$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: z7HgVM9HFYyIf7n38iN6Sxux8jsjijsnMBZakbgsgfA= Subject key identifier: C2:D5:1B:A2:46:C6:73:DE:60:86:E6:A7:43:10:43:78:CA:7D:F0:CC Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B21 Signing time: Wed 02 Apr 2025 19:14:08 +0000 Manifest this update: Wed 02 Apr 2025 19:14:07 +0000 Manifest next update: Wed 09 Apr 2025 19:14:07 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: Jso6u/56uZoLdIGWHlcRtvjurPVhfCY//IlwLRFUius=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D Validity Not Before: Apr 2 19:14:07 2025 GMT Not After : Apr 9 19:14:07 2025 GMT Subject: CN=67ed8c80-d91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:02:d8:68:9b:d4:1b:8f:df:b4:f2:d9:8c: ce:f0:a8:96:d5:4b:39:a4:83:de:b4:d1:00:38:d9: c8:ea:d9:6e:09:e5:31:c7:a9:91:39:22:81:95:bf: 1f:f6:f8:4c:3a:12:93:b8:70:fa:59:56:22:0f:69: ce:39:38:20:28:8b:ec:42:03:e1:55:93:0b:42:c2: 40:78:55:3f:b8:05:33:0b:2f:38:7d:a9:81:7f:85: 11:98:66:ed:78:d0:f1:c8:ad:44:c1:85:78:c2:0e: 8b:7c:0f:26:b7:d1:64:1a:5b:7c:b5:18:32:78:99: 3e:4b:4e:4f:c1:3b:9c:ff:90:03:5e:9c:47:52:bf: 78:5a:b6:65:b9:09:48:a5:0a:de:ed:f1:2b:2c:9a: 59:42:9e:37:5d:ab:e2:72:6a:09:f7:f9:65:c0:19: 65:13:b8:f2:fd:d0:fa:1e:a4:5b:9e:74:a7:6a:50: 13:55:0a:e0:8a:45:a8:12:c6:db:a9:b9:41:43:dd: 47:05:04:7a:80:14:3f:c4:d6:05:7e:58:38:c4:c4: a4:df:fb:e1:4c:2b:9d:7a:de:6c:6f:b8:61:d5:af: fe:78:ea:79:15:81:e5:79:54:8f:cc:1f:c2:6f:c3: 55:1a:e4:8f:b0:e6:b0:f5:23:5b:37:b7:42:23:d5: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:1B:A2:46:C6:73:DE:60:86:E6:A7:43:10:43:78:CA:7D:F0:CC X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ce:60:e4:9b:72:08:26:a7:ad:71:f7:d9:40:80:44:6f:cd: 78:06:69:ca:58:09:82:4e:17:41:de:84:7a:45:35:62:c2:f6: ca:e8:ab:32:da:70:9f:45:d0:40:92:94:dd:2b:0e:27:57:27: c7:53:4f:f4:80:e4:12:9b:af:63:23:85:ba:43:5b:cb:a5:45: f3:8d:cb:ec:e2:a8:8f:03:99:f3:2f:30:e2:56:9d:55:ef:0c: c2:f4:1e:e4:ca:cd:65:9f:86:64:65:5f:ff:74:a7:47:24:7d: 1a:c5:b0:68:ba:dd:1d:f7:05:11:e0:4a:24:ae:ea:a9:dc:4e: 5a:a2:f5:27:ec:51:9f:b4:5e:e7:68:03:ed:9d:62:8e:e4:11: 9b:10:08:19:c8:89:98:9b:92:0b:fb:94:8d:c4:01:ad:36:a2: 15:2e:e4:2b:95:bc:ca:ab:55:fc:d1:22:42:49:d6:47:26:4c: d2:2a:e3:e0:db:6a:4d:2f:39:a3:f2:06:9c:85:9e:37:d0:b3: cd:d6:e8:49:ff:f0:82:c8:92:03:06:86:5a:47:e9:6e:c8:ec: f7:36:57:a4:30:b6:e6:04:01:80:ad:71:87:0a:55:0c:f4:32: 06:e9:3a:d5:d7:01:88:49:17:5e:e7:14:7a:5e:c4:2f:d9:34: b2:87:6d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUwNDAyMTkxNDA3WhcNMjUwNDA5MTkxNDA3WjAYMRYwFAYD VQQDEw02N2VkOGM4MC1kOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq50C2Gib1BuP37Ty2YzO8KiW1Us5pIPetNEAONnI6tluCeUxx6mROSKBlb8f 9vhMOhKTuHD6WVYiD2nOOTggKIvsQgPhVZMLQsJAeFU/uAUzCy84famBf4URmGbt eNDxyK1EwYV4wg6LfA8mt9FkGlt8tRgyeJk+S05PwTuc/5ADXpxHUr94WrZluQlI pQre7fErLJpZQp43XavicmoJ9/llwBllE7jy/dD6HqRbnnSnalATVQrgikWoEsbb qblBQ91HBQR6gBQ/xNYFflg4xMSk3/vhTCudet5sb7hh1a/+eOp5FYHleVSPzB/C b8NVGuSPsOaw9SNbN7dCI9W3aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLVG6JG xnPeYIbmp0MQQ3jKffDMMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQzmDkm3IIJqetcffZQIBEb814BmnKWAmCThdB3oR6RTViwvbK6Ksy 2nCfRdBAkpTdKw4nVyfHU0/0gOQSm69jI4W6Q1vLpUXzjcvs4qiPA5nzLzDiVp1V 7wzC9B7kys1ln4ZkZV//dKdHJH0axbBout0d9wUR4Eokruqp3E5aovUn7FGftF7n aAPtnWKO5BGbEAgZyImYm5IL+5SNxAGtNqIVLuQrlbzKq1X80SJCSdZHJkzSKuPg 22pNLzmj8gachZ430LPN1uhJ//CCyJIDBoZaR+luyOz3NlekMLbmBAGArXGHClUM 9DIG6TrV1wGISRde5xR6XsQv2TSyh229 -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:24 2025 by rpki-client