$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: 8Jk0BUIeQFkoFDsBqnd/2TxRC1oHCl3g5hxvOMoULIo= Subject key identifier: 2D:4E:6A:0D:1C:31:30:7F:C7:0E:33:75:BE:C3:60:45:DF:21:DA:CE Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 18FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 18ED Signing time: Fri 04 Apr 2025 16:31:19 +0000 Manifest this update: Fri 04 Apr 2025 16:31:18 +0000 Manifest next update: Fri 11 Apr 2025 16:31:18 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: P0GPl2DQr9hlRUHIAsfaVejvt1Pl1DW6jjcnA1m0TVs=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: PICALzvWwC2BCBHA+goW7MkEqKBmFK0k5ksrLUCg2MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6394 (0x18fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0 Validity Not Before: Apr 4 16:31:18 2025 GMT Not After : Apr 11 16:31:18 2025 GMT Subject: CN=67f00956-3bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:1d:32:e1:a3:12:98:38:2b:b2:8c:c4:d6: 20:82:44:b7:5b:a7:62:4b:94:61:43:29:7e:31:de: f8:20:db:e7:58:29:89:6c:4f:6d:0f:af:6a:89:14: c9:90:17:7d:a0:94:18:b3:1e:a1:ca:a9:74:bb:1d: d0:bc:6f:78:da:bf:8f:96:9d:17:70:f5:c3:fc:45: 75:21:c8:44:8b:32:f7:46:27:48:33:0a:02:ad:e3: f6:a5:b3:f5:5a:2b:c4:a2:1f:62:2b:32:cb:5c:1e: f8:1b:25:ad:66:6d:1a:f4:a8:e2:fc:98:de:71:e9: ab:bd:73:26:25:eb:d7:e8:89:ca:d7:cc:8f:2f:73: 81:f1:cb:86:6c:e0:ef:fd:12:45:18:f2:c0:5f:04: 7d:2b:c7:99:72:b5:b5:88:1d:e8:c6:9f:d2:b8:05: 80:93:49:23:7b:ab:d2:60:0b:90:bf:88:1b:6f:51: a5:cb:8a:58:f8:d7:7b:8f:5c:ff:9d:d4:93:01:0d: ad:bc:bc:e1:4a:27:b1:82:cd:bf:ee:87:4f:8d:56: 20:01:3e:a7:2d:67:b4:5b:47:25:53:be:7a:bd:cf: ed:33:ca:a7:25:b5:bf:8f:93:12:63:a6:5a:3a:70: 3c:1c:e9:34:b1:09:c0:db:21:49:7b:40:fe:97:4c: 12:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:6A:0D:1C:31:30:7F:C7:0E:33:75:BE:C3:60:45:DF:21:DA:CE X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7d:47:eb:f2:68:c8:e7:d0:9c:13:e6:75:e0:98:aa:f7:28: 7a:fe:d3:a0:b8:69:c8:84:a9:44:44:cd:b7:5a:e5:be:5b:89: 36:0c:4b:2d:ec:f5:30:d3:5a:75:0f:db:d4:ce:82:db:ee:d8: 18:39:0f:56:00:a3:51:eb:a9:c3:90:12:88:05:d5:cc:3a:14: 54:8d:c1:83:06:ee:21:57:c4:a8:c9:a8:9d:83:ac:26:e7:3c: 39:4a:ac:07:58:88:b0:17:de:c7:5d:b6:29:51:68:15:0d:39: 70:15:e3:81:ac:23:60:e0:a7:9a:b6:cf:be:62:5d:26:2b:d9: fa:e7:be:e2:16:02:2c:be:33:8e:a2:02:eb:0e:ab:3b:88:5d: c6:8c:b6:7b:1e:62:9a:35:d8:ed:1f:ff:c3:16:10:08:32:8b: 50:c0:be:6e:df:12:9d:aa:0f:b7:55:00:6e:ab:b2:b7:74:bc: d1:9c:2e:06:0e:dd:e7:c8:30:04:a4:d8:cf:86:14:bb:cb:69: 61:7a:c6:ed:b8:22:1c:81:3f:ec:87:d9:46:6a:2a:7e:74:a6: ad:d4:26:23:6c:5d:21:71:19:79:cb:bb:24:e4:a0:b5:e4:e7: fc:63:5c:d3:84:93:d8:6f:8d:6e:e5:a2:87:82:99:6d:2a:dc: 09:2b:98:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNDA0MTYzMTE4WhcNMjUwNDExMTYzMTE4WjAYMRYwFAYD VQQDEw02N2YwMDk1Ni0zYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAAdMuGjEpg4K7KMxNYggkS3W6diS5RhQyl+Md74INvnWCmJbE9tD69qiRTJ kBd9oJQYsx6hyql0ux3QvG942r+Plp0XcPXD/EV1IchEizL3RidIMwoCreP2pbP1 WivEoh9iKzLLXB74GyWtZm0a9Kji/JjecemrvXMmJevX6InK18yPL3OB8cuGbODv /RJFGPLAXwR9K8eZcrW1iB3oxp/SuAWAk0kje6vSYAuQv4gbb1Gly4pY+Nd7j1z/ ndSTAQ2tvLzhSiexgs2/7odPjVYgAT6nLWe0W0clU756vc/tM8qnJbW/j5MSY6Za OnA8HOk0sQnA2yFJe0D+l0wSTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1Oag0c MTB/xw4zdb7DYEXfIdrOMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVfUfr8mjI59CcE+Z14Jiq9yh6/tOguGnIhKlERM23WuW+W4k2DEst 7PUw01p1D9vUzoLb7tgYOQ9WAKNR66nDkBKIBdXMOhRUjcGDBu4hV8Soyaidg6wm 5zw5SqwHWIiwF97HXbYpUWgVDTlwFeOBrCNg4Keats++Yl0mK9n6577iFgIsvjOO ogLrDqs7iF3GjLZ7HmKaNdjtH//DFhAIMotQwL5u3xKdqg+3VQBuq7K3dLzRnC4G Dt3nyDAEpNjPhhS7y2lhesbtuCIcgT/sh9lGaip+dKat1CYjbF0hcRl5y7sk5KC1 5Of8Y1zThJPYb41u5aKHgpltKtwJK5jG -----END CERTIFICATE-----Generated at Sat Apr 5 16:25:28 2025 by rpki-client