$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: bTgKELVwCekaonar0ayOT6J+irPcTdg5EWQc+hdZ1Ls= Subject key identifier: 16:EE:3B:C6:C5:26:92:62:39:7B:84:AC:FC:55:56:88:59:5B:A4:52 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 056A Signing time: Fri 04 Apr 2025 23:31:06 +0000 Manifest this update: Fri 04 Apr 2025 23:31:05 +0000 Manifest next update: Fri 11 Apr 2025 23:31:05 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: LkN2ljLh2KrBgTN8IBIWgV/LowXgIXtB4qrleEhql0c=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3 Validity Not Before: Apr 4 23:31:05 2025 GMT Not After : Apr 11 23:31:05 2025 GMT Subject: CN=67f06bba-d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:8d:22:52:4a:5d:51:d8:d0:be:b8:e1:99: 52:1f:27:55:26:ef:44:24:6a:bd:fb:d5:21:6f:f2: cb:d0:c9:92:23:76:16:1f:3e:87:00:30:88:2a:fa: 27:f3:93:f4:a5:2a:19:37:a4:a8:e8:e5:d5:94:68: c2:10:d0:47:ee:82:e7:6d:1c:b1:fe:d0:84:3c:a6: 3c:11:ca:96:4d:5f:03:40:d7:59:b4:b6:06:f4:c0: b4:34:9c:d6:2d:d7:1a:0c:a2:40:ae:f8:a3:7d:6e: 3a:cc:d4:c6:d2:f3:09:e5:5a:1d:62:5f:0c:98:8a: 01:b4:51:f5:10:93:31:94:8c:df:b5:fc:ef:f7:46: e6:d6:3e:67:73:44:1c:77:11:5f:43:cf:cf:7b:ac: 91:ba:1f:8a:ad:68:24:81:20:0e:98:12:e3:fd:bc: 1b:47:cf:0b:be:b1:e5:4a:00:72:79:b0:75:39:8c: 84:12:fb:59:bf:ff:96:e2:9d:78:65:78:4a:e1:c6: d6:ab:16:41:60:fe:62:87:1f:cd:10:9a:cf:fa:c6: 86:1a:6c:91:7f:08:a6:32:70:c1:d0:25:65:77:92: fb:bd:ed:90:6f:9d:97:42:5a:96:ee:3f:ad:de:3b: 4b:81:c6:75:57:67:22:6c:e2:85:da:f6:49:9f:bf: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:3B:C6:C5:26:92:62:39:7B:84:AC:FC:55:56:88:59:5B:A4:52 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:02:d7:27:11:05:fe:8e:7d:28:c1:e3:26:7f:b7:b8:49:6a: 1e:05:47:bd:f3:a7:28:f5:a8:94:96:ef:aa:fe:9c:0b:8d:71: 6b:cd:38:79:c3:7a:61:ad:f8:19:c5:a5:76:aa:16:1e:19:cb: bc:b7:2c:26:63:01:db:c9:49:8e:27:e8:09:ce:b8:3f:79:e1: 20:7c:47:63:f0:b6:a6:43:83:d2:5d:5a:9c:8f:db:ef:31:8b: a7:f3:ca:22:8a:cd:3d:13:ae:bc:2d:64:8e:01:20:29:da:c5: 90:80:df:57:9d:de:ef:b6:85:91:b5:23:f3:53:1b:0d:2a:2e: 90:f4:d6:c7:07:35:ba:1c:fb:bc:90:21:dc:4c:f0:73:19:70: e4:f1:e4:6f:68:b1:5a:45:6d:b7:dc:88:49:59:f9:72:fd:1b: 04:6e:20:58:44:ac:d8:dd:da:4e:07:59:1a:a4:8e:70:2e:08: 06:57:8c:12:58:99:2c:4b:e6:07:eb:55:85:a9:ae:5e:17:0e: db:12:5c:21:97:79:1c:88:97:7f:5b:13:9e:19:ab:92:60:53: 7a:2e:c4:22:42:1d:f4:1a:19:f1:4d:e9:85:de:bd:53:82:22: 10:81:3b:84:07:b3:df:97:2a:ea:97:0c:f9:47:0a:6a:e9:f7: b7:1d:62:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjUwNDA0MjMzMTA1WhcNMjUwNDExMjMzMTA1WjAYMRYwFAYD VQQDEw02N2YwNmJiYS1kNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TSNIlJKXVHY0L644ZlSHydVJu9EJGq9+9Uhb/LL0MmSI3YWHz6HADCIKvon 85P0pSoZN6So6OXVlGjCENBH7oLnbRyx/tCEPKY8EcqWTV8DQNdZtLYG9MC0NJzW LdcaDKJArvijfW46zNTG0vMJ5VodYl8MmIoBtFH1EJMxlIzftfzv90bm1j5nc0Qc dxFfQ8/Pe6yRuh+KrWgkgSAOmBLj/bwbR88LvrHlSgByebB1OYyEEvtZv/+W4p14 ZXhK4cbWqxZBYP5ihx/NEJrP+saGGmyRfwimMnDB0CVld5L7ve2Qb52XQlqW7j+t 3jtLgcZ1V2cibOKF2vZJn7+XBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbuO8bF JpJiOXuErPxVVohZW6RSMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1AtcnEQX+jn0oweMmf7e4SWoeBUe986co9aiUlu+q/pwLjXFrzTh5 w3phrfgZxaV2qhYeGcu8tywmYwHbyUmOJ+gJzrg/eeEgfEdj8LamQ4PSXVqcj9vv MYun88oiis09E668LWSOASAp2sWQgN9Xnd7vtoWRtSPzUxsNKi6Q9NbHBzW6HPu8 kCHcTPBzGXDk8eRvaLFaRW233IhJWfly/RsEbiBYRKzY3dpOB1kapI5wLggGV4wS WJksS+YH61WFqa5eFw7bElwhl3kciJd/WxOeGauSYFN6LsQiQh30GhnxTemF3r1T giIQgTuEB7Pflyrqlwz5Rwpq6fe3HWJc -----END CERTIFICATE-----Generated at Sun Apr 6 05:30:08 2025 by rpki-client