$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: 8AqYOmTpzpcdv3U3R8Vxl3JsQUs33x1m8CwC1tWiw9E= Subject key identifier: BE:4C:6D:B9:B1:1F:8D:B1:21:98:C5:54:E3:0B:BD:72:36:36:26:78 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 1B Signing time: Tue 13 May 2025 07:12:13 +0000 Manifest this update: Tue 13 May 2025 07:12:13 +0000 Manifest next update: Tue 20 May 2025 07:12:13 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: mm/2h9kuQYyNndKTxd9Jd8Ce+bmVMx3gUpTKovXgonE=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: 1E9Uj0G9r4nxcyscWv579FgIwgT3cljTL2z6/KS3cW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: May 13 07:12:13 2025 GMT Not After : May 20 07:12:13 2025 GMT Subject: CN=6822f0cd-3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:58:b2:ce:c0:67:c1:df:af:60:a8:62:47:9a: 9c:1e:88:10:c8:82:85:b9:6c:ba:e2:0c:4b:9c:ca: 24:40:15:d3:3c:72:fd:ec:25:48:be:69:4c:47:11: 6f:68:8c:bd:ac:fc:f8:e0:f6:47:ce:c2:67:98:63: f9:46:fa:9e:77:4f:a3:19:27:0f:4f:e1:50:38:0c: 50:f6:38:05:56:ba:06:30:3b:8f:7a:2c:28:b5:cb: c8:98:d7:f6:55:db:81:d6:5a:ae:16:cd:cf:c1:69: 35:ab:a9:91:fb:7d:6b:b7:e7:a5:2c:78:1b:a9:d2: ba:48:8e:30:a6:9f:28:ef:78:f8:62:70:58:50:8d: 5e:53:31:a2:e0:4c:33:82:ea:f5:c7:a2:3e:74:d5: c2:39:b5:7d:85:c3:55:3c:11:47:cb:ec:34:de:e6: 52:e8:98:cb:b5:08:3d:25:d8:f2:03:b5:a1:cc:49: 25:38:52:da:2d:45:55:f2:00:76:9b:39:01:d7:37: 2d:39:b6:30:f7:dd:fa:34:9d:42:ce:46:45:cf:0a: 59:7c:33:ca:85:32:07:e2:e3:84:3b:e7:5e:6c:c3: d2:4a:87:5f:91:ca:05:9d:aa:cc:5e:8d:8c:c7:bb: ad:1f:33:ee:91:12:a8:8e:43:95:23:79:4d:86:71: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:6D:B9:B1:1F:8D:B1:21:98:C5:54:E3:0B:BD:72:36:36:26:78 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8b:58:23:72:5c:82:c2:8b:61:2a:7f:ea:ca:b4:f4:d3:90: 6b:fd:e4:cc:97:8d:d8:a9:7e:a0:18:f5:e5:c8:c5:38:c7:f0: 2a:f0:19:4d:c3:ed:16:0e:d5:f4:9b:e6:98:45:58:75:5a:9e: 0b:ff:8c:30:05:e3:ae:b5:52:28:7d:6e:07:49:6c:3a:5e:5f: cb:54:12:f8:eb:99:99:8d:15:67:ca:2e:10:69:1a:28:71:da: 90:7e:37:29:73:8a:d2:95:cc:8c:a0:c2:f3:cb:ea:df:d1:8c: c2:4b:60:56:8d:d2:63:ee:9b:4a:9d:f7:a1:d3:b5:59:59:06: 39:ba:43:85:f0:c6:ea:13:39:61:92:06:88:cf:8e:f2:45:ed: 8e:38:41:3b:c4:8a:2b:12:83:43:97:2d:23:75:cd:57:b5:94: 47:06:cb:c7:fd:b4:9e:73:e2:2a:2f:e6:c2:10:12:8b:cc:18: ae:e2:8b:2f:8d:a9:c7:06:7f:37:7b:fb:8c:d6:54:3d:e2:69: af:94:c5:57:a4:c5:19:0f:7c:a2:b6:83:17:c4:c5:54:97:27: 4e:8b:3d:48:34:18:f9:9b:8f:c1:49:e5:14:a5:25:6e:da:c7: 30:7a:91:c0:4c:f0:03:48:2c:7f:a5:d5:58:ce:6f:59:24:d2: ce:4a:15:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA1MTMwNzEyMTNaFw0yNTA1MjAwNzEyMTNaMBgxFjAUBgNV BAMTDTY4MjJmMGNkLTNmYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKWLLOwGfB369gqGJHmpweiBDIgoW5bLriDEucyiRAFdM8cv3sJUi+aUxHEW9o jL2s/Pjg9kfOwmeYY/lG+p53T6MZJw9P4VA4DFD2OAVWugYwO496LCi1y8iY1/ZV 24HWWq4Wzc/BaTWrqZH7fWu356UseBup0rpIjjCmnyjvePhicFhQjV5TMaLgTDOC 6vXHoj501cI5tX2Fw1U8EUfL7DTe5lLomMu1CD0l2PIDtaHMSSU4UtotRVXyAHab OQHXNy05tjD33fo0nULORkXPCll8M8qFMgfi44Q7515sw9JKh1+RygWdqsxejYzH u60fM+6REqiOQ5UjeU2GcbFNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvkxtubEf jbEhmMVU4wu9cjY2JngwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+LWCNyXILCi2Eqf+rKtPTTkGv95MyXjdipfqAY9eXIxTjH8CrwGU3D 7RYO1fSb5phFWHVangv/jDAF4661Uih9bgdJbDpeX8tUEvjrmZmNFWfKLhBpGihx 2pB+NylzitKVzIygwvPL6t/RjMJLYFaN0mPum0qd96HTtVlZBjm6Q4XwxuoTOWGS BojPjvJF7Y44QTvEiisSg0OXLSN1zVe1lEcGy8f9tJ5z4iov5sIQEovMGK7iiy+N qccGfzd7+4zWVD3iaa+UxVekxRkPfKK2gxfExVSXJ06LPUg0GPmbj8FJ5RSlJW7a xzB6kcBM8ANILH+l1VjOb1kk0s5KFZ4= -----END CERTIFICATE-----Generated at Wed May 14 18:27:21 2025 by rpki-client