$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: EYIBhW7KYZaiFdiyDLCht65WOqcgZFS17oLiuumUDqw= Subject key identifier: 99:AA:84:13:0C:9D:5A:0A:37:93:18:23:AB:4E:31:24:12:8B:88:C2 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01A3 Signing time: Sat 05 Apr 2025 02:47:46 +0000 Manifest this update: Sat 05 Apr 2025 02:47:46 +0000 Manifest next update: Sat 12 Apr 2025 02:47:46 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: 2HstkEWC4k8q8ULxeO1UCqXsaUSU9LoFxIUXsh3lj8U=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9 Validity Not Before: Apr 5 02:47:46 2025 GMT Not After : Apr 12 02:47:46 2025 GMT Subject: CN=67f099d2-b941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:fc:be:ff:13:ff:77:90:db:e1:16:d7:31: ed:d2:03:93:91:49:31:06:34:33:ca:9c:ec:93:3d: 0f:65:19:62:2d:a6:94:cb:6a:31:b9:3e:fe:d3:dd: 2f:97:b3:cb:35:63:52:61:51:c5:3f:c7:f3:ee:af: 22:f9:81:a2:dc:a7:55:f2:38:a1:62:ba:a1:c4:ac: 6b:62:87:77:75:f4:1f:7c:df:13:9f:29:30:24:55: 53:35:77:5a:57:34:f9:da:9e:38:b6:de:a1:2b:e1: 73:74:e5:87:5e:5c:8c:e9:f5:e5:24:29:47:93:b7: 75:76:8f:d5:c1:fc:ac:1a:fc:7a:11:a3:d3:64:cb: e0:d0:0d:40:ac:c0:9f:f0:e2:4f:0f:0d:0f:42:bc: 4f:33:01:6f:b6:67:85:92:da:69:e0:ea:96:66:40: 8e:81:05:05:f1:ec:0f:17:b0:fd:d4:92:54:53:08: 61:bf:e8:40:85:97:06:6b:7f:2f:68:6e:50:e4:84: fc:d4:cd:15:72:13:9b:ae:32:1f:bf:1e:fb:b9:e6: 24:10:cc:29:72:11:f8:1e:ad:4d:a6:8d:ec:22:23: fe:3e:5b:7f:fb:6e:8b:fe:03:31:03:95:7f:22:7c: 68:49:60:7b:49:bc:16:0f:2f:fc:89:ec:3a:7d:ef: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:84:13:0C:9D:5A:0A:37:93:18:23:AB:4E:31:24:12:8B:88:C2 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:22:48:7f:ef:98:84:e7:0e:08:3f:d4:4b:47:d8:23:da:68: 25:50:4d:e7:fd:50:35:7c:04:c4:71:de:72:31:32:06:97:74: fa:87:c2:8d:43:e2:9b:4b:da:96:2a:88:62:7f:26:c7:3e:5b: 95:f8:b0:1c:15:af:5e:c6:01:0f:ce:2e:8c:ac:63:4f:c4:46: 0c:01:b7:2a:07:80:a6:83:4a:ac:b5:da:f1:e0:f9:f0:8d:2f: 35:1b:73:cb:d4:f7:e7:2e:dd:37:08:a8:f6:03:04:05:54:fa: 04:f8:ac:61:53:34:27:4a:45:9e:03:bb:90:7d:41:60:92:84: d2:91:96:73:53:4d:e6:a0:7d:b6:1a:4a:85:17:19:aa:14:14: 21:a5:39:1b:a7:98:1c:47:d0:63:18:24:e0:57:56:06:25:f4: 91:f9:6a:f3:54:9e:3d:45:2a:be:fa:3b:52:5d:f6:80:b5:78: 89:2a:e1:b9:15:b1:55:d4:3c:93:d3:6e:b9:47:2b:d9:39:cc: e1:4f:22:93:bb:1d:4f:de:5b:c7:af:b0:89:d8:be:42:40:1c: da:4e:82:36:e5:83:f8:e4:cc:59:8b:e9:c9:c9:5f:0f:a5:45: 70:f2:75:57:1c:75:8b:30:63:7c:c9:3f:a3:bd:ae:68:7a:bc: e1:d8:2c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwNDA1MDI0NzQ2WhcNMjUwNDEyMDI0NzQ2WjAYMRYwFAYD VQQDEw02N2YwOTlkMi1iOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnD8vv8T/3eQ2+EW1zHt0gOTkUkxBjQzypzskz0PZRliLaaUy2oxuT7+090v l7PLNWNSYVHFP8fz7q8i+YGi3KdV8jihYrqhxKxrYod3dfQffN8TnykwJFVTNXda VzT52p44tt6hK+FzdOWHXlyM6fXlJClHk7d1do/VwfysGvx6EaPTZMvg0A1ArMCf 8OJPDw0PQrxPMwFvtmeFktpp4OqWZkCOgQUF8ewPF7D91JJUUwhhv+hAhZcGa38v aG5Q5IT81M0VchObrjIfvx77ueYkEMwpchH4Hq1Npo3sIiP+Plt/+26L/gMxA5V/ InxoSWB7SbwWDy/8iew6fe/kbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmqhBMM nVoKN5MYI6tOMSQSi4jCMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQIkh/75iE5w4IP9RLR9gj2mglUE3n/VA1fATEcd5yMTIGl3T6h8KN Q+KbS9qWKohifybHPluV+LAcFa9exgEPzi6MrGNPxEYMAbcqB4Cmg0qstdrx4Pnw jS81G3PL1PfnLt03CKj2AwQFVPoE+KxhUzQnSkWeA7uQfUFgkoTSkZZzU03moH22 GkqFFxmqFBQhpTkbp5gcR9BjGCTgV1YGJfSR+WrzVJ49RSq++jtSXfaAtXiJKuG5 FbFV1DyT0265RyvZOczhTyKTux1P3lvHr7CJ2L5CQBzaToI25YP45MxZi+nJyV8P pUVw8nVXHHWLMGN8yT+jva5oerzh2Cy0 -----END CERTIFICATE-----Generated at Sun Apr 6 05:16:15 2025 by rpki-client