$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft File: fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json) Hash identifier: XO7LCNurEwUtCUidbfWOECrR/bsirsBYwdoXlInQHAA= Subject key identifier: 66:80:85:87:F3:AE:C3:10:C5:02:71:F9:48:4B:32:EC:1E:C2:50:96 Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED Certificate issuer: /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft Manifest number: 05FF Signing time: Fri 28 Mar 2025 23:09:09 +0000 Manifest this update: Fri 28 Mar 2025 23:09:08 +0000 Manifest next update: Fri 04 Apr 2025 23:09:08 +0000 Files and hashes: 1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: kVMhLwg7+NM2+Oord6xM+OhPXVJZuVnMdJ5clcaFRqU=) 2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: 71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151631 Validity Not Before: Mar 28 23:09:08 2025 GMT Not After : Apr 4 23:09:08 2025 GMT Subject: CN=67e72c14-7f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:69:4f:3b:cf:be:4a:0c:35:a2:d5:a7:15: 42:4d:c2:02:1a:e6:6f:a8:bb:d2:d0:e2:b5:03:b0: 96:fa:21:2e:df:6f:73:ad:4c:60:a0:c1:ad:9a:1d: 46:5c:7e:89:b3:40:59:08:00:d6:c0:4e:f0:a1:14: 97:4e:b4:6d:ea:40:38:4f:b0:bc:6f:28:6c:b8:e8: e9:58:42:f5:83:94:92:12:94:b1:f2:e2:0f:fa:c2: 63:12:b9:3a:2d:8e:91:ec:64:8a:43:30:76:17:30: f5:51:73:28:5e:d0:74:c5:73:ca:93:82:43:f1:38: 5f:5b:06:d2:a0:9b:63:97:a9:d6:f0:2a:9e:f4:ec: f8:a7:bc:d3:e5:61:32:b9:24:c2:26:e6:bf:76:89: 1d:2e:79:cc:c8:af:b4:4a:61:01:40:0f:0e:f3:c5: 28:02:a4:47:48:b3:16:de:1c:b9:8f:c0:6d:4c:9f: 3c:39:a8:1c:30:60:fc:90:7a:c2:76:ce:87:bf:30: 52:a5:3f:e1:54:49:f9:47:e4:0f:86:d1:bb:00:5e: 7a:9f:ac:b1:be:bc:f8:c8:0c:f5:7a:51:ce:b6:73: 69:de:ca:3e:53:88:c1:b8:bd:89:74:2a:93:9c:ad: 10:d4:9d:bc:cb:55:2b:10:42:88:11:64:b9:30:5f: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:80:85:87:F3:AE:C3:10:C5:02:71:F9:48:4B:32:EC:1E:C2:50:96 X509v3 Authority Key Identifier: keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3c:bf:d1:35:7f:41:a4:c2:fe:d3:5c:88:5c:32:6c:f5:31: a7:73:8a:e0:e1:77:b9:08:9d:7b:be:41:55:5f:92:ab:dd:1d: 00:92:10:27:0c:55:ee:3f:c1:b8:aa:b9:59:dd:91:68:b1:09: 63:2a:dd:09:c1:b8:85:76:0b:87:9d:fd:71:af:6a:a7:f4:29: 3a:6e:73:22:8f:e3:2e:1b:bb:9b:e3:f3:f8:04:1a:39:32:6d: 69:32:94:cd:02:70:c8:4c:35:e4:1f:60:2c:88:2f:9d:4f:74: bb:de:e2:02:fe:48:37:08:09:ec:a1:74:af:91:34:2d:01:43: 71:fe:b7:54:4d:55:68:9a:0f:cc:3a:a0:11:f9:ee:68:b1:63: ab:df:31:5a:b1:45:22:3d:0b:2f:de:fd:52:80:3f:64:54:7c: 3f:4b:d5:45:15:7e:7f:93:78:2b:0b:67:08:1c:e3:97:61:c8: 96:e2:67:21:b9:85:f6:8a:7d:e0:2b:62:18:54:e0:e2:99:29: 6b:67:28:65:8f:81:f2:39:0b:38:4b:56:19:af:6c:3f:99:27: 0a:5e:f7:28:8f:9a:b8:cc:3a:e5:5d:c0:31:29:1c:bf:1b:d2: c5:be:30:7f:ef:c8:e9:f1:6f:c3:25:e3:f3:ce:73:cb:68:4c: 76:1e:5f:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG M0IwODlBRUQwHhcNMjUwMzI4MjMwOTA4WhcNMjUwNDA0MjMwOTA4WjAYMRYwFAYD VQQDEw02N2U3MmMxNC03ZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sVpTzvPvkoMNaLVpxVCTcICGuZvqLvS0OK1A7CW+iEu329zrUxgoMGtmh1G XH6Js0BZCADWwE7woRSXTrRt6kA4T7C8byhsuOjpWEL1g5SSEpSx8uIP+sJjErk6 LY6R7GSKQzB2FzD1UXMoXtB0xXPKk4JD8ThfWwbSoJtjl6nW8Cqe9Oz4p7zT5WEy uSTCJua/dokdLnnMyK+0SmEBQA8O88UoAqRHSLMW3hy5j8BtTJ88OagcMGD8kHrC ds6HvzBSpT/hVEn5R+QPhtG7AF56n6yxvrz4yAz1elHOtnNp3so+U4jBuL2JdCqT nK0Q1J28y1UrEEKIEWS5MF/znQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaAhYfz rsMQxQJx+UhLMuwewlCWMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3 NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/PL/RNX9BpML+01yIXDJs9TGnc4rg4Xe5CJ17vkFVX5Kr3R0AkhAn DFXuP8G4qrlZ3ZFosQljKt0JwbiFdguHnf1xr2qn9Ck6bnMij+MuG7ub4/P4BBo5 Mm1pMpTNAnDITDXkH2AsiC+dT3S73uIC/kg3CAnsoXSvkTQtAUNx/rdUTVVomg/M OqAR+e5osWOr3zFasUUiPQsv3v1SgD9kVHw/S9VFFX5/k3grC2cIHOOXYciW4mch uYX2in3gK2IYVODimSlrZyhlj4HyOQs4S1YZr2w/mScKXvcoj5q4zDrlXcAxKRy/ G9LFvjB/78jp8W/DJePzznPLaEx2Hl/x -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client