$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft File: fysutbj095VolfExLY3MQiOcmmI.mft (raw, json) Hash identifier: ovfH/nYLWaGlTudPyHWlR8HuI1IRVIB8FW0dYP/JQMk= Subject key identifier: 8D:E3:D3:89:89:0B:2B:79:AC:D3:4E:CE:5C:BF:32:A2:DA:70:98:E5 Authority key identifier: 7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 Certificate issuer: /CN=A91A0D57/serialNumber=7F2B2EB5B8F4F7956895F1312D8DCC42239C9A62 Certificate serial: 0E0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft Manifest number: 0DFD Signing time: Fri 04 Apr 2025 17:57:09 +0000 Manifest this update: Fri 04 Apr 2025 17:57:09 +0000 Manifest next update: Fri 11 Apr 2025 17:57:09 +0000 Files and hashes: 1: fysutbj095VolfExLY3MQiOcmmI.crl (hash: pvpRYM3v1ddYHawcWq6XySyWkDkPwlyH8//UEm7YIvI=) 2: A43B3718ABC111E9A200115CC4F9AE02.roa (hash: rc2HKldu1pWCNCmvoKIq756wtH7kDxYrdw5/oSGbQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D57 Validity Not Before: Apr 4 17:57:09 2025 GMT Not After : Apr 11 17:57:09 2025 GMT Subject: CN=67f01d75-4b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:9a:30:9c:d3:91:0f:8b:89:5c:7c:38:ef: 68:d0:29:dd:79:4f:0d:26:94:2d:21:72:ce:0d:fc: 0d:50:77:7c:cd:58:f2:36:80:fe:58:1f:b4:77:a5: 2e:d0:ac:73:a3:78:8e:eb:a2:9f:90:75:29:72:d0: c1:23:82:7b:b4:76:0e:ec:e9:a2:f8:85:db:08:16: 19:da:6b:c8:00:b4:42:ca:71:72:ff:6d:e1:4b:da: 70:93:a3:98:2a:f5:0e:cb:0b:ae:60:47:ad:7c:70: 7f:be:5c:a2:b4:c3:b1:f7:8c:f3:70:79:d4:c0:14: 0c:55:fe:7c:81:2a:66:45:26:17:0e:27:60:34:27: 1a:b9:ec:8e:fc:92:2f:86:5b:e3:1d:38:bf:bf:25: 8a:52:d6:a7:27:f1:c3:d6:75:83:78:33:2d:a3:f0: 4d:71:9c:38:a7:9d:17:21:de:59:22:fc:aa:7c:e7: 79:ac:7e:56:f9:29:92:49:93:27:d8:c5:c6:35:5e: 65:41:6d:55:f6:a7:6a:6f:81:c0:a2:23:b9:4c:b6: 14:5f:73:48:1b:a8:d0:04:e8:6d:bd:cf:63:ab:42: 0b:61:92:2e:67:6f:13:46:31:2f:ae:3f:de:a0:4b: 22:5f:04:56:27:99:f5:65:79:2a:59:60:79:87:3c: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E3:D3:89:89:0B:2B:79:AC:D3:4E:CE:5C:BF:32:A2:DA:70:98:E5 X509v3 Authority Key Identifier: keyid:7F:2B:2E:B5:B8:F4:F7:95:68:95:F1:31:2D:8D:CC:42:23:9C:9A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fysutbj095VolfExLY3MQiOcmmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D57/9FD2C9D0A91811E98C3EC24FC4F9AE02/fysutbj095VolfExLY3MQiOcmmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c0:73:a9:d5:a1:ed:58:68:03:18:49:cb:fb:14:44:ad:1b: 5b:85:77:51:7b:5d:82:a0:d3:60:c2:de:0c:2f:d8:b8:01:1a: 8f:b8:eb:2b:87:a5:79:b5:3b:c2:4b:b4:03:56:2e:a1:68:bc: b2:b0:3f:66:19:ed:8e:23:08:5e:3c:01:78:74:55:6b:6a:c1: 25:ab:42:75:62:0c:80:57:cf:44:7d:26:6b:91:63:53:2a:1f: 02:c1:bc:78:d6:91:08:c9:fa:ad:42:95:c7:bd:3c:0d:32:bf: a8:2e:d3:8b:97:f5:a0:e7:5f:42:08:ac:5a:9b:2b:22:7d:f3: a7:30:68:cd:8b:2a:a3:10:29:48:7e:10:f9:d7:db:5f:7d:fd: c8:91:4b:1b:dc:f7:e8:0a:07:a5:c4:f0:17:d2:81:a2:ee:52: b9:b2:30:1a:11:d2:14:79:93:9a:da:93:72:eb:c3:66:5b:f1: 37:37:e5:4b:be:d1:e2:cf:32:ae:6e:9c:7e:de:3c:77:4c:0d: 25:7d:1c:c7:2a:29:61:b3:83:59:1f:e0:41:ec:dd:1e:76:85: e2:fa:22:52:ad:3b:2a:3c:26:b5:df:ec:3c:3f:a1:6e:91:61: 2a:c3:2c:df:c3:1a:bd:c1:4c:71:bd:06:cf:a0:ca:6d:c8:01: 9c:ca:21:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBENTcxMTAvBgNVBAUTKDdGMkIyRUI1QjhGNEY3OTU2ODk1RjEzMTJEOERDQzQy MjM5QzlBNjIwHhcNMjUwNDA0MTc1NzA5WhcNMjUwNDExMTc1NzA5WjAYMRYwFAYD VQQDEw02N2YwMWQ3NS00YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tOaMJzTkQ+LiVx8OO9o0CndeU8NJpQtIXLODfwNUHd8zVjyNoD+WB+0d6Uu 0Kxzo3iO66KfkHUpctDBI4J7tHYO7Omi+IXbCBYZ2mvIALRCynFy/23hS9pwk6OY KvUOywuuYEetfHB/vlyitMOx94zzcHnUwBQMVf58gSpmRSYXDidgNCcaueyO/JIv hlvjHTi/vyWKUtanJ/HD1nWDeDMto/BNcZw4p50XId5ZIvyqfOd5rH5W+SmSSZMn 2MXGNV5lQW1V9qdqb4HAoiO5TLYUX3NIG6jQBOhtvc9jq0ILYZIuZ28TRjEvrj/e oEsiXwRWJ5n1ZXkqWWB5hzzPjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3j04mJ Cyt5rNNOzly/MqLacJjlMB8GA1UdIwQYMBaAFH8rLrW49PeVaJXxMS2NzEIjnJpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ1Ny85RkQyQzlEMEE5 MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1Vm9sZkV4TFkzTVFpT2Nt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z5c3V0YmowOTVWb2xmRXhMWTNNUWlPY21tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ1Ny85RkQyQzlEMEE5MTgxMUU5OEMzRUMyNEZDNEY5QUUwMi9meXN1dGJqMDk1 Vm9sZkV4TFkzTVFpT2NtbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQwHOp1aHtWGgDGEnL+xRErRtbhXdRe12CoNNgwt4ML9i4ARqPuOsr h6V5tTvCS7QDVi6haLyysD9mGe2OIwhePAF4dFVrasElq0J1YgyAV89EfSZrkWNT Kh8Cwbx41pEIyfqtQpXHvTwNMr+oLtOLl/Wg519CCKxamysiffOnMGjNiyqjEClI fhD519tfff3IkUsb3PfoCgelxPAX0oGi7lK5sjAaEdIUeZOa2pNy68NmW/E3N+VL vtHizzKubpx+3jx3TA0lfRzHKilhs4NZH+BB7N0edoXi+iJSrTsqPCa13+w8P6Fu kWEqwyzfwxq9wUxxvQbPoMptyAGcyiFX -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:44 2025 by rpki-client