$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: htix+a2E0GWO8Rm+59HBURcXZeHwfsr3lbo4KoKEX3M= Subject key identifier: DD:BE:ED:99:83:0F:43:73:17:0A:E7:85:7B:7C:B3:A1:6C:6F:B4:02 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 1031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 101A Signing time: Tue 08 Apr 2025 17:27:23 +0000 Manifest this update: Tue 08 Apr 2025 17:27:22 +0000 Manifest next update: Tue 15 Apr 2025 17:27:22 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: oUJRPrlcKKFKfyzyOtlxAEjlSY0mDCesj5p9DX9zFgg=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: SaPDHfkJq6+olJp+pCEwWUsbU8ig75YR7kl23PYTmrE=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4145 (0x1031) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B Validity Not Before: Apr 8 17:27:22 2025 GMT Not After : Apr 15 17:27:22 2025 GMT Subject: CN=67f55c7a-3aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0a:4e:5a:66:bd:1e:a5:71:fe:08:a1:fd:b8: 88:52:4a:79:db:d6:76:40:8f:e7:b9:65:93:71:00: d6:44:0d:2a:4f:db:44:a9:97:a2:aa:fd:4e:88:d5: 4f:56:57:6d:9b:57:fc:07:10:89:ee:d8:7f:39:be: 64:8f:14:b4:c9:e7:45:c8:91:5d:45:da:d2:78:4c: 71:ee:1b:60:ae:d8:55:84:ca:66:55:16:db:1a:91: de:2b:68:f1:14:dc:ca:cd:2a:fb:5e:61:02:8d:3e: 6e:b7:71:1d:06:7a:52:c0:9d:b9:82:71:f2:df:4c: 38:8b:f5:93:7e:64:15:63:8f:3c:a9:d2:81:36:23: d3:0e:43:a2:2f:d6:85:50:75:07:15:db:1f:40:85: ef:dc:c4:c1:b6:28:f9:92:54:d7:4b:f5:27:f3:21: 68:62:2a:a1:a4:7a:79:58:c7:b2:45:da:4e:49:6f: 82:ef:42:d5:aa:42:26:e1:f4:23:ea:ee:c4:c3:d7: 0a:b7:da:18:47:77:2d:95:dc:86:4b:71:bf:f2:05: 9b:75:4b:19:50:d8:c3:c9:0d:34:d6:c3:dd:c2:e2: 22:b2:f9:74:93:15:04:70:18:a4:55:9c:da:fa:30: 82:eb:75:52:01:d7:d8:47:84:cb:93:29:e3:0f:0d: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BE:ED:99:83:0F:43:73:17:0A:E7:85:7B:7C:B3:A1:6C:6F:B4:02 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:22:34:57:07:1c:63:37:f6:ca:1f:8d:72:43:d2:3c:10:2e: ca:7d:ef:06:1a:4c:1e:f2:8a:2b:32:f5:ad:44:f6:d0:f3:8a: 26:ca:e9:d4:e0:ed:52:1b:0f:d4:a5:79:4a:f0:9a:97:68:0d: d3:03:7c:5c:e8:30:14:b0:2d:92:f3:0c:93:a2:b1:f3:b4:a2: 97:67:60:45:5c:dd:5b:f8:37:26:f6:17:74:15:09:74:88:64: 63:bc:d7:ea:93:df:9e:1f:5a:dd:44:4d:c4:a1:98:91:8e:ac: f8:42:a3:e4:ec:55:81:19:95:64:3f:7d:9b:0d:e9:d7:17:2d: 1a:5d:fe:b2:6a:b0:db:04:60:37:26:55:4e:a5:9d:f7:c2:2d: 1f:66:49:68:92:62:43:d2:dd:66:ac:1b:51:50:e8:e5:d2:22: c9:12:d4:eb:85:0d:2b:7c:6f:83:d8:fc:6c:5c:1f:b7:e0:87: 88:d9:ce:84:48:02:12:20:5e:89:0c:74:01:72:18:12:25:bf: ef:15:ac:9a:75:af:16:ae:7f:cf:59:05:4f:0e:41:f5:b7:85: 17:a4:e6:4c:ce:1d:45:98:e5:14:36:be:cf:1e:c6:ce:00:cc: 72:b5:12:ae:4a:22:33:e4:84:4c:2c:1f:8d:e2:6f:f7:3f:25: 4b:c1:a8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjUwNDA4MTcyNzIyWhcNMjUwNDE1MTcyNzIyWjAYMRYwFAYD VQQDEw02N2Y1NWM3YS0zYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gpOWma9HqVx/gih/biIUkp529Z2QI/nuWWTcQDWRA0qT9tEqZeiqv1OiNVP Vldtm1f8BxCJ7th/Ob5kjxS0yedFyJFdRdrSeExx7htgrthVhMpmVRbbGpHeK2jx FNzKzSr7XmECjT5ut3EdBnpSwJ25gnHy30w4i/WTfmQVY488qdKBNiPTDkOiL9aF UHUHFdsfQIXv3MTBtij5klTXS/Un8yFoYiqhpHp5WMeyRdpOSW+C70LVqkIm4fQj 6u7Ew9cKt9oYR3ctldyGS3G/8gWbdUsZUNjDyQ001sPdwuIisvl0kxUEcBikVZza +jCC63VSAdfYR4TLkynjDw30vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2+7ZmD D0NzFwrnhXt8s6Fsb7QCMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwIjRXBxxjN/bKH41yQ9I8EC7Kfe8GGkwe8oorMvWtRPbQ84omyunU 4O1SGw/UpXlK8JqXaA3TA3xc6DAUsC2S8wyTorHztKKXZ2BFXN1b+Dcm9hd0FQl0 iGRjvNfqk9+eH1rdRE3EoZiRjqz4QqPk7FWBGZVkP32bDenXFy0aXf6yarDbBGA3 JlVOpZ33wi0fZklokmJD0t1mrBtRUOjl0iLJEtTrhQ0rfG+D2PxsXB+34IeI2c6E SAISIF6JDHQBchgSJb/vFayada8Wrn/PWQVPDkH1t4UXpOZMzh1FmOUUNr7PHsbO AMxytRKuSiIz5IRMLB+N4m/3PyVLwajo -----END CERTIFICATE-----Generated at Fri Apr 11 16:14:46 2025 by rpki-client