$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: Iot+80DrNdL6tsVk4AhpcWQCiSP1hTeYLqWziy6nGKE= Subject key identifier: 19:17:9B:0B:6E:86:77:15:6C:90:C3:ED:4C:DF:50:21:46:12:73:61 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0F65 Signing time: Fri 04 Apr 2025 17:59:25 +0000 Manifest this update: Fri 04 Apr 2025 17:59:24 +0000 Manifest next update: Fri 11 Apr 2025 17:59:24 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: 2DBy8sSfUrfG6N9KjIWA3iJKL++SvYM7O5sZQvsyHrw=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0 Validity Not Before: Apr 4 17:59:24 2025 GMT Not After : Apr 11 17:59:24 2025 GMT Subject: CN=67f01dfd-8aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:68:2d:6b:be:e7:00:c9:58:28:c9:c7:fd: e0:ca:30:6a:8d:e3:3c:37:f5:08:e1:67:c3:00:60: ee:c6:4f:63:81:b7:6c:e0:0d:6e:5c:98:e1:83:9b: a9:b6:58:8a:50:b6:39:4f:3e:d7:f3:c7:50:70:79: 30:91:ec:cf:f8:61:ed:38:c6:83:3f:47:23:55:5f: 9d:4a:34:ff:02:51:11:82:c2:65:a5:21:df:66:6e: 02:41:aa:86:d9:8b:33:d6:15:22:6a:e7:f2:83:5c: 60:f0:27:a2:f3:19:3d:f3:0b:08:27:e8:08:34:12: dd:09:76:30:0a:55:5b:d8:9b:a7:53:1a:c1:46:c0: f7:25:bb:c6:68:56:d1:aa:dd:41:25:e3:05:d3:9b: df:2d:69:3b:c9:56:cf:c9:6c:af:92:9e:d9:ef:4f: d3:f3:e3:23:d8:09:6c:a6:98:0e:6a:5f:00:9d:ef: dd:38:51:0f:9d:7c:15:4f:5e:51:08:26:14:ea:fa: 03:82:9c:a1:e5:a8:e2:27:1a:57:a0:18:a9:f2:1d: 33:08:18:65:12:17:c9:c6:dc:5b:3b:2a:5f:1d:30: ab:31:2b:cd:71:89:48:6c:36:c1:11:ea:32:34:1e: a3:f7:bc:29:d2:9e:39:d1:14:56:30:d5:af:07:f6: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:9B:0B:6E:86:77:15:6C:90:C3:ED:4C:DF:50:21:46:12:73:61 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b7:78:c6:9a:68:8a:78:2d:66:f9:e1:62:f2:52:d9:d8:d6: b9:76:4f:07:b9:dc:bc:e0:5f:c6:d1:f9:24:db:32:57:0a:8a: 07:a2:0b:fc:ad:48:4a:ef:17:ac:66:5c:60:e1:42:ee:14:1e: 39:ba:04:47:ec:65:56:5f:01:9f:ff:89:27:5f:d6:7f:57:c0: 1e:20:ed:cc:89:eb:07:ae:36:3b:25:bc:4e:79:75:45:4a:6d: c2:f6:2e:10:cc:9e:f6:ea:d7:da:11:cc:8b:8d:a4:d0:2a:a7: f2:a4:0d:2a:0d:e4:75:cb:cc:ff:72:72:e2:04:f7:60:bf:81: 9c:48:c7:95:0d:6c:37:64:c0:35:bb:4d:b8:ca:18:0e:a3:08: 33:9e:55:93:eb:31:86:44:78:d9:70:34:c0:4f:82:60:a7:2d: be:26:bb:a7:90:cf:5b:0d:44:b3:c4:03:ad:25:11:2b:0e:90: 71:b4:3a:1e:84:8f:ed:bb:43:93:eb:7f:a5:10:4a:02:a3:62: 92:4e:fb:29:67:24:d6:e9:61:e8:9b:59:41:e3:09:c0:41:62: 4c:38:6f:51:79:ff:4d:7a:d4:3f:ca:35:a4:5e:9a:35:fd:48: 9e:da:f1:b5:7b:05:40:af:3f:15:72:49:7a:17:83:41:ed:b1: 26:43:d1:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNDA0MTc1OTI0WhcNMjUwNDExMTc1OTI0WjAYMRYwFAYD VQQDEw02N2YwMWRmZC04YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkdoLWu+5wDJWCjJx/3gyjBqjeM8N/UI4WfDAGDuxk9jgbds4A1uXJjhg5up tliKULY5Tz7X88dQcHkwkezP+GHtOMaDP0cjVV+dSjT/AlERgsJlpSHfZm4CQaqG 2Ysz1hUiaufyg1xg8Cei8xk98wsIJ+gINBLdCXYwClVb2JunUxrBRsD3JbvGaFbR qt1BJeMF05vfLWk7yVbPyWyvkp7Z70/T8+Mj2AlsppgOal8Ane/dOFEPnXwVT15R CCYU6voDgpyh5ajiJxpXoBip8h0zCBhlEhfJxtxbOypfHTCrMSvNcYlIbDbBEeoy NB6j97wp0p450RRWMNWvB/aDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkXmwtu hncVbJDD7UzfUCFGEnNhMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3t3jGmmiKeC1m+eFi8lLZ2Na5dk8Hudy84F/G0fkk2zJXCooHogv8 rUhK7xesZlxg4ULuFB45ugRH7GVWXwGf/4knX9Z/V8AeIO3MiesHrjY7JbxOeXVF Sm3C9i4QzJ726tfaEcyLjaTQKqfypA0qDeR1y8z/cnLiBPdgv4GcSMeVDWw3ZMA1 u024yhgOowgznlWT6zGGRHjZcDTAT4Jgpy2+JrunkM9bDUSzxAOtJRErDpBxtDoe hI/tu0OT63+lEEoCo2KSTvspZyTW6WHom1lB4wnAQWJMOG9Ref9NetQ/yjWkXpo1 /Uie2vG1ewVArz8Vckl6F4NB7bEmQ9Fb -----END CERTIFICATE-----Generated at Sat Apr 5 06:06:58 2025 by rpki-client