$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: xp3sNeUbMWJS/u1HCov1fJsTdMspNwe833yFelN0ras= Subject key identifier: 04:3E:4D:37:88:C8:B8:E2:CA:35:4C:40:AE:CC:D7:51:7F:F3:3B:6C Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 7B Signing time: Fri 11 Apr 2025 05:54:27 +0000 Manifest this update: Fri 11 Apr 2025 05:54:26 +0000 Manifest next update: Fri 18 Apr 2025 05:54:26 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: dBEa+wZcDCtbp8evebp5GNeOzJfRC0GNFyDSlAaOXLE=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Apr 11 05:54:26 2025 GMT Not After : Apr 18 05:54:26 2025 GMT Subject: CN=67f8ae93-cf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:56:85:b5:18:e7:1f:40:f7:7c:6b:2e:cb:c7: 1b:c3:11:a4:3a:04:94:96:a0:0f:4c:a3:d4:c6:5d: 29:22:b2:5a:65:38:29:c9:f9:6b:c4:06:8a:1c:23: d2:e1:68:d2:10:d5:36:28:b6:43:f6:7e:bf:8f:89: 32:7f:e1:aa:4b:98:ee:9b:8d:42:90:eb:6d:0e:bf: a1:8e:c0:df:e3:c8:18:bc:20:79:6b:51:82:2f:ed: 98:fd:44:e8:89:1f:2a:c2:71:67:82:6b:2f:6a:ea: fd:fb:82:7d:b3:26:29:4c:f3:20:26:2e:20:c4:bf: b6:41:af:92:2e:77:4a:44:cb:50:1e:41:dc:86:c7: 09:9e:9e:b0:aa:32:78:8a:c7:a4:89:31:cd:53:54: 79:a9:d1:0d:eb:48:ac:00:27:81:ff:ec:85:f6:2c: 12:34:d2:42:2c:29:09:a7:ee:96:71:f7:92:2b:b9: 73:af:bb:63:15:5a:0c:46:4c:2b:58:fa:6d:37:bf: 4b:47:a8:76:8f:59:7f:b1:a8:32:ed:d5:42:d7:b5: 4e:47:d1:24:bb:7b:82:9d:e2:01:ee:5a:95:1e:a0: f0:7a:70:9d:27:d5:79:3d:49:80:c6:bf:5e:77:e0: e9:96:94:a4:f7:b0:c4:46:9e:d6:d4:46:79:d6:39: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:4D:37:88:C8:B8:E2:CA:35:4C:40:AE:CC:D7:51:7F:F3:3B:6C X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a5:af:e7:01:57:29:17:4c:1e:50:97:c7:09:e5:fb:0a:74: d4:4a:f6:9c:37:1b:d6:6b:3d:f8:19:46:41:1b:15:4f:6d:f9: 6f:c6:52:ed:e3:9d:d8:1c:56:5e:25:aa:01:31:ee:5d:7a:76: 88:ed:ae:ff:26:0b:3e:f0:5c:42:a1:e3:dc:c8:78:0a:8d:12: a8:b9:ab:22:ab:fc:71:b8:05:16:b8:36:22:7d:99:a2:87:29: 0a:12:6b:28:a6:3c:0a:7a:fa:b1:f5:4c:97:51:c4:c1:be:a4: 00:c4:21:77:06:6b:6f:38:68:a7:e8:c7:22:fb:b8:cd:37:82: 44:32:cc:99:62:b8:aa:07:9b:c1:02:fa:da:f5:7d:89:d3:fc: 42:06:1c:f3:b0:ac:bb:28:d9:a0:9b:a4:1a:4d:92:48:48:1d: 52:55:67:4d:06:d0:8f:95:82:0f:4c:29:49:f3:bf:c0:14:33: 8d:74:00:a9:cd:9d:85:04:0e:99:bd:e4:c1:d2:b1:60:4c:7a: 2e:8d:7f:ac:60:87:f8:15:30:29:22:35:c1:6e:46:55:74:0f: e6:97:4a:df:11:dd:10:fa:b4:bc:c3:6c:50:85:0e:3b:7b:82: 1e:40:f3:4f:33:2d:38:5c:c5:d1:52:84:bd:7a:6f:28:b5:00: 3c:3d:1d:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjczQjExMC8GA1UEBRMoMTVDRjUwREI1MkIwRjEyRjFBNkUzQjM5NjMzRDQ4MkUw OUNGRTM1QzAeFw0yNTA0MTEwNTU0MjZaFw0yNTA0MTgwNTU0MjZaMBgxFjAUBgNV BAMTDTY3ZjhhZTkzLWNmOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2VoW1GOcfQPd8ay7LxxvDEaQ6BJSWoA9Mo9TGXSkislplOCnJ+WvEBoocI9Lh aNIQ1TYotkP2fr+PiTJ/4apLmO6bjUKQ620Ov6GOwN/jyBi8IHlrUYIv7Zj9ROiJ HyrCcWeCay9q6v37gn2zJilM8yAmLiDEv7ZBr5Iud0pEy1AeQdyGxwmenrCqMniK x6SJMc1TVHmp0Q3rSKwAJ4H/7IX2LBI00kIsKQmn7pZx95IruXOvu2MVWgxGTCtY +m03v0tHqHaPWX+xqDLt1ULXtU5H0SS7e4Kd4gHuWpUeoPB6cJ0n1Xk9SYDGv153 4OmWlKT3sMRGntbURnnWOdWbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBD5NN4jI uOLKNUxArszXUX/zO2wwHwYDVR0jBBgwFoAUFc9Q21Kw8S8abjs5Yz1ILgnP41ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NzNCLzgxMkYyMTM2NURG RTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmM5UTIxS3c4UzhhYmpzNVl6MUlMZ25QNDF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NzNCLzgxMkYyMTM2NURGRTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4 YWJqczVZejFJTGduUDQxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMalr+cBVykXTB5Ql8cJ5fsKdNRK9pw3G9ZrPfgZRkEbFU9t+W/GUu3j ndgcVl4lqgEx7l16dojtrv8mCz7wXEKh49zIeAqNEqi5qyKr/HG4BRa4NiJ9maKH KQoSayimPAp6+rH1TJdRxMG+pADEIXcGa284aKfoxyL7uM03gkQyzJliuKoHm8EC +tr1fYnT/EIGHPOwrLso2aCbpBpNkkhIHVJVZ00G0I+Vgg9MKUnzv8AUM410AKnN nYUEDpm95MHSsWBMei6Nf6xgh/gVMCkiNcFuRlV0D+aXSt8R3RD6tLzDbFCFDjt7 gh5A808zLThcxdFShL16byi1ADw9HaE= -----END CERTIFICATE-----Generated at Sat Apr 12 22:29:17 2025 by rpki-client