$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: 9DOGH2998ovu/enwxtWoSaPI/Ttc7Us8uHTCbktQlL0= Subject key identifier: 32:52:78:8E:0D:D9:5D:61:DC:33:3A:51:95:49:F8:B8:46:73:A2:8F Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 052B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0503 Signing time: Wed 02 Apr 2025 23:47:08 +0000 Manifest this update: Wed 02 Apr 2025 23:47:08 +0000 Manifest next update: Wed 09 Apr 2025 23:47:08 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: WOU5wmijHjORaNUkFXIVQEj70TabDQbj4b4j/+YbsUM=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=) 4: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: P9CZgLXKg4nlDwcCC0YAzgQvS67VqqwFERe7OV2NbwE=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA Validity Not Before: Apr 2 23:47:08 2025 GMT Not After : Apr 9 23:47:08 2025 GMT Subject: CN=67edcc7c-8c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:a6:3a:63:56:07:f1:4a:56:e3:0d:70:ab: 83:e0:30:ea:7e:31:ff:45:b9:17:bb:f4:71:67:36: d7:84:69:c6:c3:fc:e2:e5:4e:f5:24:4b:f8:ee:91: 7a:87:0f:d3:15:06:fd:b9:88:67:94:6c:52:b2:23: 82:63:b0:ed:1e:e9:d4:d6:fc:8c:f4:35:34:6a:b3: db:d0:bd:b6:80:40:d2:12:fc:24:87:7e:54:4b:53: 09:59:9c:82:7e:d0:0b:bc:d4:2b:24:9a:37:78:b5: 57:d8:e1:9a:64:05:b7:b2:ae:a2:2f:b6:76:df:18: 6e:f5:27:e2:c6:a4:66:84:15:4c:a1:fb:91:08:50: 76:e3:d4:c8:68:53:e5:f6:dd:5d:e1:60:19:5b:fb: b0:a9:ca:4e:2e:4f:94:41:6f:83:77:75:0b:02:08: c4:f8:26:b5:e2:52:0b:6e:9f:67:91:d6:34:9f:b6: 9b:5c:43:43:c5:c8:70:f0:03:a4:40:ce:aa:5b:3b: 7d:a9:44:84:cb:c7:26:13:75:52:89:ad:08:d3:a5: 55:16:93:82:01:ad:32:4b:a6:fe:e9:17:3b:67:57: c2:6f:93:14:ae:75:95:ff:c0:07:3b:04:2b:ad:df: bc:31:73:b6:c5:7d:76:d8:76:16:db:ee:af:ba:1c: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:78:8E:0D:D9:5D:61:DC:33:3A:51:95:49:F8:B8:46:73:A2:8F X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:6e:9c:0b:39:0e:30:81:73:30:af:d4:49:ec:a0:65:08: 11:9e:f0:7f:29:80:87:8d:d6:57:26:ff:18:4b:28:a3:f2:5f: e3:c4:b3:79:38:08:c4:e1:57:55:36:45:47:50:43:bd:01:c4: e4:91:e1:1e:7b:9e:c5:d1:73:3e:9d:42:2a:b0:8b:b0:be:45: f1:40:91:28:d5:5e:af:4c:1a:6e:73:aa:b5:ef:46:30:fb:b6: c3:54:4e:8d:47:d5:d3:54:7a:07:13:ad:cf:e5:43:0d:69:3a: a4:95:d6:65:bb:4c:d5:c7:b4:ec:65:be:c2:56:a0:36:11:dc: af:f1:c0:6f:11:13:c7:c7:65:77:d9:4a:ab:f4:a1:86:8b:1e: a4:26:4a:67:c2:9f:87:02:59:47:c4:e4:50:7b:ab:1e:cf:b2: 4b:fb:9e:95:03:56:56:b8:ef:a4:53:c2:5f:23:6b:35:50:b5: 37:82:d6:8e:4c:64:2c:1b:bd:20:e2:c8:7f:48:c8:a1:8c:ea: e9:d1:fa:20:c7:53:79:32:03:9d:13:d5:e3:a3:51:2d:88:0e: 8f:92:d7:19:35:de:5c:38:fb:df:b7:55:fb:d7:00:7f:ea:19: 5a:cf:03:18:89:0f:b0:1c:22:ca:6e:34:1e:82:73:95:44:93: 10:5c:66:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNDAyMjM0NzA4WhcNMjUwNDA5MjM0NzA4WjAYMRYwFAYD VQQDEw02N2VkY2M3Yy04YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwqmOmNWB/FKVuMNcKuD4DDqfjH/RbkXu/RxZzbXhGnGw/zi5U71JEv47pF6 hw/TFQb9uYhnlGxSsiOCY7DtHunU1vyM9DU0arPb0L22gEDSEvwkh35US1MJWZyC ftALvNQrJJo3eLVX2OGaZAW3sq6iL7Z23xhu9SfixqRmhBVMofuRCFB249TIaFPl 9t1d4WAZW/uwqcpOLk+UQW+Dd3ULAgjE+Ca14lILbp9nkdY0n7abXENDxchw8AOk QM6qWzt9qUSEy8cmE3VSia0I06VVFpOCAa0yS6b+6Rc7Z1fCb5MUrnWV/8AHOwQr rd+8MXO2xX122HYW2+6vuhzNeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJSeI4N 2V1h3DM6UZVJ+LhGc6KPMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOuW6cCzkOMIFzMK/USeygZQgRnvB/KYCHjdZXJv8YSyij8l/jxLN5 OAjE4VdVNkVHUEO9AcTkkeEee57F0XM+nUIqsIuwvkXxQJEo1V6vTBpuc6q170Yw +7bDVE6NR9XTVHoHE63P5UMNaTqkldZlu0zVx7TsZb7CVqA2Edyv8cBvERPHx2V3 2Uqr9KGGix6kJkpnwp+HAllHxORQe6sez7JL+56VA1ZWuO+kU8JfI2s1ULU3gtaO TGQsG70g4sh/SMihjOrp0fogx1N5MgOdE9Xjo1EtiA6PktcZNd5cOPvft1X71wB/ 6hlazwMYiQ+wHCLKbjQegnOVRJMQXGZ5 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:24 2025 by rpki-client