$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: 5vKx3bGpUijgYN4G/lP2f7MdGxXnOhxKmbEu/4bippM= Subject key identifier: 72:F4:E0:73:C2:FC:7A:C1:64:0E:38:45:DB:6B:3B:1A:99:7E:95:24 Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 0512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 050D Signing time: Thu 08 May 2025 23:26:26 +0000 Manifest this update: Thu 08 May 2025 23:26:26 +0000 Manifest next update: Thu 15 May 2025 23:26:26 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: aNQlSJJOXrM7fWNbvZRnjtz6B4l6KdXPZSt3jwiXfUI=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: May 8 23:26:26 2025 GMT Not After : May 15 23:26:26 2025 GMT Subject: CN=681d3da2-196c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:b7:7b:8a:3e:67:44:d7:8c:39:99:1c:cf: 42:c4:31:36:d7:a3:ac:64:dd:43:40:6e:ca:cd:6c: ee:3a:b6:fa:b9:26:68:74:ae:f7:35:30:3e:72:88: c0:19:a7:19:05:67:05:64:4d:96:8e:7c:ff:85:49: f6:d4:33:39:11:03:5d:0b:8e:2e:3e:a0:cf:c9:04: 9c:2c:98:20:1f:ee:34:9a:c1:b9:10:eb:c9:b2:d0: f8:d7:d3:28:24:5d:a8:29:41:17:5a:3d:5d:65:10: ca:89:fa:d1:3a:e6:4c:f4:bd:10:7d:ce:22:54:2a: d3:f6:0c:e2:01:21:8c:ab:b9:32:b4:44:b3:22:01: 41:54:f3:a7:36:2f:b3:18:ab:89:6f:dd:2d:a0:02: b5:c2:84:52:e9:93:b6:a0:4e:f6:ae:1b:a2:03:c4: d1:aa:7d:03:4e:06:bb:d1:7d:01:1d:d7:89:d8:79: 81:51:9d:6b:64:14:cd:38:d8:6d:d0:c6:4f:04:84: 0c:e4:e7:0e:9e:4b:d3:92:1c:2f:d4:d7:89:3e:7a: 5e:a4:7d:6b:ea:34:da:1a:0b:4a:6d:e6:88:0e:d3: eb:dd:82:e7:26:9e:6e:0b:d3:e9:b1:b3:5c:89:69: 1c:fe:83:2f:8e:7e:c5:55:ae:45:80:55:ba:c4:b2: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:E0:73:C2:FC:7A:C1:64:0E:38:45:DB:6B:3B:1A:99:7E:95:24 X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:1a:af:9d:fa:85:99:f7:2f:d0:15:fc:98:93:0e:4a:be: 6a:13:4d:7e:8b:a1:d1:c2:b5:5d:de:19:e8:8a:e1:d3:1c:c1: f2:d8:bb:25:72:20:5b:a5:5b:33:68:5c:3f:c8:a6:eb:72:e7: e2:34:e2:33:a6:ca:87:c6:2b:95:7e:4c:98:0c:ee:f3:0c:f5: 8b:a9:f6:5f:2f:e3:b6:04:b5:82:f2:7e:89:60:24:8e:6d:0c: f0:a1:ba:f2:aa:b9:ac:03:0c:a1:92:bf:c0:56:86:be:c0:ba: 89:1b:16:1d:b4:0c:31:9d:e2:12:b7:46:b4:4e:63:da:87:dc: e4:99:04:ce:8c:2a:1f:17:fe:a6:1a:8d:d2:e1:5f:35:83:3f: c3:ba:9f:22:69:3c:d6:ad:af:a9:f2:64:c0:75:76:48:cd:ee: d4:7d:71:4c:07:55:68:e0:93:17:aa:1b:42:8a:a8:d5:52:32: 4d:2c:02:c3:5c:b5:8b:15:d3:e7:48:ca:e0:57:c4:e7:2b:bd: c0:51:bc:22:37:49:dd:04:2d:1b:4f:41:00:d5:90:96:2f:3d: a1:4c:fa:ac:5a:66:aa:21:70:ff:48:8d:2f:c3:42:a3:82:69: c0:5c:9a:5a:34:8b:e2:76:e5:7d:ee:29:c2:df:9a:5d:4d:1c: d2:c8:7c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwNTA4MjMyNjI2WhcNMjUwNTE1MjMyNjI2WjAYMRYwFAYD VQQDEw02ODFkM2RhMi0xOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F63e4o+Z0TXjDmZHM9CxDE216OsZN1DQG7KzWzuOrb6uSZodK73NTA+cojA GacZBWcFZE2Wjnz/hUn21DM5EQNdC44uPqDPyQScLJggH+40msG5EOvJstD419Mo JF2oKUEXWj1dZRDKifrROuZM9L0Qfc4iVCrT9gziASGMq7kytESzIgFBVPOnNi+z GKuJb90toAK1woRS6ZO2oE72rhuiA8TRqn0DTga70X0BHdeJ2HmBUZ1rZBTNONht 0MZPBIQM5OcOnkvTkhwv1NeJPnpepH1r6jTaGgtKbeaIDtPr3YLnJp5uC9PpsbNc iWkc/oMvjn7FVa5FgFW6xLIb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL04HPC /HrBZA44RdtrOxqZfpUkMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2xRqvnfqFmfcv0BX8mJMOSr5qE01+i6HRwrVd3hnoiuHTHMHy2Lsl ciBbpVszaFw/yKbrcufiNOIzpsqHxiuVfkyYDO7zDPWLqfZfL+O2BLWC8n6JYCSO bQzwobryqrmsAwyhkr/AVoa+wLqJGxYdtAwxneISt0a0TmPah9zkmQTOjCofF/6m Go3S4V81gz/Dup8iaTzWra+p8mTAdXZIze7UfXFMB1Vo4JMXqhtCiqjVUjJNLALD XLWLFdPnSMrgV8TnK73AUbwiN0ndBC0bT0EA1ZCWLz2hTPqsWmaqIXD/SI0vw0Kj gmnAXJpaNIviduV97inC35pdTRzSyHzV -----END CERTIFICATE-----Generated at Sat May 10 20:56:21 2025 by rpki-client