$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json) Hash identifier: wfQBYcNllN3yH3I3UzsB/89fdn3iF7qDzsTeSCTblmw= Subject key identifier: 5E:03:54:70:00:C6:D7:10:E8:D0:45:7E:13:4F:A4:AB:10:60:C0:D0 Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft Manifest number: 0878 Signing time: Sun 06 Apr 2025 21:32:46 +0000 Manifest this update: Sun 06 Apr 2025 21:32:46 +0000 Manifest next update: Sun 13 Apr 2025 21:32:46 +0000 Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: 3mqLZ7iyWw88l5kn8HfMCkQnuQAKvhwTdwhKAj2dZWo=) 2: 50F8849CFDC111ED95AAA041C4F9AE02.roa (hash: 0DD71MyNn/a0ClFzY+negnwcfIlHkrg4N1Q4gkDWcxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C654A Validity Not Before: Apr 6 21:32:46 2025 GMT Not After : Apr 13 21:32:46 2025 GMT Subject: CN=67f2f2fe-dffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:27:ca:1e:d4:1b:7e:17:79:fb:03:af:41:34: 4f:8d:a0:22:fb:19:4d:b0:ae:f7:12:fe:a8:68:c6: 54:fd:2c:ed:da:87:5d:fb:f3:a7:9a:b2:7d:e0:20: c0:14:72:83:aa:9f:f9:aa:77:58:e5:c4:e1:aa:d0: 44:56:6e:00:80:e3:01:8a:cb:a2:aa:42:1f:4f:2d: 5f:50:16:74:7a:d5:e6:b5:b5:7c:0c:13:83:b5:a8: 12:2f:4b:6b:0c:88:8d:5e:1d:e3:67:0e:b6:53:4e: c6:69:02:6e:12:9b:c7:92:ff:5f:d4:62:e2:6a:8b: 3a:b1:ac:b5:72:ec:6d:30:af:28:4c:87:cd:cc:74: fe:59:1a:15:35:fb:71:dc:22:86:82:11:fa:6a:f9: 91:fc:23:72:80:09:7e:b9:38:4e:3d:61:b4:04:77: 8b:31:4e:2c:1a:ce:b4:aa:fd:2f:8b:35:17:8c:92: 32:4c:05:74:26:49:a2:3a:0d:1b:cb:4f:dd:46:74: 00:b1:23:5b:85:5b:72:f3:bf:5f:86:dc:48:af:f8: e2:69:7e:fd:20:ff:9f:bf:fa:6b:8b:1b:08:c1:09: dd:d0:3a:66:e9:38:c5:27:9c:9e:77:d4:e7:5e:bb: 25:bf:9e:15:7d:67:e3:dd:4e:1b:0a:ed:36:ab:92: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:54:70:00:C6:D7:10:E8:D0:45:7E:13:4F:A4:AB:10:60:C0:D0 X509v3 Authority Key Identifier: keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:03:27:b5:e0:a8:d1:42:77:64:f0:50:88:b7:a0:1d:9f:3a: 14:6a:aa:52:5e:f4:04:86:95:77:42:03:cf:be:4a:2f:73:bf: f9:ce:ee:73:65:50:96:fe:79:01:bc:4f:a0:7e:ba:cf:bd:d3: 53:11:22:fc:d5:23:19:15:a1:66:d0:82:8d:b5:3b:70:58:cc: c9:eb:0f:5e:d9:ab:61:a6:eb:9d:87:8e:13:e1:b0:3d:9f:6b: 48:a1:8b:0c:e8:e4:b4:fb:07:3a:f7:87:82:8d:33:a1:0e:dc: ca:24:59:06:7c:2e:12:71:9e:74:25:e5:35:1b:fe:12:7d:40: f5:a1:7e:af:fb:e7:9d:f1:c1:6e:1d:65:ad:02:63:d5:0c:7d: e4:84:1f:f8:ec:0d:e4:8a:21:10:7b:d4:9f:08:b7:86:85:7a: f3:c4:19:ef:0e:6b:08:9c:07:34:c1:ca:e8:67:1f:ad:d3:9e: 76:a8:b4:d7:52:4d:7f:4c:00:07:21:41:7c:7f:03:7f:ce:0e: b5:bf:c7:82:af:8f:e1:44:67:56:fa:74:cd:c1:20:c3:e1:c9: 82:a7:4d:f4:1b:8b:1a:80:3a:af:a9:59:b8:02:59:50:84:cc: 21:f2:59:41:fa:5b:f7:f9:0d:ea:19:a7:50:1d:d3:a9:49:75: 45:85:6e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE RTZBQjI3MUEwHhcNMjUwNDA2MjEzMjQ2WhcNMjUwNDEzMjEzMjQ2WjAYMRYwFAYD VQQDEw02N2YyZjJmZS1kZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ifKHtQbfhd5+wOvQTRPjaAi+xlNsK73Ev6oaMZU/Szt2odd+/OnmrJ94CDA FHKDqp/5qndY5cThqtBEVm4AgOMBisuiqkIfTy1fUBZ0etXmtbV8DBODtagSL0tr DIiNXh3jZw62U07GaQJuEpvHkv9f1GLiaos6say1cuxtMK8oTIfNzHT+WRoVNftx 3CKGghH6avmR/CNygAl+uThOPWG0BHeLMU4sGs60qv0vizUXjJIyTAV0JkmiOg0b y0/dRnQAsSNbhVty879fhtxIr/jiaX79IP+fv/prixsIwQnd0Dpm6TjFJ5yed9Tn Xrslv54VfWfj3U4bCu02q5JE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4DVHAA xtcQ6NBFfhNPpKsQYMDQMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1 MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80 X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfAye14KjRQndk8FCIt6AdnzoUaqpSXvQEhpV3QgPPvkovc7/5zu5z ZVCW/nkBvE+gfrrPvdNTESL81SMZFaFm0IKNtTtwWMzJ6w9e2athpuudh44T4bA9 n2tIoYsM6OS0+wc694eCjTOhDtzKJFkGfC4ScZ50JeU1G/4SfUD1oX6v++ed8cFu HWWtAmPVDH3khB/47A3kiiEQe9SfCLeGhXrzxBnvDmsInAc0wcroZx+t0552qLTX Uk1/TAAHIUF8fwN/zg61v8eCr4/hRGdW+nTNwSDD4cmCp030G4sagDqvqVm4AllQ hMwh8llB+lv3+Q3qGadQHdOpSXVFhW5N -----END CERTIFICATE-----Generated at Mon Apr 7 01:26:13 2025 by rpki-client