$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: aCJERM0an4sssZBnYOtyce2U893SitfYnzZOjbucOuI= Subject key identifier: 92:3E:D8:EC:B4:B3:35:C4:EB:94:20:87:E9:75:BC:18:55:D6:AA:E7 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 1433 Signing time: Fri 28 Mar 2025 18:47:27 +0000 Manifest this update: Fri 28 Mar 2025 18:47:26 +0000 Manifest next update: Fri 04 Apr 2025 18:47:26 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: zD9QkHsZn27kUrb4DlunqZJS1Ot410dIT0ySYWmNjeY=) 2: 3E35840C523211EE84408677C4F9AE02.roa (hash: odJkbnbFNGEzA/PRiNLIwgSKK/+yDHEM4DmIe+O5Su4=) 3: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: KUS4Ox2gEpezMstwpX1CTC0qzfRNi3wV04onRKW1ycI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 18:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC Validity Not Before: Mar 28 18:47:26 2025 GMT Not After : Apr 4 18:47:26 2025 GMT Subject: CN=67e6eebf-2e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:f2:32:ba:9f:a8:78:47:24:93:e1:7d:02: da:f9:44:04:e5:83:fd:bc:48:3f:fa:60:6a:4e:38: 15:3c:82:db:46:03:72:a5:59:1d:eb:69:27:7f:4f: 86:b1:9e:36:fe:52:d7:6e:9c:4b:4b:75:ce:48:c9: d7:80:29:8f:3e:36:35:6a:19:93:38:0c:f5:51:9d: 78:50:f9:88:10:ac:91:22:98:de:67:8c:1c:0a:71: 11:be:5b:e3:9e:7c:3f:66:17:21:e9:82:7f:03:5b: f9:b7:f3:81:ce:81:53:92:6b:91:7b:4e:b2:7f:b9: ad:41:85:a4:b2:1d:ad:75:59:94:d7:d2:9d:eb:b5: 64:7e:ec:3e:58:aa:75:8b:95:0e:c5:72:3b:52:4d: 96:44:ba:2c:0c:a7:63:a2:06:96:79:49:2b:73:b6: 9b:49:a2:48:9c:b1:0d:2d:c3:85:b0:09:bb:d5:4f: b9:1a:b3:92:51:82:04:7e:3e:50:d3:bf:83:e1:9c: 05:9f:d5:34:1a:f4:a7:86:ab:68:f6:b1:d5:48:93: 13:d5:6c:d0:64:91:ef:40:b3:fd:83:ff:69:a9:ea: 7a:ce:3c:7f:bb:7d:c3:19:27:d5:42:c4:65:18:08: 24:fd:75:eb:88:23:d6:35:03:cc:e2:a5:1f:05:30: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3E:D8:EC:B4:B3:35:C4:EB:94:20:87:E9:75:BC:18:55:D6:AA:E7 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:11:a3:11:c6:da:88:7b:72:f4:b5:47:7d:78:c6:2a:0a:e5: a4:8c:e1:e9:69:c0:42:e1:1e:c4:48:b4:ec:eb:4b:28:39:d2: 3f:43:e2:dc:cc:5c:d4:f1:a8:87:87:1b:36:93:90:c9:0f:2c: af:5c:3b:03:d7:cc:8a:23:9e:1a:6b:4f:ee:40:60:7a:3d:1f: 70:5c:4e:7c:24:cb:b3:c2:5d:5e:78:71:87:df:9a:4f:ef:a5: a5:11:40:3e:42:fa:82:56:1e:82:4f:80:a3:40:31:04:be:c5: 0f:13:05:59:96:e2:95:3a:b7:67:ff:9d:48:d4:24:94:68:c4: 02:bc:91:f8:32:5f:96:a9:c0:66:4b:c5:19:0f:e7:c7:63:b5: 8d:ed:99:97:f9:51:f4:77:df:85:c4:e5:74:ee:f5:02:fe:d7: ca:49:0e:4b:87:ee:1e:ef:a3:02:cb:bf:c7:9f:cf:b4:60:87: bd:7e:1c:55:dd:cf:cb:d2:ad:10:c3:29:9c:1a:dc:20:09:69: b1:bc:92:64:b3:ff:08:a3:21:37:f8:27:3f:d4:b3:cb:e6:1e: c7:77:00:b3:f7:96:ca:14:2e:9b:08:97:e1:a5:77:23:c6:ec: 4c:9b:71:e3:c1:1c:93:8b:47:10:c2:14:f6:a4:f9:d9:42:4c: 89:e5:48:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwMzI4MTg0NzI2WhcNMjUwNDA0MTg0NzI2WjAYMRYwFAYD VQQDEw02N2U2ZWViZi0yZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmnyMrqfqHhHJJPhfQLa+UQE5YP9vEg/+mBqTjgVPILbRgNypVkd62knf0+G sZ42/lLXbpxLS3XOSMnXgCmPPjY1ahmTOAz1UZ14UPmIEKyRIpjeZ4wcCnERvlvj nnw/Zhch6YJ/A1v5t/OBzoFTkmuRe06yf7mtQYWksh2tdVmU19Kd67Vkfuw+WKp1 i5UOxXI7Uk2WRLosDKdjogaWeUkrc7abSaJInLENLcOFsAm71U+5GrOSUYIEfj5Q 07+D4ZwFn9U0GvSnhqto9rHVSJMT1WzQZJHvQLP9g/9pqep6zjx/u33DGSfVQsRl GAgk/XXriCPWNQPM4qUfBTCO0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJI+2Oy0 szXE65Qgh+l1vBhV1qrnMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLEaMRxtqIe3L0tUd9eMYqCuWkjOHpacBC4R7ESLTs60soOdI/Q+Lc zFzU8aiHhxs2k5DJDyyvXDsD18yKI54aa0/uQGB6PR9wXE58JMuzwl1eeHGH35pP 76WlEUA+QvqCVh6CT4CjQDEEvsUPEwVZluKVOrdn/51I1CSUaMQCvJH4Ml+WqcBm S8UZD+fHY7WN7ZmX+VH0d9+FxOV07vUC/tfKSQ5Lh+4e76MCy7/Hn8+0YIe9fhxV 3c/L0q0QwymcGtwgCWmxvJJks/8IoyE3+Cc/1LPL5h7HdwCz95bKFC6bCJfhpXcj xuxMm3HjwRyTi0cQwhT2pPnZQkyJ5Ujh -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:34 2025 by rpki-client