$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: iUoiESsmJkK+hWlAOHjkrJaanexPe8syP8k85OBtw6I= Subject key identifier: 50:E2:FB:96:EE:BE:20:6D:2E:CF:7A:71:29:FA:F3:AD:03:C3:DB:77 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 1035 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 102B Signing time: Mon 12 May 2025 17:21:22 +0000 Manifest this update: Mon 12 May 2025 17:21:22 +0000 Manifest next update: Mon 19 May 2025 17:21:22 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: xtm2N2TFKTeQWpfk/LfgaUs+VUHiKqmMklp9Pw2FXxE=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4149 (0x1035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: May 12 17:21:22 2025 GMT Not After : May 19 17:21:22 2025 GMT Subject: CN=68222e12-9747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:c4:54:88:37:49:8e:a7:b2:55:06:eb:ee: d3:db:70:a0:eb:2e:56:83:0e:3e:ad:2c:7a:ca:8e: 46:20:18:13:bc:5b:35:d8:5f:63:be:90:ae:84:b2: 07:50:a5:93:fc:77:7f:98:01:e7:81:43:03:01:ea: 30:39:68:ab:2f:a3:26:17:74:62:5f:16:36:71:8e: 8b:ec:32:9e:56:87:fb:e3:7f:32:c1:98:d7:49:fb: c0:20:88:d0:53:32:1c:84:20:00:02:16:22:32:f2: e1:7e:7f:82:40:8c:94:4b:d9:9b:48:0a:a9:24:27: 75:99:e4:b4:8f:03:56:09:36:8b:15:12:66:c1:a2: 7e:c0:20:66:77:ef:ba:e4:93:9f:31:07:b5:ca:bb: b6:99:4d:a9:7f:d4:36:37:05:02:fd:72:97:96:c5: c6:0c:51:35:83:1b:7c:eb:50:9f:4a:34:34:9e:7d: 93:2f:70:28:5d:7a:94:7a:fb:d6:40:fa:7b:db:89: c6:7b:34:7e:0d:ac:f7:28:b6:3d:37:1e:26:bb:03: a9:47:76:fc:b1:7f:ca:e9:73:a5:d2:aa:66:55:54: 39:8f:ce:69:5d:96:39:a0:4c:28:cb:31:5c:c4:b3: 43:5c:ac:4a:08:97:32:c2:62:3d:5b:0a:80:d9:8b: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E2:FB:96:EE:BE:20:6D:2E:CF:7A:71:29:FA:F3:AD:03:C3:DB:77 X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:41:25:c8:24:d3:f6:c4:9f:01:e0:9c:63:a1:91:84:7d:50: 88:2b:f9:ab:94:23:1c:f0:c0:3b:46:16:3a:b4:8e:d5:be:42: 1a:37:af:af:d0:e7:04:73:d4:00:d3:d8:15:91:13:62:3c:10: c2:45:22:a5:85:db:9c:e6:ea:98:e1:f9:fc:56:7b:ba:f5:e8: 0d:bf:b8:c2:95:35:68:94:af:7e:66:11:93:06:a6:df:be:8e: 6d:0f:c6:7f:0e:4e:f6:2d:59:ba:e3:24:eb:96:43:52:13:af: db:10:f0:6e:d1:c5:07:dc:ca:a8:1a:93:b2:3b:fa:ad:c2:10: 76:35:a0:a8:7c:3c:c7:86:60:18:ba:25:32:da:fe:a8:00:15: fa:61:f1:7c:bb:90:1f:ca:e1:f0:27:fb:29:6f:58:13:93:d7: 00:78:f9:1f:b0:1e:6a:17:1a:b2:34:d6:9c:cc:69:48:af:84: 66:72:c0:e3:a4:f9:a7:ad:2c:91:6d:87:85:66:a7:17:1c:38: 9f:4d:3c:83:44:f6:b8:14:7b:87:65:1b:88:8a:20:e6:91:ae: 3d:43:07:4d:af:76:0b:6b:63:5c:81:4f:2a:4b:3b:95:44:0c: 20:29:34:24:32:c9:0e:a9:1c:d6:ae:2c:35:e1:03:44:9b:ad: 78:68:79:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwNTEyMTcyMTIyWhcNMjUwNTE5MTcyMTIyWjAYMRYwFAYD VQQDEw02ODIyMmUxMi05NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/rEVIg3SY6nslUG6+7T23Cg6y5Wgw4+rSx6yo5GIBgTvFs12F9jvpCuhLIH UKWT/Hd/mAHngUMDAeowOWirL6MmF3RiXxY2cY6L7DKeVof7438ywZjXSfvAIIjQ UzIchCAAAhYiMvLhfn+CQIyUS9mbSAqpJCd1meS0jwNWCTaLFRJmwaJ+wCBmd++6 5JOfMQe1yru2mU2pf9Q2NwUC/XKXlsXGDFE1gxt861CfSjQ0nn2TL3AoXXqUevvW QPp724nGezR+Daz3KLY9Nx4muwOpR3b8sX/K6XOl0qpmVVQ5j85pXZY5oEwoyzFc xLNDXKxKCJcywmI9WwqA2YsibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDi+5bu viBtLs96cSn6860Dw9t3MB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUQSXIJNP2xJ8B4JxjoZGEfVCIK/mrlCMc8MA7RhY6tI7VvkIaN6+v 0OcEc9QA09gVkRNiPBDCRSKlhduc5uqY4fn8Vnu69egNv7jClTVolK9+ZhGTBqbf vo5tD8Z/Dk72LVm64yTrlkNSE6/bEPBu0cUH3MqoGpOyO/qtwhB2NaCofDzHhmAY uiUy2v6oABX6YfF8u5AfyuHwJ/spb1gTk9cAePkfsB5qFxqyNNaczGlIr4RmcsDj pPmnrSyRbYeFZqcXHDifTTyDRPa4FHuHZRuIiiDmka49QwdNr3YLa2NcgU8qSzuV RAwgKTQkMskOqRzWriw14QNEm614aHlZ -----END CERTIFICATE-----Generated at Wed May 14 09:34:37 2025 by rpki-client