$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: abE8HgoLFHhVtXCjnZFso23ggan6XWcFu71ZIupOgOI= Subject key identifier: 72:AB:3A:3E:A5:84:C2:B8:46:A4:4E:42:85:3B:F3:C8:68:4D:8C:BF Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: 88 Signing time: Sun 13 Apr 2025 05:17:39 +0000 Manifest this update: Sun 13 Apr 2025 05:17:38 +0000 Manifest next update: Sun 20 Apr 2025 05:17:38 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: dLIQnD4ZhuApjJl7X3Sb/NmjA98miDjenBMoj1uFk1E=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 05:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Apr 13 05:17:38 2025 GMT Not After : Apr 20 05:17:38 2025 GMT Subject: CN=67fb48f3-d618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3f:89:06:2d:82:40:6e:03:4b:79:82:84:51: f7:b3:ac:ac:ff:a0:73:20:b8:8a:dc:60:c3:d6:c0: a9:e4:c8:ec:fe:3f:68:16:72:e2:92:e1:9a:95:76: 88:93:4e:cb:59:dd:84:4b:da:d2:a3:b4:61:53:e1: 70:d6:b4:36:3b:d0:6b:d6:41:59:8c:80:82:c9:2c: 74:51:c2:4d:1b:2e:68:f7:23:c6:81:dd:e9:9d:11: 73:26:5a:4d:8a:39:f0:4c:36:3c:54:25:ad:3a:06: 46:3a:10:23:1d:e1:9d:19:d4:a5:3a:03:29:2b:2c: c2:89:ce:87:73:d9:a8:93:9b:5c:d8:49:17:57:50: dc:5d:48:63:a6:cb:99:1a:c1:33:53:b1:b4:c9:c3: 1e:a5:db:d0:27:48:3c:5b:35:9f:31:d7:ae:be:88: cf:fe:c1:53:a7:74:e5:f9:99:32:3c:4b:56:02:6a: 77:ff:d3:c1:8d:66:13:62:40:b2:b5:cd:7f:48:dd: e6:94:e0:41:6b:89:43:9f:40:30:4a:55:f8:18:ea: 53:28:e2:6b:c3:ac:0c:e0:ed:6e:15:da:2b:21:d7: 56:fb:ba:5f:ea:93:88:03:49:90:5a:b4:71:c6:75: 4d:62:c0:38:f5:4f:a3:15:71:4b:4e:16:35:f9:cd: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:3A:3E:A5:84:C2:B8:46:A4:4E:42:85:3B:F3:C8:68:4D:8C:BF X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6f:cc:1e:6c:55:12:da:1c:d3:a3:aa:eb:8d:2a:33:88:cb: 21:62:76:eb:50:94:12:b9:ef:1c:4e:81:ad:51:7e:2a:3b:ac: 99:62:1e:ff:53:8a:b5:c3:3b:21:fd:37:18:f8:f4:e9:fd:f6: 7b:73:53:3e:a0:7d:84:3e:11:66:46:c8:2c:b0:4a:fe:54:47: a3:c9:41:05:33:96:e5:66:89:36:ec:9d:11:21:eb:cd:21:0d: 4a:83:1d:d6:7e:62:ba:cd:ee:54:e1:d3:3c:ed:2a:6d:6f:73: 10:e0:f1:97:6d:86:78:1b:c8:cd:d3:31:3a:04:b2:06:2d:8d: 0d:af:55:3d:0c:30:f4:25:ed:42:33:85:f4:a8:29:9b:cd:f7: 51:0c:d6:3b:f2:89:d4:71:43:07:55:db:72:de:40:14:de:20: 3a:b0:2e:67:37:99:e0:74:a1:75:8d:02:47:da:cd:43:d0:1c: 67:da:cb:11:22:fa:e4:bc:a0:11:8e:15:80:14:13:cb:c3:0f: 81:5c:bb:c3:41:40:20:76:f3:ff:b0:54:cc:fd:b0:d5:b2:2e: 60:d3:e7:f2:8d:5a:7e:98:81:78:00:aa:a5:5d:df:33:3e:22: aa:14:6f:2d:28:5e:49:6d:5d:47:6a:5f:0e:a6:70:bc:00:4c: 3d:47:2d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwNDEzMDUxNzM4WhcNMjUwNDIwMDUxNzM4WjAYMRYwFAYD VQQDEw02N2ZiNDhmMy1kNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7D+JBi2CQG4DS3mChFH3s6ys/6BzILiK3GDD1sCp5Mjs/j9oFnLikuGalXaI k07LWd2ES9rSo7RhU+Fw1rQ2O9Br1kFZjICCySx0UcJNGy5o9yPGgd3pnRFzJlpN ijnwTDY8VCWtOgZGOhAjHeGdGdSlOgMpKyzCic6Hc9mok5tc2EkXV1DcXUhjpsuZ GsEzU7G0ycMepdvQJ0g8WzWfMdeuvojP/sFTp3Tl+ZkyPEtWAmp3/9PBjWYTYkCy tc1/SN3mlOBBa4lDn0AwSlX4GOpTKOJrw6wM4O1uFdorIddW+7pf6pOIA0mQWrRx xnVNYsA49U+jFXFLThY1+c1rWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKrOj6l hMK4RqROQoU788hoTYy/MB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5b8webFUS2hzTo6rrjSoziMshYnbrUJQSue8cToGtUX4qO6yZYh7/ U4q1wzsh/TcY+PTp/fZ7c1M+oH2EPhFmRsgssEr+VEejyUEFM5blZok27J0RIevN IQ1Kgx3WfmK6ze5U4dM87Sptb3MQ4PGXbYZ4G8jN0zE6BLIGLY0Nr1U9DDD0Je1C M4X0qCmbzfdRDNY78onUcUMHVdty3kAU3iA6sC5nN5ngdKF1jQJH2s1D0Bxn2ssR IvrkvKARjhWAFBPLww+BXLvDQUAgdvP/sFTM/bDVsi5g0+fyjVp+mIF4AKqlXd8z PiKqFG8tKF5JbV1Hal8OpnC8AEw9Ry29 -----END CERTIFICATE-----Generated at Tue Apr 15 06:59:13 2025 by rpki-client