$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: FCk0Lwcj1y3D/pjvQt/NQMZwUcWjkE50GCH0SG1cKuU= Subject key identifier: 6E:41:C8:35:F6:FD:68:04:7E:3F:F8:03:15:E0:8B:EE:72:A8:6F:03 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 01B1 Signing time: Sat 29 Mar 2025 02:45:08 +0000 Manifest this update: Sat 29 Mar 2025 02:45:07 +0000 Manifest next update: Sat 05 Apr 2025 02:45:07 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: P8D4m2rUslaideRVb8WmImC8NBw1ZXlt3vl9KhkiFuE=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4 Validity Not Before: Mar 29 02:45:07 2025 GMT Not After : Apr 5 02:45:07 2025 GMT Subject: CN=67e75eb3-2cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:d7:87:3a:6b:b9:50:51:67:99:d7:20:3d: cb:e0:9d:d5:59:59:fd:dd:94:91:89:4e:67:1c:d0: e9:ae:86:0c:50:3a:c4:10:9a:be:9a:d2:ae:8d:c1: 0f:3b:af:2d:0c:1d:75:3e:bc:5d:1a:e7:93:aa:64: 4f:61:ef:14:8d:5d:e4:1b:52:e7:b5:2a:53:52:bc: b1:02:b7:30:19:6f:48:33:05:82:99:5e:b8:e6:88: 83:73:b1:eb:0c:31:ca:61:5f:d4:d6:8b:10:82:c4: 1d:98:1e:47:df:5b:48:54:1f:d7:45:d1:ca:39:aa: f8:02:23:5e:83:23:de:54:fd:53:95:c2:86:a2:d0: 7d:db:f0:bd:f9:2a:c8:1f:e8:56:20:c2:fa:a0:bb: 5b:92:bb:0e:12:b9:31:83:c2:78:80:1e:0d:54:86: 4e:99:62:c5:fe:02:1c:0f:16:17:00:26:98:e1:b1: 14:ca:69:30:72:01:6a:be:2d:a5:d1:66:03:33:53: e8:d6:b3:f2:88:13:76:4a:07:f9:be:9a:6d:a8:ad: 46:26:01:55:6b:df:93:59:b4:1f:48:b7:a8:45:94: 56:8c:cd:ba:74:bd:2f:76:82:00:cc:b6:5c:13:16: 02:44:b7:fa:50:69:65:c2:5d:d7:e0:db:f8:5e:41: 64:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:41:C8:35:F6:FD:68:04:7E:3F:F8:03:15:E0:8B:EE:72:A8:6F:03 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:82:5d:ae:83:d9:98:bf:67:e5:d9:69:cb:05:0a:be:b8:37: b2:ca:25:85:11:39:36:1d:a9:e0:03:f6:8c:3b:9e:8d:10:45: 27:5a:dc:2e:80:cc:89:39:e9:8c:38:ec:8d:22:6d:6b:a8:90: 73:00:ec:57:83:9c:1a:1d:d6:03:e6:f2:e8:0e:c6:cc:32:7f: a8:b2:e7:a1:e1:77:63:78:78:b8:24:bd:f7:b7:cd:ff:17:e3: 4c:9c:bb:67:b1:b1:ce:89:a5:8c:d3:89:28:d0:db:71:14:65: b2:aa:be:99:6d:74:0d:db:5a:e0:51:40:37:9e:97:8f:0e:c5: d6:52:0d:13:a9:03:90:bc:09:37:06:a9:c3:68:71:0b:62:4b: 93:a4:da:18:72:ff:0c:8d:1a:52:06:dd:67:80:04:c0:00:35: 68:7d:c1:36:7e:39:b7:ce:37:c1:c3:57:d9:e0:7a:c3:c4:22: ab:47:43:c1:28:91:5d:ac:26:ab:16:7a:1b:ab:29:41:8f:46: bf:38:75:10:09:f6:3f:f3:53:dd:d2:f0:6f:0f:3f:d9:25:3f: c5:35:7a:5f:35:00:b2:6a:f4:8b:22:c1:d4:18:2b:4d:67:eb: e7:46:2d:fb:60:60:da:33:a6:00:c6:44:36:ad:ee:76:7a:44: 5b:75:b0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUwMzI5MDI0NTA3WhcNMjUwNDA1MDI0NTA3WjAYMRYwFAYD VQQDEw02N2U3NWViMy0yY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3DXhzpruVBRZ5nXID3L4J3VWVn93ZSRiU5nHNDproYMUDrEEJq+mtKujcEP O68tDB11PrxdGueTqmRPYe8UjV3kG1LntSpTUryxArcwGW9IMwWCmV645oiDc7Hr DDHKYV/U1osQgsQdmB5H31tIVB/XRdHKOar4AiNegyPeVP1TlcKGotB92/C9+SrI H+hWIML6oLtbkrsOErkxg8J4gB4NVIZOmWLF/gIcDxYXACaY4bEUymkwcgFqvi2l 0WYDM1Po1rPyiBN2Sgf5vpptqK1GJgFVa9+TWbQfSLeoRZRWjM26dL0vdoIAzLZc ExYCRLf6UGllwl3X4Nv4XkFkDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5ByDX2 /WgEfj/4AxXgi+5yqG8DMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLgl2ug9mYv2fl2WnLBQq+uDeyyiWFETk2HangA/aMO56NEEUnWtwu gMyJOemMOOyNIm1rqJBzAOxXg5waHdYD5vLoDsbMMn+osueh4XdjeHi4JL33t83/ F+NMnLtnsbHOiaWM04ko0NtxFGWyqr6ZbXQN21rgUUA3npePDsXWUg0TqQOQvAk3 BqnDaHELYkuTpNoYcv8MjRpSBt1ngATAADVofcE2fjm3zjfBw1fZ4HrDxCKrR0PB KJFdrCarFnobqylBj0a/OHUQCfY/81Pd0vBvDz/ZJT/FNXpfNQCyavSLIsHUGCtN Z+vnRi37YGDaM6YAxkQ2re52ekRbdbAo -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:57 2025 by rpki-client