:14:33 2025 GMT Subject: CN=681f6d5a-81fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:dd:08:3d:ef:60:90:95:a6:f3:6b:01:8f: 0e:48:37:5f:c2:c3:54:8f:07:0f:54:24:22:5d:7b: c6:d1:ba:a7:f0:f8:35:9f:50:65:28:24:1b:98:4f: 43:53:9e:72:56:64:a1:b2:56:13:aa:70:2d:94:8f: d4:ac:9a:14:6b:b4:25:7e:44:1a:01:9a:13:ae:85: 00:22:f8:84:46:b3:a4:b4:1b:5a:43:1a:b8:40:00: 61:c7:c1:95:cd:0a:71:6b:19:58:d0:46:ae:ad:d6: 5a:52:c8:e7:0f:09:2e:20:7d:0c:67:fa:71:76:a4: ee:e6:10:84:4e:09:3f:32:d5:2c:e5:6f:18:54:18: b5:28:f1:e9:15:13:e7:a6:9b:b9:7e:e0:a5:fd:12: f0:87:d6:44:20:9e:21:6b:17:49:06:40:19:83:3a: 7d:86:05:9e:fd:d9:cb:4c:05:90:c7:ef:9f:49:a5: b3:19:51:00:39:e0:23:4e:f6:ae:bc:04:60:0a:c3: d6:82:58:f4:69:70:15:90:7e:c8:5e:65:ea:fc:72: 62:ec:4e:b5:59:a0:57:47:83:63:82:fb:b9:48:c4: b2:86:8e:01:0a:e5:c4:96:1a:80:38:53:fc:08:12: ae:82:cd:6c:d6:df:1a:01:1d:85:12:51:73:34:0b: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1F:FE:2C:34:59:DB:D3:18:DC:50:0E:85:EA:2D:A5:C0:2D:99:4A X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:75:fe:9b:57:77:e6:90:14:94:ae:fe:a6:e3:0a:e3:1f:e1: 32:6c:c5:86:57:e2:5f:c6:80:d1:82:30:76:b8:cc:9e:4d:cd: 75:97:b8:76:33:2b:c3:6f:bc:72:79:0a:4f:f3:e4:62:2d:b8: 3a:6f:4c:d3:07:a9:70:91:39:43:fa:05:11:e4:9b:d2:ae:91: a3:a9:cb:b8:13:eb:9f:3b:22:6a:6e:1a:11:7f:42:58:e4:d2: a8:bc:82:ba:a5:1f:5b:f4:58:88:db:66:f3:6a:14:c7:09:7a: 16:ac:c0:32:ef:32:a3:f2:85:36:d1:30:8d:69:e0:44:64:98: eb:fb:72:23:7d:8a:2f:b2:3e:4d:28:5a:4b:47:0d:58:db:0c: dd:35:21:e9:b5:5a:fb:9c:c2:03:c8:5d:4a:b7:e9:90:56:e3: 8c:fd:6f:48:f0:7d:16:a3:d1:04:22:e2:2c:43:70:ae:a9:05: f6:ba:af:54:62:c7:bb:bc:b7:ca:c5:9a:5b:e8:f6:d0:24:1d: 58:87:49:c7:1d:3d:1d:38:5a:fb:99:0b:36:d6:ec:2d:63:f1: c0:a9:3f:a9:21:b1:6e:71:43:ec:1d:cb:a0:e8:7d:eb:9e:72: ca:15:3f:86:b0:a7:79:38:ef:55:3a:f6:2b:93:a3:3a:d0:01: d2:ad:f9:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUwNTEwMTUxNDMzWhcNMjUwNTE3MTUxNDMzWjAYMRYwFAYD VQQDEw02ODFmNmQ1YS04MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZjdCD3vYJCVpvNrAY8OSDdfwsNUjwcPVCQiXXvG0bqn8Pg1n1BlKCQbmE9D U55yVmShslYTqnAtlI/UrJoUa7QlfkQaAZoTroUAIviERrOktBtaQxq4QABhx8GV zQpxaxlY0EaurdZaUsjnDwkuIH0MZ/pxdqTu5hCETgk/MtUs5W8YVBi1KPHpFRPn ppu5fuCl/RLwh9ZEIJ4haxdJBkAZgzp9hgWe/dnLTAWQx++fSaWzGVEAOeAjTvau vARgCsPWglj0aXAVkH7IXmXq/HJi7E61WaBXR4Njgvu5SMSyho4BCuXElhqAOFP8 CBKugs1s1t8aAR2FElFzNAuUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYf/iw0 WdvTGNxQDoXqLaXALZlKMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATdf6bV3fmkBSUrv6m4wrjH+EybMWGV+JfxoDRgjB2uMyeTc11l7h2 MyvDb7xyeQpP8+RiLbg6b0zTB6lwkTlD+gUR5JvSrpGjqcu4E+ufOyJqbhoRf0JY 5NKovIK6pR9b9FiI22bzahTHCXoWrMAy7zKj8oU20TCNaeBEZJjr+3IjfYovsj5N KFpLRw1Y2wzdNSHptVr7nMIDyF1Kt+mQVuOM/W9I8H0Wo9EEIuIsQ3CuqQX2uq9U Yse7vLfKxZpb6PbQJB1Yh0nHHT0dOFr7mQs21uwtY/HAqT+pIbFucUPsHcug6H3r nnLKFT+GsKd5OO9VOvYrk6M60AHSrfkA -----END CERTIFICATE-----Generated at Sat May 10 20:15:06 2025 by rpki-client