$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: RAn2AU9+8Ei/uxNJaTQNr33ARqy9rJaXDwT+lAJMWRM= Subject key identifier: BA:1B:9F:29:D5:C5:74:3B:D0:32:22:6C:89:B9:02:99:33:E8:B4:82 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0AF5 Signing time: Fri 04 Apr 2025 19:26:05 +0000 Manifest this update: Fri 04 Apr 2025 19:26:03 +0000 Manifest next update: Fri 11 Apr 2025 19:26:03 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: CRvUwDq0yIWOmj4Qc37gbgAs8HIbv4Bb7B5/aiSotFY=) 2: B7BC4714BEF011ED9634C070C4F9AE02.roa (hash: hCJDcBpZnY511Q8RFEjySoDwZo6yKwsip9nLzCPAimM=) 3: DCA05C0E419A11EAA5E2BA6EC4F9AE02.roa (hash: PF9MEJvH0IR25ZTC0vJ/AU9NL74Mubr8N6aNLLIh+tY=) 4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: jb+NbLPJbNRFrpXKly3k3uaY8m7AD5q86vW7O0jvGcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40 Validity Not Before: Apr 4 19:26:03 2025 GMT Not After : Apr 11 19:26:03 2025 GMT Subject: CN=67f0324d-0911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:b0:c1:e5:eb:dc:e1:83:f2:46:95:1a:42: 8f:b4:2b:50:45:c2:97:30:c1:f6:b5:bc:72:17:f4: 1a:b7:6d:fe:1b:0d:27:ac:05:b0:b3:26:59:ed:2c: 4b:45:6c:23:1a:1e:27:77:ca:0b:0d:27:5f:d2:00: 2f:ea:3b:55:69:54:fd:73:77:17:9e:05:7e:6d:a9: b1:8a:f6:f7:bf:bb:30:78:53:81:74:81:9d:b5:2d: 21:f2:ad:d4:84:ca:d6:25:10:93:37:5c:5f:0c:7a: 04:89:3b:28:72:62:6b:95:43:ca:9e:34:16:5a:8e: 49:9f:de:e2:46:88:9f:79:60:13:24:04:28:05:aa: ee:7e:d0:6d:e6:11:6b:6f:e7:19:66:af:bb:42:03: b5:cf:b8:2c:87:a3:92:5d:4b:df:c4:3f:01:9a:7e: 5e:b8:e3:fb:fc:dd:6d:5d:a7:5b:5a:5d:50:da:3f: f0:fe:d3:f6:f6:9e:4b:46:b2:03:bb:16:b0:80:ec: 8e:9f:31:70:13:db:90:0a:ef:9e:50:91:8c:85:81: 59:6b:da:88:9a:ba:f5:8c:c1:ac:c9:93:89:04:22: ab:52:04:d5:53:11:6f:e2:fe:a0:06:61:d3:01:06: dd:42:8f:9a:5d:4b:93:1b:dd:e2:35:83:47:41:23: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1B:9F:29:D5:C5:74:3B:D0:32:22:6C:89:B9:02:99:33:E8:B4:82 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5f:43:40:03:2d:cb:6d:3f:64:77:2e:bd:aa:38:79:3b:d4: db:e0:6b:36:a9:40:95:a6:03:40:ab:be:2c:e2:cb:e4:ab:4d: 50:23:04:51:9f:87:8a:48:b9:98:6a:d7:9c:82:8b:9f:c6:4f: eb:65:ed:00:2e:fd:63:96:a7:07:6b:5d:62:ce:76:c1:68:f0: 02:5f:73:41:0c:15:ef:27:b2:b9:b6:26:ec:96:08:d3:81:4b: f9:c2:f5:99:9a:19:30:f5:49:21:0b:6b:2b:a8:f9:77:e7:0d: 00:68:ee:8a:ab:db:23:7f:67:95:16:bc:e4:63:9e:0c:a1:1c: 56:ef:eb:ce:77:41:d7:1c:bc:ff:5f:43:0b:72:7a:7c:01:d3: 60:4b:33:6c:1d:b7:73:d9:8e:5a:2b:ac:eb:40:f3:f6:ff:b2: 2f:c7:c5:52:82:fd:44:de:6c:61:29:8b:c2:4b:27:79:40:0a: 7d:fb:d0:7d:89:ba:0b:70:cc:96:ac:86:0a:74:10:7e:65:1b: da:30:23:2d:f0:53:41:d8:46:ad:67:43:f0:f6:26:0e:85:e0: ea:e4:87:87:fe:c1:ba:f7:e9:82:54:0d:86:20:45:4f:d2:f9: 3d:0a:32:12:cd:e0:a7:6d:ca:38:3b:ba:14:9c:9e:3f:a9:6a: 93:07:78:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjUwNDA0MTkyNjAzWhcNMjUwNDExMTkyNjAzWjAYMRYwFAYD VQQDEw02N2YwMzI0ZC0wOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dGwweXr3OGD8kaVGkKPtCtQRcKXMMH2tbxyF/Qat23+Gw0nrAWwsyZZ7SxL RWwjGh4nd8oLDSdf0gAv6jtVaVT9c3cXngV+bamxivb3v7sweFOBdIGdtS0h8q3U hMrWJRCTN1xfDHoEiTsocmJrlUPKnjQWWo5Jn97iRoifeWATJAQoBaruftBt5hFr b+cZZq+7QgO1z7gsh6OSXUvfxD8Bmn5euOP7/N1tXadbWl1Q2j/w/tP29p5LRrID uxawgOyOnzFwE9uQCu+eUJGMhYFZa9qImrr1jMGsyZOJBCKrUgTVUxFv4v6gBmHT AQbdQo+aXUuTG93iNYNHQSN+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLobnynV xXQ70DIibIm5Apkz6LSCMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDX0NAAy3LbT9kdy69qjh5O9Tb4Gs2qUCVpgNAq74s4svkq01QIwRR n4eKSLmYatecgoufxk/rZe0ALv1jlqcHa11iznbBaPACX3NBDBXvJ7K5tibslgjT gUv5wvWZmhkw9UkhC2srqPl35w0AaO6Kq9sjf2eVFrzkY54MoRxW7+vOd0HXHLz/ X0MLcnp8AdNgSzNsHbdz2Y5aK6zrQPP2/7Ivx8VSgv1E3mxhKYvCSyd5QAp9+9B9 iboLcMyWrIYKdBB+ZRvaMCMt8FNB2EatZ0Pw9iYOheDq5IeH/sG69+mCVA2GIEVP 0vk9CjISzeCnbco4O7oUnJ4/qWqTB3jJ -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:40 2025 by rpki-client