$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: qSQSt/qCH42zUB2FvKBEeHf9WILcuD35MTqxV5/rrco= Subject key identifier: BA:29:BB:39:49:9B:42:01:55:34:89:2E:F2:04:47:C1:30:C8:25:EA Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 01EE Signing time: Sat 29 Mar 2025 02:20:35 +0000 Manifest this update: Sat 29 Mar 2025 02:20:34 +0000 Manifest next update: Sat 05 Apr 2025 02:20:34 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: wnV31jRq4ZFJUQELxYmV3QP62lh/kIt6F5+X92jI3HE=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4 Validity Not Before: Mar 29 02:20:34 2025 GMT Not After : Apr 5 02:20:34 2025 GMT Subject: CN=67e758f3-014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:51:24:02:92:88:59:02:16:e1:3e:87:e8: 03:34:bc:ac:2b:ae:02:a0:3d:a2:69:2b:50:70:fb: 1c:5b:f9:43:85:fe:c8:25:4d:5f:63:92:b9:33:2e: 1b:e4:f7:c7:43:80:80:fe:d0:fb:6a:05:4f:ca:25: 8a:cd:af:08:a7:d3:1f:32:23:2e:a8:a9:0a:62:06: f7:5d:72:43:17:b2:73:79:bb:ca:93:3a:ab:9c:81: e3:85:2a:7d:d2:8a:1a:3a:bb:5b:0c:1b:82:42:e5: 15:7f:c4:cc:ea:b7:ff:de:2c:2b:17:1c:2f:9d:52: 83:68:16:8d:98:84:77:65:a3:c3:19:ea:1b:70:42: 5b:84:51:be:ca:9d:fa:d8:bb:08:cd:9c:e5:16:e7: 58:bc:55:34:34:7e:38:6e:ab:9c:a9:c5:37:96:61: cb:a3:ce:d0:f1:84:23:8c:15:06:6c:8b:88:0e:6c: 2b:e8:09:63:68:f7:58:1b:c1:a9:bb:12:94:2e:18: 9d:a6:df:41:09:bc:08:66:a8:b9:5a:44:c4:2e:89: 34:80:51:34:4e:65:96:51:75:ab:06:0d:82:4c:fa: 20:be:1f:28:90:2e:b2:b8:fa:30:5e:87:4b:31:17: e7:f3:e2:b8:b3:fd:44:da:13:2f:ec:74:3a:e1:2b: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:29:BB:39:49:9B:42:01:55:34:89:2E:F2:04:47:C1:30:C8:25:EA X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e5:a0:91:fa:8d:f2:0f:99:e8:0a:40:f6:1a:2c:91:36:a3: 6d:bf:49:40:b3:5f:6d:a2:18:4f:21:f9:39:c4:df:b4:08:a7: 8c:39:87:2d:cc:ed:2a:86:d7:72:4b:97:f8:ff:52:8f:70:f0: 92:99:02:1f:10:50:7f:d8:32:69:6d:b8:74:66:8e:a0:3a:d1: e2:81:66:73:10:02:db:d4:cb:dd:a0:5a:0f:9b:eb:0e:7e:3d: 61:ef:fe:bf:4d:c1:45:33:b4:87:76:cf:87:6c:57:44:58:90: e7:1c:5c:84:11:12:9d:45:31:01:3a:b5:57:c8:17:1d:b2:b8: 72:2a:0b:c7:46:97:71:b7:84:02:69:bc:6f:df:7a:5c:61:fc: 8c:f5:85:8d:f7:36:f5:7c:4f:90:32:0e:24:5f:8f:7b:ba:05: a9:5a:02:c7:28:df:7e:38:02:3c:20:fe:e8:ff:3d:bb:99:6f: b4:d6:d3:e5:85:e6:6d:76:3c:8a:de:9c:95:c5:cf:02:94:e3: f2:2f:f2:56:9e:4e:0a:65:02:49:13:ab:7d:c1:6f:b8:5f:97: d7:7e:3d:9e:fb:c3:dc:c8:29:09:df:df:cb:b3:e0:2c:b2:a2: 60:ed:b5:c9:eb:dd:26:0d:31:16:cd:3d:62:ae:a3:39:cd:46: ab:4b:3d:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwMzI5MDIyMDM0WhcNMjUwNDA1MDIyMDM0WjAYMRYwFAYD VQQDEw02N2U3NThmMy0wMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LZRJAKSiFkCFuE+h+gDNLysK64CoD2iaStQcPscW/lDhf7IJU1fY5K5My4b 5PfHQ4CA/tD7agVPyiWKza8Ip9MfMiMuqKkKYgb3XXJDF7JzebvKkzqrnIHjhSp9 0ooaOrtbDBuCQuUVf8TM6rf/3iwrFxwvnVKDaBaNmIR3ZaPDGeobcEJbhFG+yp36 2LsIzZzlFudYvFU0NH44bqucqcU3lmHLo87Q8YQjjBUGbIuIDmwr6AljaPdYG8Gp uxKULhidpt9BCbwIZqi5WkTELok0gFE0TmWWUXWrBg2CTPogvh8okC6yuPowXodL MRfn8+K4s/1E2hMv7HQ64SuHRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLopuzlJ m0IBVTSJLvIER8EwyCXqMB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl5aCR+o3yD5noCkD2GiyRNqNtv0lAs19tohhPIfk5xN+0CKeMOYct zO0qhtdyS5f4/1KPcPCSmQIfEFB/2DJpbbh0Zo6gOtHigWZzEALb1MvdoFoPm+sO fj1h7/6/TcFFM7SHds+HbFdEWJDnHFyEERKdRTEBOrVXyBcdsrhyKgvHRpdxt4QC abxv33pcYfyM9YWN9zb1fE+QMg4kX497ugWpWgLHKN9+OAI8IP7o/z27mW+01tPl heZtdjyK3pyVxc8ClOPyL/JWnk4KZQJJE6t9wW+4X5fXfj2e+8PcyCkJ39/Ls+As sqJg7bXJ690mDTEWzT1irqM5zUarSz05 -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:04 2025 by rpki-client