$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: mWP1akEfX3u2T2IbM/u126AWYHLkh1yosS4DRWSyYdU= Subject key identifier: 89:A8:6D:7B:CE:9E:FE:3B:C0:6A:9A:F5:C7:B5:46:07:3F:54:6C:F3 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 27 Signing time: Thu 15 May 2025 07:04:17 +0000 Manifest this update: Thu 15 May 2025 07:04:16 +0000 Manifest next update: Thu 22 May 2025 07:04:16 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: TpCamrjlpf0fIs9NKvwmQqOgm2a8PHO3fzFiEGYzl8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: May 15 07:04:16 2025 GMT Not After : May 22 07:04:16 2025 GMT Subject: CN=682591f0-0966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:3b:70:4b:29:4c:b3:1d:9c:3d:a5:32:6f: 47:e6:a2:be:ec:9c:31:73:f7:ac:60:f9:ba:eb:4f: 42:89:0e:67:54:43:59:80:b2:75:5e:74:6d:a9:47: 6b:ab:a5:26:9e:cb:dc:ed:6d:0e:c6:60:e8:4c:89: 72:8f:3b:1a:43:fc:f4:89:2e:ab:7d:91:c6:38:e6: 96:0c:4b:3e:8f:96:31:51:35:9a:f5:4e:98:28:92: d3:f1:d7:4a:04:31:61:61:f0:98:52:d9:99:fe:67: a5:6e:cc:c9:f8:45:52:e9:99:64:a2:ef:47:c9:3d: f5:48:82:ff:5d:3b:3a:9a:86:5a:94:fb:81:b2:56: ca:d3:b6:d3:bc:c3:c6:a9:3a:0a:b5:0b:e3:9c:18: 13:c7:c0:5b:33:e6:d4:cf:bf:d9:a8:71:cf:34:31: a8:6a:77:7e:5b:0d:17:c3:06:26:3c:5e:58:9b:5e: da:07:2b:8d:08:b0:6d:e6:27:4a:25:6e:db:13:70: e9:2e:fe:a4:4a:04:8a:9a:75:87:56:26:08:de:55: 57:79:02:68:83:26:3c:1e:e8:b0:f2:fc:4e:a4:c5: e0:af:a8:66:7d:9f:ee:95:75:28:c4:98:95:21:44: 46:b3:7d:4b:be:6e:79:c2:26:3a:e2:ec:5e:3c:b5: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A8:6D:7B:CE:9E:FE:3B:C0:6A:9A:F5:C7:B5:46:07:3F:54:6C:F3 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:91:17:e1:62:4c:0e:f3:41:cc:82:39:72:98:6c:4e:05: 03:98:04:f5:fc:75:fb:45:2f:ab:a4:66:18:0b:2b:d8:16:d1: cd:c7:17:03:be:ea:ad:41:f8:a6:79:c6:50:c0:59:f4:09:2d: 05:2d:db:2f:13:fc:25:7c:42:5c:f3:a9:d2:9b:21:7a:32:37: ac:5c:71:e1:86:19:fa:3c:ec:c1:b2:8f:bd:48:56:f3:9f:01: 2f:45:09:f9:64:16:d6:24:c6:74:4c:67:aa:ba:8d:94:98:73: 2b:1a:dd:96:08:34:f9:c7:84:e4:f9:8b:ab:d9:0e:42:f7:ac: 3c:c4:6e:16:8c:35:c1:5f:05:a8:ce:6d:02:1f:8a:90:5b:3a: cf:f7:62:28:41:16:3a:9e:da:48:eb:de:ad:30:3b:e0:37:54: 65:6d:c2:bc:f3:7b:0b:9a:bf:9e:3e:a0:2a:9e:f6:05:3b:24: 2b:85:4e:2c:da:48:13:3c:33:79:92:e7:fb:fa:0c:28:b1:90: 73:52:07:12:21:43:a8:6c:bc:0e:a4:f6:ca:b5:f1:c7:26:86: 1e:88:b0:ab:e9:a6:71:94:71:4f:f2:a9:63:39:3a:f4:8e:8b: 03:cb:70:9a:5d:17:5b:3d:d7:c5:b2:46:2a:6e:ec:4d:a9:86: ec:7e:fe:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoMTRENUFEMjcyMkFDQTg2QUQzNEYwRjlBMzQ0NzI2Q0I2 Njk4MDgzMTAeFw0yNTA1MTUwNzA0MTZaFw0yNTA1MjIwNzA0MTZaMBgxFjAUBgNV BAMTDTY4MjU5MWYwLTA5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIBTtwSylMsx2cPaUyb0fmor7snDFz96xg+brrT0KJDmdUQ1mAsnVedG2pR2ur pSaey9ztbQ7GYOhMiXKPOxpD/PSJLqt9kcY45pYMSz6PljFRNZr1TpgoktPx10oE MWFh8JhS2Zn+Z6VuzMn4RVLpmWSi70fJPfVIgv9dOzqahlqU+4GyVsrTttO8w8ap Ogq1C+OcGBPHwFsz5tTPv9mocc80Mahqd35bDRfDBiY8XlibXtoHK40IsG3mJ0ol btsTcOku/qRKBIqadYdWJgjeVVd5AmiDJjwe6LDy/E6kxeCvqGZ9n+6VdSjEmJUh REazfUu+bnnCJjri7F48tVVlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiahte86e /jvAapr1x7VGBz9UbPMwHwYDVR0jBBgwFoAUFNWtJyKsqGrTTw+aNEcmy2aYCDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2LzkzMDZBMkM0RjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk5XdEp5S3NxR3JUVHctYU5FY215MmFZQ0RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2LzkzMDZBMkM0RjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdy VFR3LWFORWNteTJhWUNERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbAkRfhYkwO80HMgjlymGxOBQOYBPX8dftFL6ukZhgLK9gW0c3HFwO+ 6q1B+KZ5xlDAWfQJLQUt2y8T/CV8QlzzqdKbIXoyN6xcceGGGfo87MGyj71IVvOf AS9FCflkFtYkxnRMZ6q6jZSYcysa3ZYINPnHhOT5i6vZDkL3rDzEbhaMNcFfBajO bQIfipBbOs/3YihBFjqe2kjr3q0wO+A3VGVtwrzzewuav54+oCqe9gU7JCuFTiza SBM8M3mS5/v6DCixkHNSBxIhQ6hsvA6k9sq18ccmhh6IsKvppnGUcU/yqWM5OvSO iwPLcJpdF1s918WyRipu7E2phux+/jI= -----END CERTIFICATE-----Generated at Thu May 15 12:20:20 2025 by rpki-client