$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: l9ulqaSN9d6JXd6Yz/qIkEkyStYcHZ65CPjaeQ/773Q= Subject key identifier: B0:B6:FE:D4:50:69:C6:51:54:71:4F:98:89:AA:D1:2B:3F:D2:45:DB Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 0147 Signing time: Sat 29 Mar 2025 03:43:21 +0000 Manifest this update: Sat 29 Mar 2025 03:43:21 +0000 Manifest next update: Sat 05 Apr 2025 03:43:21 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: t7vGfujBHi16Q8b0gMNUwDi40NKlm/Im3FD5sKvXE00=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: 9AH1NZbw9uu7EqokTVDorUK6PzEhD6fiNSzdF99vNEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208 Validity Not Before: Mar 29 03:43:21 2025 GMT Not After : Apr 5 03:43:21 2025 GMT Subject: CN=67e76c59-d3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:05:e9:ce:e0:85:21:42:16:da:a2:e2:e4: 43:5a:c8:d5:71:e9:62:4f:9e:81:d5:44:58:89:51: 14:2d:33:3f:5d:bf:f6:f1:7b:02:51:61:64:23:a9: 05:5f:e4:48:2b:f6:3a:9a:3a:56:91:de:33:ff:db: 2d:03:2a:02:65:08:3e:3c:d2:75:2d:87:fd:fd:f2: 08:b6:49:b0:0b:1e:aa:c3:94:03:d2:19:db:55:82: 0b:a7:39:c9:c1:1b:c3:0c:25:03:72:c3:11:ea:74: 33:72:06:5f:d0:b9:a5:af:b5:2a:ab:eb:0e:45:43: 75:9e:63:f8:7c:1a:16:3a:8c:99:c4:51:ea:ca:b4: ac:09:d4:58:09:fa:3c:3b:86:a0:99:30:72:20:90: 7e:a0:63:cc:ee:52:c4:dd:71:b1:ec:ad:8f:3c:4d: 48:a3:2a:8e:db:6e:ba:0e:36:5b:87:43:3f:32:f4: a3:05:0c:9a:55:95:d2:fe:9f:18:72:67:1a:2b:01: 7f:35:86:e5:38:c9:55:03:f9:f2:bd:c5:f2:a1:e4: ff:9e:6c:f5:42:51:11:61:3b:47:41:15:c7:e2:e3: 08:31:53:4a:61:12:d6:47:69:c1:26:d0:52:59:ad: 8c:14:7c:ed:39:e6:3e:aa:8d:d8:a8:46:41:3f:ec: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:FE:D4:50:69:C6:51:54:71:4F:98:89:AA:D1:2B:3F:D2:45:DB X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:67:f9:63:54:c2:60:e4:29:18:da:7e:e6:c6:74:99:5f:a1: 8f:69:04:5d:63:2b:3a:72:6f:dd:1e:8a:03:56:68:df:8d:ef: 77:be:e2:21:a9:02:2c:8b:44:7a:4e:a0:bf:c2:a4:45:d9:8c: 1a:97:58:b6:a5:f8:ad:c4:de:57:10:19:71:d2:3d:24:31:de: 43:21:8a:7b:ca:87:a0:34:e2:28:2f:a9:17:96:53:ff:48:9b: 2f:cf:54:69:22:56:8d:0e:35:cb:62:85:90:81:fb:6a:46:7c: bd:32:f4:36:86:c4:49:60:eb:27:b5:86:09:c5:a7:0d:4e:25: a7:de:e7:e5:20:34:a1:7b:44:ba:f0:b0:18:b9:e2:ad:fd:9c: e2:9c:71:b6:6c:ed:45:77:ac:e7:07:04:82:e2:a7:db:01:6c: 6b:c9:7a:16:55:d0:ff:37:80:4e:e5:bf:dc:11:93:62:b0:19: 28:ed:b2:e1:2a:5c:74:e2:31:ce:e2:4c:5b:b6:24:d7:1b:46: dc:e2:bc:3d:e9:db:3d:40:2a:d6:3c:0f:de:83:bf:c5:d6:b6: f8:85:4b:b6:c3:36:71:9e:98:2e:b3:cd:05:7c:79:ee:e5:fa: 3b:23:aa:65:7d:e2:88:33:29:52:22:23:14:83:d7:11:c6:e6: 87:78:ea:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUwMzI5MDM0MzIxWhcNMjUwNDA1MDM0MzIxWjAYMRYwFAYD VQQDEw02N2U3NmM1OS1kM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO0F6c7ghSFCFtqi4uRDWsjVceliT56B1URYiVEULTM/Xb/28XsCUWFkI6kF X+RIK/Y6mjpWkd4z/9stAyoCZQg+PNJ1LYf9/fIItkmwCx6qw5QD0hnbVYILpznJ wRvDDCUDcsMR6nQzcgZf0Lmlr7Uqq+sORUN1nmP4fBoWOoyZxFHqyrSsCdRYCfo8 O4agmTByIJB+oGPM7lLE3XGx7K2PPE1IoyqO2266DjZbh0M/MvSjBQyaVZXS/p8Y cmcaKwF/NYblOMlVA/nyvcXyoeT/nmz1QlERYTtHQRXH4uMIMVNKYRLWR2nBJtBS Wa2MFHztOeY+qo3YqEZBP+yIUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC2/tRQ acZRVHFPmImq0Ss/0kXbMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUZ/ljVMJg5CkY2n7mxnSZX6GPaQRdYys6cm/dHooDVmjfje93vuIh qQIsi0R6TqC/wqRF2Ywal1i2pfitxN5XEBlx0j0kMd5DIYp7yoegNOIoL6kXllP/ SJsvz1RpIlaNDjXLYoWQgftqRny9MvQ2hsRJYOsntYYJxacNTiWn3uflIDShe0S6 8LAYueKt/ZzinHG2bO1Fd6znBwSC4qfbAWxryXoWVdD/N4BO5b/cEZNisBko7bLh Klx04jHO4kxbtiTXG0bc4rw96ds9QCrWPA/eg7/F1rb4hUu2wzZxnpgus80FfHnu 5fo7I6plfeKIMylSIiMUg9cRxuaHeOoT -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:53 2025 by rpki-client