$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: 9jAg/B8XAs5eAZqGjNBXa9wWVuQv0Cm3EgT9K5ccXYg= Subject key identifier: B2:B6:85:C6:95:63:0F:8D:9E:F8:05:E1:1B:ED:9E:36:63:E2:63:3D Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: 97 Signing time: Thu 03 Apr 2025 05:35:41 +0000 Manifest this update: Thu 03 Apr 2025 05:35:40 +0000 Manifest next update: Thu 10 Apr 2025 05:35:40 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: CblZIZcOYIOUEJ1lmCHTpEPW7mchk8NrxS5xkTU9EeY=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA Validity Not Before: Apr 3 05:35:40 2025 GMT Not After : Apr 10 05:35:40 2025 GMT Subject: CN=67ee1e2d-4616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:bc:bc:75:b2:11:4a:45:c7:2a:0a:06:e2: 00:7c:4e:f5:74:e4:32:31:0b:f2:08:1c:60:35:ed: c0:9e:af:7f:49:55:89:f9:ba:db:17:cf:d9:3a:58: 49:12:79:05:64:67:58:44:99:c7:af:c6:ed:4a:1c: 2c:8c:59:44:52:e2:74:38:ee:17:98:7e:f9:5b:7b: 3d:26:d7:3a:ee:47:45:87:eb:b0:9d:3e:48:0c:1f: 8d:31:f6:99:36:3a:c5:6f:a6:35:f5:91:13:03:47: a0:b9:f0:2b:46:b5:e3:13:2b:c4:40:15:21:96:9d: bf:04:d4:88:2b:9e:91:97:11:bc:2f:ba:04:12:11: 0c:5f:1e:1c:e2:55:44:9a:9f:94:43:2d:f5:24:cf: 5c:a4:f5:ac:1a:36:4d:95:8e:6c:7e:bb:ee:ab:5d: cb:fe:03:2c:d1:11:61:e2:14:a0:2f:18:eb:bd:8f: 5f:c9:d8:91:cb:5f:12:a9:7f:70:ff:64:a3:3a:8e: e5:fe:e7:56:6a:fd:f7:1d:0c:a9:62:34:d4:89:b0: 9f:ad:6d:c2:f2:42:5d:a3:9f:4a:e9:54:6d:54:c5: c3:88:52:b3:92:fc:6c:ea:6b:3f:90:1c:bc:25:67: b5:58:a3:39:81:f7:4c:1b:cb:df:f0:52:9a:cc:c1: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:85:C6:95:63:0F:8D:9E:F8:05:E1:1B:ED:9E:36:63:E2:63:3D X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:7d:89:46:66:bc:0f:42:a2:c1:ba:2e:c1:99:df:88:c7: 82:dc:89:90:09:92:96:64:11:93:6c:94:c2:bb:4a:3a:95:90: 3c:99:14:d5:af:7c:20:c4:f9:0d:12:e7:39:4f:ab:e3:ed:ad: ed:a6:ef:6e:10:8f:39:8e:33:69:a7:11:b7:2d:94:8f:c6:5d: db:41:c3:29:e8:5a:2f:69:3b:cc:29:24:28:29:c0:a8:4f:94: d9:d7:e0:52:96:40:3b:f2:92:5c:e0:c1:ee:95:e3:f4:e1:f0: aa:05:6c:14:41:06:fc:e7:e6:d0:eb:8f:f1:be:94:d5:8a:23: d1:84:14:60:f4:dc:de:14:60:78:5c:5c:f4:15:fa:7b:9f:ed: b1:e9:ce:76:ce:f6:7a:f4:df:c7:a7:c6:ce:2b:a4:f9:d4:81: e2:9c:83:93:8f:36:bb:7d:12:e0:44:d2:2a:be:c5:4b:e3:3c: dc:48:3c:e6:a4:73:d1:bb:e7:4a:86:b5:3e:83:d5:b3:c6:0d: 61:22:63:16:d5:59:88:c7:47:20:15:77:5c:23:44:65:48:bd: 89:08:b2:69:80:ed:17:b2:a0:ba:f5:0b:00:df:85:70:5e:e5: b8:13:3a:62:c2:8b:e3:d4:8a:36:d8:65:41:82:54:91:5a:67: 23:84:40:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUwNDAzMDUzNTQwWhcNMjUwNDEwMDUzNTQwWjAYMRYwFAYD VQQDEw02N2VlMWUyZC00NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hi8vHWyEUpFxyoKBuIAfE71dOQyMQvyCBxgNe3Anq9/SVWJ+brbF8/ZOlhJ EnkFZGdYRJnHr8btShwsjFlEUuJ0OO4XmH75W3s9Jtc67kdFh+uwnT5IDB+NMfaZ NjrFb6Y19ZETA0egufArRrXjEyvEQBUhlp2/BNSIK56RlxG8L7oEEhEMXx4c4lVE mp+UQy31JM9cpPWsGjZNlY5sfrvuq13L/gMs0RFh4hSgLxjrvY9fydiRy18SqX9w /2SjOo7l/udWav33HQypYjTUibCfrW3C8kJdo59K6VRtVMXDiFKzkvxs6ms/kBy8 JWe1WKM5gfdMG8vf8FKazMH65wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK2hcaV Yw+NnvgF4RvtnjZj4mM9MB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdLX2JRma8D0KiwbouwZnfiMeC3ImQCZKWZBGTbJTCu0o6lZA8mRTV r3wgxPkNEuc5T6vj7a3tpu9uEI85jjNppxG3LZSPxl3bQcMp6FovaTvMKSQoKcCo T5TZ1+BSlkA78pJc4MHuleP04fCqBWwUQQb85+bQ64/xvpTViiPRhBRg9NzeFGB4 XFz0Ffp7n+2x6c52zvZ69N/Hp8bOK6T51IHinIOTjza7fRLgRNIqvsVL4zzcSDzm pHPRu+dKhrU+g9Wzxg1hImMW1VmIx0cgFXdcI0RlSL2JCLJpgO0XsqC69QsA34Vw XuW4Ezpiwovj1Io22GVBglSRWmcjhEDQ -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:44 2025 by rpki-client