$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: jSeVRpHVH4wws4JSA3gpOFFafK5bFwHiTCwozEGBSGI= Subject key identifier: 43:F0:00:BB:FB:91:3F:08:C0:94:6F:32:04:A6:C6:55:EB:55:02:3D Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 067E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 0670 Signing time: Sat 10 May 2025 21:57:35 +0000 Manifest this update: Sat 10 May 2025 21:57:35 +0000 Manifest next update: Sat 17 May 2025 21:57:35 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: XYLBU8lEu0kxSdoL92WM7NR+xZUIzzJnMdgO0MkPuhI=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: May 10 21:57:35 2025 GMT Not After : May 17 21:57:35 2025 GMT Subject: CN=681fcbcf-bff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:5f:e1:71:7c:9c:83:ff:e2:bd:a5:76:b2: e7:0d:a3:70:73:e5:e6:a9:f6:64:ac:2d:3b:43:4d: 87:14:d6:04:97:be:f5:0a:72:d1:51:c1:0d:5d:f6: 13:e4:24:83:d4:67:e1:4a:17:16:83:f8:3d:77:88: 46:bf:19:10:de:cd:48:1d:77:01:11:08:05:c9:61: 57:da:96:55:70:dd:fd:c1:0b:7c:f1:9f:0c:b0:3d: b0:d8:79:af:c8:86:ae:49:15:07:e7:dd:6d:91:84: c3:4f:f1:31:d5:49:7e:28:9c:de:da:5a:97:7d:de: 82:d5:13:a0:36:bd:5e:99:cb:65:2d:f6:0b:ea:cb: 6e:00:4a:f1:94:9a:57:37:d4:72:25:8e:a0:bd:cc: 36:10:60:b9:5d:80:f5:ea:0b:24:88:fd:ed:ee:9c: 70:9b:c2:4f:15:3b:45:81:c9:ba:7e:9e:c2:f1:d7: c7:ba:03:bf:1d:5d:fe:7e:de:4b:d4:37:d9:56:4a: ee:c4:a9:42:b0:26:7d:44:c9:2a:41:c4:44:52:64: bb:61:72:34:41:3d:8f:c4:3b:f0:fc:c7:db:73:0e: 38:49:7f:f9:07:01:12:43:8d:da:d9:3f:2f:e0:b5: 70:37:97:ef:1e:06:b9:b3:5a:d5:f7:38:a1:23:08: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:00:BB:FB:91:3F:08:C0:94:6F:32:04:A6:C6:55:EB:55:02:3D X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cf:d6:c9:3f:4b:99:99:bf:e7:ab:54:86:ab:2f:14:97:31: 00:4d:6f:1a:79:14:51:11:14:d9:cb:1a:11:6e:3c:bc:4f:00: 5a:bc:fe:b6:96:31:d6:92:c4:4e:75:4f:cf:3c:28:e7:b8:85: 44:d4:de:af:f1:d6:ec:a2:be:42:a5:6d:1c:49:17:21:7b:be: 7e:c3:b7:17:39:a2:96:96:a8:ab:ca:4e:da:7a:7b:d9:45:51: 21:ce:ed:6a:73:a8:cf:e9:8c:b3:32:4a:97:0c:7c:13:bf:7e: 8e:0f:fb:1d:88:ae:d0:45:21:50:00:c6:e8:4b:95:a5:07:2f: fa:22:e5:fe:15:a6:a9:2c:59:d8:e7:eb:56:7c:77:7e:b9:4b: a5:0f:5a:0a:5b:ad:0b:0e:f2:b1:52:71:15:d6:94:86:19:21: 8a:55:8c:1a:d0:52:90:e3:54:b6:f9:d2:6a:ca:2f:ed:da:6b: 41:c2:ce:74:f6:95:58:2e:80:8e:e8:8c:cd:24:d1:ea:ff:34: 8a:41:88:e4:32:81:e6:b7:36:a4:39:40:51:b9:e3:8b:ab:ab: db:e2:23:60:e1:92:00:f3:26:46:2b:f5:63:09:ca:5e:fe:a4: 3b:23:1a:93:33:47:ab:07:23:e1:2d:57:59:8c:05:4a:a0:cb: 13:18:87:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNTEwMjE1NzM1WhcNMjUwNTE3MjE1NzM1WjAYMRYwFAYD VQQDEw02ODFmY2JjZi1iZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxVf4XF8nIP/4r2ldrLnDaNwc+XmqfZkrC07Q02HFNYEl771CnLRUcENXfYT 5CSD1GfhShcWg/g9d4hGvxkQ3s1IHXcBEQgFyWFX2pZVcN39wQt88Z8MsD2w2Hmv yIauSRUH591tkYTDT/Ex1Ul+KJze2lqXfd6C1ROgNr1emctlLfYL6stuAErxlJpX N9RyJY6gvcw2EGC5XYD16gskiP3t7pxwm8JPFTtFgcm6fp7C8dfHugO/HV3+ft5L 1DfZVkruxKlCsCZ9RMkqQcREUmS7YXI0QT2PxDvw/Mfbcw44SX/5BwESQ43a2T8v 4LVwN5fvHga5s1rV9zihIwheswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPwALv7 kT8IwJRvMgSmxlXrVQI9MB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4z9bJP0uZmb/nq1SGqy8UlzEATW8aeRRRERTZyxoRbjy8TwBavP62 ljHWksROdU/PPCjnuIVE1N6v8dbsor5CpW0cSRche75+w7cXOaKWlqiryk7aenvZ RVEhzu1qc6jP6YyzMkqXDHwTv36OD/sdiK7QRSFQAMboS5WlBy/6IuX+FaapLFnY 5+tWfHd+uUulD1oKW60LDvKxUnEV1pSGGSGKVYwa0FKQ41S2+dJqyi/t2mtBws50 9pVYLoCO6IzNJNHq/zSKQYjkMoHmtzakOUBRueOLq6vb4iNg4ZIA8yZGK/VjCcpe /qQ7IxqTM0erByPhLVdZjAVKoMsTGIca -----END CERTIFICATE-----Generated at Sun May 11 22:17:34 2025 by rpki-client