$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: 2CCNCB3FSZ1AHm9MP5zuY/JMSsBZcRCxINd3yDbTK9k= Subject key identifier: FD:B5:5D:76:47:A3:55:57:32:8A:B3:76:88:3B:8A:57:75:71:25:86 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 0238 Signing time: Thu 17 Apr 2025 01:32:49 +0000 Manifest this update: Thu 17 Apr 2025 01:32:48 +0000 Manifest next update: Thu 24 Apr 2025 01:32:48 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: kssy5RFodD+dP3cNgdmkA5yiXkftGurBL2ArPgbQS9c=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 01:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Apr 17 01:32:48 2025 GMT Not After : Apr 24 01:32:48 2025 GMT Subject: CN=68005a41-c439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:50:f6:ff:00:f2:45:7f:35:8e:7e:7f:30: bb:66:9c:24:59:50:1e:d9:70:14:56:7d:38:d0:42: 7c:2d:7b:b2:fa:3f:c6:1e:2d:ea:40:ed:00:68:f6: 34:cf:c7:70:55:52:26:71:1f:50:f5:6c:48:5d:41: 96:17:72:a6:fa:60:04:75:e3:57:fb:21:a2:21:fb: 40:7e:2b:b8:8d:e3:1c:83:11:25:10:5a:e4:27:60: e5:d8:ae:23:52:e3:71:c3:e5:7f:3e:0f:32:05:73: f3:ee:ab:b4:2e:8d:8c:55:ed:85:f8:9b:38:59:fa: bc:6a:dd:dc:c2:78:92:6d:d0:8c:d6:ce:0e:ea:ec: 66:23:7d:12:98:43:cb:6c:16:d7:1c:92:90:e0:af: 3f:dd:12:51:5c:55:35:51:84:bf:9c:46:bb:da:3a: 86:95:c2:ca:45:f8:f2:4d:ca:cf:97:bc:38:90:81: bd:3b:74:a6:24:df:26:c4:f0:1c:8e:8f:d3:7b:1e: e3:95:12:6e:10:b1:13:f4:99:bc:15:a8:70:f8:a1: c3:4e:2c:0b:10:aa:7d:0a:11:44:d6:05:70:d8:43: 52:5a:8a:b5:94:5d:90:fc:8a:dc:78:7a:ed:bb:bf: d0:b4:2c:a2:a9:b8:83:77:2f:c5:17:2a:d4:ae:04: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B5:5D:76:47:A3:55:57:32:8A:B3:76:88:3B:8A:57:75:71:25:86 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:9f:e1:e1:41:09:41:52:2a:5e:37:34:45:66:f3:9f:92:de: 6c:55:4b:40:bd:4d:69:3d:ee:9a:71:cd:f6:a8:7a:37:68:a8: 5d:27:8f:29:14:47:92:f2:a6:0c:05:12:ea:42:1f:3d:82:90: ea:86:98:85:41:43:91:c3:ac:ae:33:fd:5b:e9:62:ff:46:03: e4:52:6f:26:cb:a6:24:fa:8e:4b:a3:a2:66:d5:25:1c:a5:aa: ba:19:00:a1:8c:29:3b:85:e5:70:3d:02:73:9e:c2:ed:9a:dc: 32:ec:f6:a7:0a:b1:2a:1b:0a:6b:cd:b4:6c:ba:0f:d9:74:63: e1:60:e4:74:50:46:07:d3:6b:5c:a1:16:31:3c:cb:4a:a5:28: 64:0b:dc:34:d4:85:17:1f:77:a7:14:35:bc:45:e1:6f:d0:20: 60:b8:6c:16:e4:bc:9d:9d:c7:56:7d:ed:bd:93:51:c6:80:67: e1:db:ad:9a:db:e8:5b:87:6f:d0:7c:6c:ef:5e:66:6a:ce:aa: 96:03:20:5d:ae:93:b8:91:bd:b5:fb:af:99:7d:c9:18:2d:59: e6:33:3f:e7:99:26:71:1b:d6:19:41:60:ba:2b:92:22:67:b7: f6:6e:87:e9:2b:5d:6a:f2:c2:73:d2:58:4c:bb:67:8c:d5:b8: 16:17:7d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwNDE3MDEzMjQ4WhcNMjUwNDI0MDEzMjQ4WjAYMRYwFAYD VQQDEw02ODAwNWE0MS1jNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlBQ9v8A8kV/NY5+fzC7ZpwkWVAe2XAUVn040EJ8LXuy+j/GHi3qQO0AaPY0 z8dwVVImcR9Q9WxIXUGWF3Km+mAEdeNX+yGiIftAfiu4jeMcgxElEFrkJ2Dl2K4j UuNxw+V/Pg8yBXPz7qu0Lo2MVe2F+Js4Wfq8at3cwniSbdCM1s4O6uxmI30SmEPL bBbXHJKQ4K8/3RJRXFU1UYS/nEa72jqGlcLKRfjyTcrPl7w4kIG9O3SmJN8mxPAc jo/Tex7jlRJuELET9Jm8Fahw+KHDTiwLEKp9ChFE1gVw2ENSWoq1lF2Q/IrceHrt u7/QtCyiqbiDdy/FFyrUrgSwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP21XXZH o1VXMoqzdog7ild1cSWGMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCn+HhQQlBUipeNzRFZvOfkt5sVUtAvU1pPe6acc32qHo3aKhdJ48p FEeS8qYMBRLqQh89gpDqhpiFQUORw6yuM/1b6WL/RgPkUm8my6Yk+o5Lo6Jm1SUc paq6GQChjCk7heVwPQJznsLtmtwy7PanCrEqGwprzbRsug/ZdGPhYOR0UEYH02tc oRYxPMtKpShkC9w01IUXH3enFDW8ReFv0CBguGwW5LydncdWfe29k1HGgGfh262a 2+hbh2/QfGzvXmZqzqqWAyBdrpO4kb21+6+ZfckYLVnmMz/nmSZxG9YZQWC6K5Ii Z7f2bofpK11q8sJz0lhMu2eM1bgWF33F -----END CERTIFICATE-----Generated at Thu Apr 17 12:45:58 2025 by rpki-client