$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: zWIDiGAf+bY6GItbNs4ihX//FvRiK59Roi3e8wMWLfQ= Subject key identifier: 57:3F:01:83:58:4B:C0:F1:3A:17:47:BF:39:26:25:96:3D:2A:BE:18 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F1B Signing time: Sat 12 Apr 2025 17:32:51 +0000 Manifest this update: Sat 12 Apr 2025 17:32:51 +0000 Manifest next update: Sat 19 Apr 2025 17:32:51 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: Thp7ADblY75q11l+zwZZj3VEQ6nQEojND+DQPEXZy+c=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3874 (0xf22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Apr 12 17:32:51 2025 GMT Not After : Apr 19 17:32:51 2025 GMT Subject: CN=67faa3c3-7ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:d7:a6:d6:af:d7:9d:44:22:5d:50:0a:ad: 01:d1:fa:1e:d2:8e:0b:64:45:e7:11:ff:c4:66:a9: d6:b7:9a:ef:0f:e5:0c:a8:c1:e2:4a:40:a2:e2:34: e1:7b:0a:08:0b:0d:93:4f:49:16:23:ca:e5:17:a0: b3:a6:be:7a:08:f3:0f:bb:88:f2:bf:7c:75:4f:ea: fb:da:16:77:1c:0e:98:2f:a2:5e:a6:a3:c3:6e:62: e6:bd:24:8a:96:b8:86:f4:cc:cb:42:9d:e7:8d:50: f4:37:12:c4:d1:95:52:6a:bc:c8:d5:2f:11:93:8b: e7:78:8b:b4:d9:9f:87:98:c6:61:4e:2c:95:42:76: 32:b3:f7:ea:33:ff:e8:0d:bd:4f:d6:ec:52:cc:e0: 2a:81:81:34:df:a0:96:c8:6e:7e:00:9b:7d:e9:ee: 52:3d:17:ec:4a:2f:93:15:1e:79:9d:f7:86:bd:a5: a9:15:88:27:39:cf:aa:5b:a5:59:c9:ba:0e:0e:2f: 5b:a9:9b:37:ed:76:2c:5f:c9:46:18:ff:8d:be:14: 6b:9e:12:9e:b1:48:73:5f:94:d7:b0:4c:48:c5:38: a1:cb:7d:b2:4c:bc:ac:48:e4:f6:c1:d1:c1:c7:67: ae:42:e3:0b:69:1e:7c:d2:c5:a6:4b:a5:ba:7f:77: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3F:01:83:58:4B:C0:F1:3A:17:47:BF:39:26:25:96:3D:2A:BE:18 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6c:3c:54:ef:3b:73:fa:d8:e0:41:24:18:bc:5e:49:75:ce: 9d:50:4f:76:16:af:ca:bb:23:12:12:ee:82:2f:56:65:2b:54: db:32:8d:35:cd:c3:12:07:29:3a:38:4f:66:0f:fa:24:56:6e: 2a:f1:2f:54:75:3e:e3:41:51:6a:28:47:39:f4:c4:24:12:be: 4e:17:8c:c2:8c:a6:eb:ac:3c:ce:ee:21:76:a4:3a:fa:07:0a: 6a:cf:6c:4b:b7:e1:17:0a:61:c3:bc:64:b9:b7:50:29:7d:9c: 3b:c5:81:41:56:fc:08:18:bd:1e:13:0d:ef:03:ed:16:a9:b8: ed:d7:ec:80:d9:a6:f7:b7:e4:fe:1c:47:a9:51:d6:4f:cb:46: eb:29:e8:b0:1f:eb:b5:ca:cf:55:40:4b:87:a8:65:48:d4:ed: e5:9e:32:69:13:38:b2:2e:6d:3d:8a:6a:8b:c3:18:e7:9e:91: 7e:4b:4e:5e:e6:74:d7:e7:ba:32:cf:8f:c5:36:2c:37:af:6d: d2:90:0d:0f:88:c7:27:bd:45:b9:f3:88:e5:2e:7c:05:ef:4d: 5f:6f:23:83:3b:ea:4f:91:0e:9b:d9:56:5a:ed:d9:34:cf:bf: 9b:93:b4:34:5c:90:94:25:11:40:24:c3:71:01:1e:ba:44:2f: a8:91:b5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNDEyMTczMjUxWhcNMjUwNDE5MTczMjUxWjAYMRYwFAYD VQQDEw02N2ZhYTNjMy03ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LLXptav151EIl1QCq0B0foe0o4LZEXnEf/EZqnWt5rvD+UMqMHiSkCi4jTh ewoICw2TT0kWI8rlF6Czpr56CPMPu4jyv3x1T+r72hZ3HA6YL6JepqPDbmLmvSSK lriG9MzLQp3njVD0NxLE0ZVSarzI1S8Rk4vneIu02Z+HmMZhTiyVQnYys/fqM//o Db1P1uxSzOAqgYE036CWyG5+AJt96e5SPRfsSi+TFR55nfeGvaWpFYgnOc+qW6VZ yboODi9bqZs37XYsX8lGGP+NvhRrnhKesUhzX5TXsExIxTihy32yTLysSOT2wdHB x2euQuMLaR580sWmS6W6f3fo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc/AYNY S8DxOhdHvzkmJZY9Kr4YMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEbDxU7ztz+tjgQSQYvF5Jdc6dUE92Fq/KuyMSEu6CL1ZlK1TbMo01 zcMSByk6OE9mD/okVm4q8S9UdT7jQVFqKEc59MQkEr5OF4zCjKbrrDzO7iF2pDr6 Bwpqz2xLt+EXCmHDvGS5t1ApfZw7xYFBVvwIGL0eEw3vA+0Wqbjt1+yA2ab3t+T+ HEepUdZPy0brKeiwH+u1ys9VQEuHqGVI1O3lnjJpEziyLm09imqLwxjnnpF+S05e 5nTX57oyz4/FNiw3r23SkA0PiMcnvUW584jlLnwF701fbyODO+pPkQ6b2VZa7dk0 z7+bk7Q0XJCUJRFAJMNxAR66RC+okbXv -----END CERTIFICATE-----Generated at Sat Apr 12 20:03:37 2025 by rpki-client