$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft File: FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json) Hash identifier: 1gFmDcO1NlMPRkhERpTXuko3VMt8QXnZ/oxO0TX+t58= Subject key identifier: 61:81:95:57:96:BE:5A:2A:3E:48:36:D5:63:9A:F5:E6:46:91:47:14 Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft Manifest number: 0547 Signing time: Fri 28 Mar 2025 23:44:00 +0000 Manifest this update: Fri 28 Mar 2025 23:44:00 +0000 Manifest next update: Fri 04 Apr 2025 23:44:00 +0000 Files and hashes: 1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: +kne+/7HVG4kD7vGzN+MSJ/Tc7n/sQk45BtStGSupTg=) 2: E07B63B2E56511EBBDFCC829C4F9AE02.roa (hash: HX21/lbwqj64UkAWuVegN1XF4VbZkVcFdwhw6cC5t+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5323 Validity Not Before: Mar 28 23:44:00 2025 GMT Not After : Apr 4 23:44:00 2025 GMT Subject: CN=67e73440-9350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:a2:21:74:31:51:81:73:f7:c2:15:3e:50: 35:6b:24:3b:c6:4d:81:ba:44:ef:13:a9:c5:76:6b: 48:38:3e:2f:6b:e9:46:42:01:72:b2:f9:26:62:b6: 94:2d:f7:6b:b0:f0:e5:dc:75:ab:92:2e:57:17:fe: d2:99:73:61:db:4c:b7:b1:66:30:3c:86:07:c1:24: d2:d0:93:6b:52:84:3d:3b:6a:36:71:0d:40:fc:51: 50:2c:95:49:99:0b:f1:cd:c9:da:d3:ef:43:bb:d7: 33:c8:65:7e:76:bd:0b:3e:15:d3:3a:af:3e:2c:e5: 33:42:da:34:49:83:43:a9:db:e2:f3:fc:2c:30:79: 08:23:68:a7:16:8e:e2:52:c7:b7:00:cc:a2:14:e5: 33:fc:09:b6:21:ab:c0:1e:f0:dc:57:30:d6:c3:50: fb:81:cd:a8:fd:4a:40:08:ee:f0:d9:2b:2d:16:60: 6a:22:96:23:61:a2:81:83:6d:76:cf:d1:bf:78:ac: 02:36:30:3b:4c:b0:e1:69:f6:a5:32:9c:55:c6:28: 29:bc:ea:32:f1:0d:34:fb:d2:f8:53:a8:94:66:c1: dc:11:dc:30:a3:48:dc:12:65:d2:5c:da:65:03:f7: ec:99:4d:64:f8:86:ba:ab:91:50:24:90:66:82:80: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:81:95:57:96:BE:5A:2A:3E:48:36:D5:63:9A:F5:E6:46:91:47:14 X509v3 Authority Key Identifier: keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:ff:a4:1e:99:d7:ad:15:95:c2:1b:f2:93:9e:71:b9:94: 6b:58:6c:80:a7:a2:e3:32:0e:a4:de:ec:b8:38:26:20:c1:6b: da:b2:29:30:93:cd:e5:60:fb:83:db:56:8b:67:a0:5f:5f:2e: 3d:77:a8:43:3e:22:c3:68:77:6b:e0:65:92:da:16:b8:50:63: 35:08:b4:7f:5e:cd:b4:69:3e:13:c1:41:33:dd:20:2c:4f:7a: b5:a6:10:d7:bc:6b:b3:7f:40:85:f5:52:84:95:6e:19:47:f3: 92:73:ae:3b:a5:c4:76:9e:39:1c:14:4e:ef:10:e1:1d:8d:93: a5:5c:f9:3a:84:db:d7:56:c5:71:55:90:27:1a:8c:3b:e6:29: dc:b4:72:31:36:6a:a1:bf:c7:60:a2:5a:74:e3:d8:57:83:80: e4:c0:58:e2:cc:82:6b:d5:28:83:28:82:e1:f1:31:7a:77:1a: 2e:bc:a0:0d:1a:71:d6:3c:70:8b:dc:8b:f7:ba:32:f8:3d:63: e1:88:ad:c5:b2:c7:86:cc:f0:69:47:fc:25:90:9c:44:9d:f8: 03:d5:b0:4a:13:55:bc:45:5f:d4:68:3c:09:2a:55:59:97:f5: 53:d2:02:f1:d8:66:df:6f:ea:b9:1e:12:71:de:c2:44:fb:59: 03:e9:4c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3 NjlEQTM1MEIwHhcNMjUwMzI4MjM0NDAwWhcNMjUwNDA0MjM0NDAwWjAYMRYwFAYD VQQDEw02N2U3MzQ0MC05MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAOiIXQxUYFz98IVPlA1ayQ7xk2BukTvE6nFdmtIOD4va+lGQgFysvkmYraU LfdrsPDl3HWrki5XF/7SmXNh20y3sWYwPIYHwSTS0JNrUoQ9O2o2cQ1A/FFQLJVJ mQvxzcna0+9Du9czyGV+dr0LPhXTOq8+LOUzQto0SYNDqdvi8/wsMHkII2inFo7i Use3AMyiFOUz/Am2IavAHvDcVzDWw1D7gc2o/UpACO7w2SstFmBqIpYjYaKBg212 z9G/eKwCNjA7TLDhafalMpxVxigpvOoy8Q00+9L4U6iUZsHcEdwwo0jcEmXSXNpl A/fsmU1k+Ia6q5FQJJBmgoDqcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGBlVeW vloqPkg21WOa9eZGkUcUMB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1 NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMyMy9ERjY2REUyNEU1NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFk c3ZKYmQzSWw5NnQybmFOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgS/+kHpnXrRWVwhvyk55xuZRrWGyAp6LjMg6k3uy4OCYgwWvasikw k83lYPuD21aLZ6BfXy49d6hDPiLDaHdr4GWS2ha4UGM1CLR/Xs20aT4TwUEz3SAs T3q1phDXvGuzf0CF9VKElW4ZR/OSc647pcR2njkcFE7vEOEdjZOlXPk6hNvXVsVx VZAnGow75inctHIxNmqhv8dgolp049hXg4DkwFjizIJr1SiDKILh8TF6dxouvKAN GnHWPHCL3Iv3ujL4PWPhiK3FsseGzPBpR/wlkJxEnfgD1bBKE1W8RV/UaDwJKlVZ l/VT0gLx2Gbfb+q5HhJx3sJE+1kD6Uzs -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:44 2025 by rpki-client