$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: PnP0655hLdVuC39h4SnVJDtTyWLFSM0ebqctR7L/B3g= Subject key identifier: CE:8F:3C:5A:AF:D8:FB:1C:D2:58:C3:FA:96:60:F3:D8:2A:85:41:4C Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 0204 Signing time: Sat 29 Mar 2025 02:17:23 +0000 Manifest this update: Sat 29 Mar 2025 02:17:23 +0000 Manifest next update: Sat 05 Apr 2025 02:17:23 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: miN5kQD5d4Q5pJH6519bg7AO8Jis3Y2t5ebN7MxQGyA=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB Validity Not Before: Mar 29 02:17:23 2025 GMT Not After : Apr 5 02:17:23 2025 GMT Subject: CN=67e75833-a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:d7:d9:9b:0d:ad:14:30:1b:cc:b9:0b:2b: 5c:1e:7d:49:85:52:6d:a2:a9:34:11:ad:53:cb:bc: 17:60:d3:6f:86:84:80:9a:00:a8:de:62:4d:a9:9a: be:12:85:41:1b:a0:1f:fc:9a:84:30:60:6d:6b:bc: 7d:1b:4d:02:18:81:c8:34:4e:4b:90:11:88:11:83: d7:bf:27:b5:36:d0:46:4e:2c:e0:4c:5e:e2:36:1e: 5f:74:26:1d:fa:13:71:d0:81:13:20:b1:c7:c5:97: 91:68:a3:9d:e6:eb:c6:46:2d:37:cd:98:24:10:63: 0b:ff:5c:26:4d:49:20:53:5c:a6:1d:c7:ad:7a:46: f1:87:88:ec:fc:f2:6c:5e:6e:ba:51:ea:f1:22:80: a4:a1:57:cf:43:b6:6c:bb:7d:62:bb:8a:f2:ee:78: 68:bf:4a:61:e3:6b:c7:58:83:46:25:35:8f:7e:a7: 02:de:df:f3:22:95:c8:9a:4f:cc:98:dc:7d:e7:d0: 54:72:bd:f1:76:ae:c9:91:a1:f8:7b:2a:7b:86:60: f6:8b:26:52:41:01:f0:fe:20:ea:24:4c:ba:db:5b: 06:71:2d:3b:4f:67:23:0b:8a:1e:84:a8:50:16:48: 2e:7e:b7:39:5c:be:e2:6e:a7:c7:4e:eb:90:95:ec: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8F:3C:5A:AF:D8:FB:1C:D2:58:C3:FA:96:60:F3:D8:2A:85:41:4C X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:76:1d:a8:b5:e2:db:f4:37:eb:c4:13:8a:e5:06:3e:06:dd: 91:a0:f3:b4:7e:02:81:b7:80:16:09:43:a1:98:20:9f:4f:53: 3c:d6:ef:28:bd:e8:27:dc:db:8d:93:90:3b:ee:a9:f8:69:57: 46:5e:41:25:00:39:80:d9:11:bd:2f:5d:19:68:5d:8e:a9:24: 9b:fc:8a:35:54:f9:97:4e:2d:01:2d:e1:5a:20:d3:2b:57:1e: 8b:97:18:2d:cd:62:45:e8:da:73:ad:d5:bc:23:91:d6:55:90: c6:84:46:49:12:b4:c5:05:0e:53:98:ff:3e:2c:af:77:03:a8: 51:c1:aa:e7:a7:89:76:f0:8c:27:e2:d6:41:50:ef:61:d9:17: 02:ef:f7:9d:e6:16:a8:46:b6:25:95:15:ff:03:f4:45:1e:45: 39:97:0f:05:3b:d8:1d:76:4f:82:3d:f0:9f:d4:54:dd:8e:eb: 02:a3:60:6f:73:e5:5b:9c:dc:05:38:63:7e:5c:4a:18:51:50: b7:3b:c7:b6:2c:a2:44:3a:8a:86:3a:8f:b4:ad:89:0d:af:dc: f2:de:ba:b4:cf:e9:e4:07:ba:23:ef:9c:1e:2b:99:a3:ce:dc: d7:98:b8:16:24:48:bc:e5:8d:c2:b8:d9:56:fc:3d:47:a7:11: 4e:77:22:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUwMzI5MDIxNzIzWhcNMjUwNDA1MDIxNzIzWjAYMRYwFAYD VQQDEw02N2U3NTgzMy1hNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aLX2ZsNrRQwG8y5CytcHn1JhVJtoqk0Ea1Ty7wXYNNvhoSAmgCo3mJNqZq+ EoVBG6Af/JqEMGBta7x9G00CGIHINE5LkBGIEYPXvye1NtBGTizgTF7iNh5fdCYd +hNx0IETILHHxZeRaKOd5uvGRi03zZgkEGML/1wmTUkgU1ymHcetekbxh4js/PJs Xm66UerxIoCkoVfPQ7Zsu31iu4ry7nhov0ph42vHWINGJTWPfqcC3t/zIpXImk/M mNx959BUcr3xdq7JkaH4eyp7hmD2iyZSQQHw/iDqJEy621sGcS07T2cjC4oehKhQ Fkgufrc5XL7ibqfHTuuQleyl+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6PPFqv 2Psc0ljD+pZg89gqhUFMMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfdh2oteLb9DfrxBOK5QY+Bt2RoPO0fgKBt4AWCUOhmCCfT1M81u8o vegn3NuNk5A77qn4aVdGXkElADmA2RG9L10ZaF2OqSSb/Io1VPmXTi0BLeFaINMr Vx6LlxgtzWJF6NpzrdW8I5HWVZDGhEZJErTFBQ5TmP8+LK93A6hRwarnp4l28Iwn 4tZBUO9h2RcC7/ed5haoRrYllRX/A/RFHkU5lw8FO9gddk+CPfCf1FTdjusCo2Bv c+VbnNwFOGN+XEoYUVC3O8e2LKJEOoqGOo+0rYkNr9zy3rq0z+nkB7oj75weK5mj ztzXmLgWJEi85Y3CuNlW/D1HpxFOdyL7 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:30 2025 by rpki-client