$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: oQzh3MMD/pW+fdgZDpjxc9VxSjJ3KFIqYVX2lLd0B0I= Subject key identifier: CA:FB:EB:85:8F:D7:95:27:F4:0F:F1:46:33:EE:02:4C:B0:BC:0C:B3 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 0515 Signing time: Sat 29 Mar 2025 00:00:41 +0000 Manifest this update: Sat 29 Mar 2025 00:00:41 +0000 Manifest next update: Sat 05 Apr 2025 00:00:41 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: t2ypLqy4c/zyNWc/DO0ZBnetuTTmyNMSNJTs+lNZxrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40 Validity Not Before: Mar 29 00:00:41 2025 GMT Not After : Apr 5 00:00:41 2025 GMT Subject: CN=67e73829-f3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:47:89:6b:83:ad:99:d8:15:ea:c8:54:c3: d0:65:18:e6:9f:a6:bb:db:cb:3f:b4:81:c9:d3:6b: fb:8f:f0:dc:4b:4c:46:77:5d:58:b5:7a:c9:c6:67: dc:b0:c9:f6:85:63:3d:69:aa:94:ea:d0:73:45:aa: 15:ee:0e:f1:0f:cb:4e:15:e9:ab:09:42:aa:10:80: 40:55:6f:87:a6:2d:fd:5a:9f:0d:49:25:d6:c7:84: 35:94:41:b8:2e:c9:e7:c8:8a:f0:d7:d9:da:80:a3: 7f:ec:48:03:38:a1:05:34:82:b8:74:14:08:7a:e8: d7:65:6b:bc:ba:f6:47:4e:a5:c0:26:fd:b1:60:95: f1:63:f1:9a:ca:11:0f:66:9c:00:c4:f6:3d:54:64: dd:ad:3b:47:e6:35:f2:bf:c9:d6:63:56:e6:fa:c4: 69:ea:d6:8b:26:a2:39:b9:1b:f7:cc:de:96:aa:48: f4:96:db:ba:7c:30:75:eb:ba:8f:98:cc:2f:8e:fd: 15:b9:06:9a:f9:9e:5b:2a:6a:44:3c:38:b2:07:62: 45:50:69:a7:8f:33:81:e2:fc:e2:50:c1:f1:94:52: eb:8c:f4:9d:bd:d9:44:d1:55:ae:48:ae:79:e9:38: 78:38:bb:74:50:5b:45:df:87:7b:ac:01:e8:a3:b5: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:EB:85:8F:D7:95:27:F4:0F:F1:46:33:EE:02:4C:B0:BC:0C:B3 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:05:85:a5:d2:b0:4c:87:57:0c:ab:a9:6a:95:5f:f4:76:d5: 59:9b:f4:49:df:e0:95:2a:61:4a:09:fa:1f:22:26:f2:9b:13: c2:7b:c8:d9:88:d8:6e:12:48:fb:6e:ae:26:eb:4d:3d:48:67: 9b:3c:16:c1:e4:03:44:03:f6:8a:5b:8f:5f:2f:2b:f6:2e:37: 18:f8:15:14:86:02:6a:b1:0b:27:07:26:6a:50:d0:ad:49:15: 4f:ed:e5:2a:df:fe:01:82:b1:b6:ac:7f:34:ec:77:ac:6b:48: f3:6b:80:07:dc:96:2b:a5:10:72:8b:b4:94:ac:91:48:73:6b: f5:8d:69:f9:82:42:cc:41:18:d5:3b:c9:d8:8c:85:df:03:6e: 34:ec:ac:2f:d0:dd:0c:13:3a:9c:6c:5a:8f:21:8e:0e:16:65: 96:18:c9:5b:fa:ea:9a:e4:ea:e8:c9:27:85:f5:f2:d7:6e:c3: 10:42:40:95:2c:e5:44:ab:60:64:97:62:02:05:c9:9c:62:25: a9:06:2b:5d:fc:91:ca:0b:7d:20:0e:fa:27:13:35:ae:78:c7: 50:3b:55:54:b4:4b:20:7e:d8:92:ae:22:f4:15:d0:d6:71:15: c5:2a:ac:70:1f:b3:a7:fe:26:d4:58:a9:00:ab:28:a4:53:2b: 82:ee:90:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwMzI5MDAwMDQxWhcNMjUwNDA1MDAwMDQxWjAYMRYwFAYD VQQDEw02N2U3MzgyOS1mM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3RHiWuDrZnYFerIVMPQZRjmn6a728s/tIHJ02v7j/DcS0xGd11YtXrJxmfc sMn2hWM9aaqU6tBzRaoV7g7xD8tOFemrCUKqEIBAVW+Hpi39Wp8NSSXWx4Q1lEG4 LsnnyIrw19nagKN/7EgDOKEFNIK4dBQIeujXZWu8uvZHTqXAJv2xYJXxY/GayhEP ZpwAxPY9VGTdrTtH5jXyv8nWY1bm+sRp6taLJqI5uRv3zN6Wqkj0ltu6fDB167qP mMwvjv0VuQaa+Z5bKmpEPDiyB2JFUGmnjzOB4vziUMHxlFLrjPSdvdlE0VWuSK55 6Th4OLt0UFtF34d7rAHoo7WFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr764WP 15Un9A/xRjPuAkywvAyzMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSBYWl0rBMh1cMq6lqlV/0dtVZm/RJ3+CVKmFKCfofIibymxPCe8jZ iNhuEkj7bq4m6009SGebPBbB5ANEA/aKW49fLyv2LjcY+BUUhgJqsQsnByZqUNCt SRVP7eUq3/4BgrG2rH807Hesa0jza4AH3JYrpRByi7SUrJFIc2v1jWn5gkLMQRjV O8nYjIXfA2407Kwv0N0MEzqcbFqPIY4OFmWWGMlb+uqa5OroySeF9fLXbsMQQkCV LOVEq2Bkl2ICBcmcYiWpBitd/JHKC30gDvonEzWueMdQO1VUtEsgftiSriL0FdDW cRXFKqxwH7On/ibUWKkAqyikUyuC7pD6 -----END CERTIFICATE-----Generated at Fri Apr 4 23:51:32 2025 by rpki-client