$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: rjfhkFVc7hRz262QPNhkNcqNWbfUHoSvsQGTvrBmv5c= Subject key identifier: D9:AD:B4:44:06:FC:2E:81:1C:04:83:80:53:65:BD:CB:04:EE:A2:A7 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: C5 Signing time: Sat 29 Mar 2025 05:07:54 +0000 Manifest this update: Sat 29 Mar 2025 05:07:54 +0000 Manifest next update: Sat 05 Apr 2025 05:07:54 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: Zea6nGarQVREZ6hZbE7ANfE9QXq4cR6BWkiRB6LXZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA Validity Not Before: Mar 29 05:07:54 2025 GMT Not After : Apr 5 05:07:54 2025 GMT Subject: CN=67e7802a-9cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:b0:cc:ca:0e:88:1d:44:d0:98:1b:38:df: 82:89:a4:3d:ba:b9:ef:6e:9c:6f:8a:bb:e0:82:73: 50:cc:c1:b4:3f:46:e0:f9:24:bc:34:11:62:f0:df: 4b:5d:21:52:a2:81:0f:1e:12:50:c6:cf:a5:7a:ab: 68:cb:77:94:00:47:06:37:f3:75:f8:71:a6:12:b7: 18:96:4a:04:42:80:0f:02:89:0d:32:bf:f3:ab:d1: af:97:9b:38:ce:5f:82:f4:b5:3a:82:e6:0c:a4:1c: 52:85:0c:fa:e7:ed:e8:b2:b9:09:49:f6:08:00:86: 55:bb:48:6d:3e:3f:96:bf:51:7f:68:37:7d:83:64: 6d:45:b0:51:28:41:29:7a:71:5d:30:99:c2:8b:a3: 4d:46:96:fc:b2:04:5f:b3:43:e1:d6:45:87:62:76: 06:40:5f:9a:c7:a3:4d:75:d6:8b:be:e6:74:70:c9: 10:da:17:98:34:9c:bd:6d:d9:c0:18:45:16:9a:d5: 63:6d:c0:80:ad:79:36:80:a1:81:c1:21:d4:a3:70: d6:b6:c1:69:dc:d6:50:9d:59:ba:3f:1e:29:9c:57: e8:11:6c:38:82:ac:ad:c2:be:b0:c8:d7:17:b0:11: 9f:ee:0d:b8:c0:4d:55:3f:ef:bb:4f:bb:b5:66:b1: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:B4:44:06:FC:2E:81:1C:04:83:80:53:65:BD:CB:04:EE:A2:A7 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:46:80:56:b7:2c:bc:64:b9:3b:01:32:3a:88:50:a7:3f: 82:59:68:c0:9e:25:0a:c0:bf:26:a3:53:d8:88:a1:f3:4a:cc: 80:9c:63:8e:17:25:ab:79:65:12:15:1b:f0:b1:e0:9b:2a:2c: a6:af:36:46:63:b2:c8:d0:9c:75:ca:6a:31:d4:1e:35:4b:1e: 57:64:e8:1b:a1:9a:b1:d1:6e:31:f4:0a:1b:53:d9:fa:13:54: 1b:4e:6e:8a:e3:4f:7d:9b:c3:81:9c:82:f1:9f:97:0b:ef:27: b1:b3:92:e6:23:03:35:88:b1:17:cb:3d:50:63:45:96:da:c6: be:02:58:4a:b3:7c:44:30:b4:bc:9a:6c:4e:f8:bb:b0:d1:12: 82:c1:9b:57:ac:b5:77:4a:f9:d5:89:f7:c8:39:44:3d:65:ba: 11:f6:be:6e:ae:46:4b:7a:ea:fb:7a:05:40:db:4f:aa:85:18: ed:99:75:cb:92:27:3a:0b:b4:8d:13:74:8b:95:fa:bc:f6:25: 4f:ae:40:51:e2:09:f7:42:67:b9:7c:11:33:e9:9c:8c:f9:44: a9:e3:a2:89:92:23:6a:6e:aa:8e:50:8f:53:0a:46:e6:7e:ca: 3e:b5:af:16:44:28:5c:0f:55:cf:ae:41:3f:ba:85:d7:2b:fe: 8d:b9:e6:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUwMzI5MDUwNzU0WhcNMjUwNDA1MDUwNzU0WjAYMRYwFAYD VQQDEw02N2U3ODAyYS05Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBywzMoOiB1E0JgbON+CiaQ9urnvbpxvirvggnNQzMG0P0bg+SS8NBFi8N9L XSFSooEPHhJQxs+leqtoy3eUAEcGN/N1+HGmErcYlkoEQoAPAokNMr/zq9Gvl5s4 zl+C9LU6guYMpBxShQz65+3osrkJSfYIAIZVu0htPj+Wv1F/aDd9g2RtRbBRKEEp enFdMJnCi6NNRpb8sgRfs0Ph1kWHYnYGQF+ax6NNddaLvuZ0cMkQ2heYNJy9bdnA GEUWmtVjbcCArXk2gKGBwSHUo3DWtsFp3NZQnVm6Px4pnFfoEWw4gqytwr6wyNcX sBGf7g24wE1VP++7T7u1ZrGuCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmttEQG /C6BHASDgFNlvcsE7qKnMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqh0aAVrcsvGS5OwEyOohQpz+CWWjAniUKwL8mo1PYiKHzSsyAnGOO FyWreWUSFRvwseCbKiymrzZGY7LI0Jx1ymox1B41Sx5XZOgboZqx0W4x9AobU9n6 E1QbTm6K4099m8OBnILxn5cL7yexs5LmIwM1iLEXyz1QY0WW2sa+AlhKs3xEMLS8 mmxO+Luw0RKCwZtXrLV3SvnViffIOUQ9ZboR9r5urkZLeur7egVA20+qhRjtmXXL kic6C7SNE3SLlfq89iVPrkBR4gn3Qme5fBEz6ZyM+USp46KJkiNqbqqOUI9TCkbm fso+ta8WRChcD1XPrkE/uoXXK/6NueZj -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:59 2025 by rpki-client