$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: xnbFQMtURcqQJr9SW5r0xy/vv7VjZ3xWyEurccvvLt0= Subject key identifier: 56:2F:34:20:83:77:2F:81:97:27:49:C1:7A:5D:06:3D:CF:1F:1F:D7 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F2F Signing time: Wed 14 May 2025 17:43:33 +0000 Manifest this update: Wed 14 May 2025 17:43:33 +0000 Manifest next update: Wed 21 May 2025 17:43:33 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: OQfNRiKYr5EuiPu3m/wsVwp5BhCMN9IqkYBCwSdXTSk=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: May 14 17:43:33 2025 GMT Not After : May 21 17:43:33 2025 GMT Subject: CN=6824d645-0a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:14:fd:78:26:f1:da:d6:e3:d8:2e:3d:d6: 3b:6b:c7:d0:82:8e:b3:f8:21:b0:8c:f1:4f:ff:13: 16:91:21:57:87:06:2d:1f:88:7a:f8:81:00:86:96: f8:9d:c6:f6:e6:78:da:2c:a5:eb:c4:9e:90:dd:e2: 7d:c9:45:c4:81:6d:df:9c:db:45:b9:5b:6d:7b:ec: 3f:c3:3a:28:bc:30:96:80:69:34:06:50:99:e9:48: 96:47:31:90:11:a8:91:71:11:0c:e3:ee:88:8f:f4: b6:b1:8b:10:ab:f9:f0:24:1d:87:b8:a3:3b:bc:38: 68:49:36:92:58:2f:60:b1:1e:23:51:66:df:bd:f7: 3f:14:08:38:a4:9c:58:e6:1e:a7:9f:bb:8e:8f:14: b3:f3:8c:ea:8a:0a:a0:df:b9:8a:b1:b1:41:81:2c: cc:d8:71:41:76:91:83:79:72:f3:ab:58:d5:58:c9: 7e:4e:9b:8f:ca:99:a0:37:d2:eb:bc:3e:21:16:cd: d2:76:d9:30:2a:f9:96:aa:07:c0:57:5f:ae:cc:c0: 9f:da:2b:1b:74:de:c9:93:55:dc:e8:c1:cc:11:76: b6:0c:38:2f:20:a9:c5:20:04:ee:87:ba:83:92:6d: 65:81:f2:a9:45:11:1e:96:93:b3:80:c8:2e:10:d8: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2F:34:20:83:77:2F:81:97:27:49:C1:7A:5D:06:3D:CF:1F:1F:D7 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:04:79:89:ce:57:7c:1a:4e:01:91:9d:8e:d8:33:57:94:4b: e6:61:0c:9a:e0:b7:24:39:35:81:c3:44:d1:79:93:c1:ab:1b: ed:fe:a6:dc:aa:a9:8e:49:b5:8f:83:59:d3:68:f0:8d:ab:4d: 2b:a2:df:7c:6c:59:ed:dc:2e:7f:88:3b:45:d0:14:2f:4c:73: 16:a6:26:2a:0b:d9:e1:11:06:80:62:f6:fd:d0:b9:53:d5:f6: 50:3d:02:65:1f:15:32:85:74:10:3d:36:11:38:ba:45:ff:96: 6f:c0:e3:bc:24:db:e6:1c:9e:13:25:47:b7:0e:2c:c3:a4:8f: b2:47:55:0e:00:18:63:60:97:25:b7:48:f6:bf:59:b6:55:dc: 9e:4f:e4:af:a6:6e:5b:6d:2b:c0:04:54:50:9c:e4:e5:bd:ac: c7:40:85:73:07:e5:55:99:4c:59:08:4c:89:d5:ab:6b:27:fa: 44:35:c8:03:a0:e1:67:0b:45:4a:c6:e7:b0:de:25:e8:93:a0: 0b:e7:bf:62:a7:22:ce:5c:2f:51:ea:87:0c:a2:68:8c:0a:e2: b0:7b:fe:89:90:3c:25:d7:32:3f:82:ab:25:37:e5:9c:b3:c8: 82:26:85:34:a7:95:a6:e7:90:37:2b:92:3e:d4:0c:ed:b6:4c: 78:2a:7b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNTE0MTc0MzMzWhcNMjUwNTIxMTc0MzMzWjAYMRYwFAYD VQQDEw02ODI0ZDY0NS0wYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PYU/Xgm8drW49guPdY7a8fQgo6z+CGwjPFP/xMWkSFXhwYtH4h6+IEAhpb4 ncb25njaLKXrxJ6Q3eJ9yUXEgW3fnNtFuVtte+w/wzoovDCWgGk0BlCZ6UiWRzGQ EaiRcREM4+6Ij/S2sYsQq/nwJB2HuKM7vDhoSTaSWC9gsR4jUWbfvfc/FAg4pJxY 5h6nn7uOjxSz84zqigqg37mKsbFBgSzM2HFBdpGDeXLzq1jVWMl+TpuPypmgN9Lr vD4hFs3SdtkwKvmWqgfAV1+uzMCf2isbdN7Jk1Xc6MHMEXa2DDgvIKnFIATuh7qD km1lgfKpRREelpOzgMguENiHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYvNCCD dy+BlydJwXpdBj3PHx/XMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxBHmJzld8Gk4BkZ2O2DNXlEvmYQya4LckOTWBw0TReZPBqxvt/qbc qqmOSbWPg1nTaPCNq00rot98bFnt3C5/iDtF0BQvTHMWpiYqC9nhEQaAYvb90LlT 1fZQPQJlHxUyhXQQPTYROLpF/5ZvwOO8JNvmHJ4TJUe3DizDpI+yR1UOABhjYJcl t0j2v1m2VdyeT+Svpm5bbSvABFRQnOTlvazHQIVzB+VVmUxZCEyJ1atrJ/pENcgD oOFnC0VKxuew3iXok6AL579ipyLOXC9R6ocMomiMCuKwe/6JkDwl1zI/gqslN+Wc s8iCJoU0p5Wm55A3K5I+1Azttkx4KnuK -----END CERTIFICATE-----Generated at Thu May 15 19:23:22 2025 by rpki-client