$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: W9kvwrI0Tkj9hXqUxzjhfdxNGgUCxJunlxWgNn2qtHk= Subject key identifier: AE:C5:DE:15:36:22:2B:B8:7F:90:03:AB:33:FE:26:3C:E1:BA:73:C9 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 019F Signing time: Sat 29 Mar 2025 02:55:37 +0000 Manifest this update: Sat 29 Mar 2025 02:55:36 +0000 Manifest next update: Sat 05 Apr 2025 02:55:36 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: txAEGlGhxv4LSyDy2Isgps+b7z8lF7ll+aELFK7TRu4=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066 Validity Not Before: Mar 29 02:55:36 2025 GMT Not After : Apr 5 02:55:36 2025 GMT Subject: CN=67e76128-4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:bc:7b:27:ae:63:d8:08:12:e9:6f:35:15: 8a:ba:7d:e9:64:42:cf:a6:68:b4:c9:65:02:f2:4e: fe:5c:db:a9:4e:38:4d:77:55:3a:40:14:df:ac:9c: 34:af:84:3f:f1:25:9c:8f:da:59:14:7c:52:d1:90: d4:b4:03:42:31:68:1d:e0:ba:41:cc:11:36:de:d9: 95:0e:2e:ff:cc:b9:9f:01:dc:8a:d4:8f:b4:93:5a: 7e:ff:3f:87:51:a6:65:a1:81:fc:73:e3:f6:6a:5c: a5:c1:d4:e9:46:7a:7f:3f:90:f1:b6:af:55:92:b5: 8e:e3:3f:ce:bc:c4:7c:f8:4a:b1:39:9d:2d:7c:31: 76:9f:05:88:b6:12:21:61:d6:5e:5d:ce:21:d0:36: 29:fe:56:76:50:c5:2b:33:1d:79:94:f9:6e:9f:56: 3d:f7:61:69:da:aa:be:40:d2:41:b6:d7:ce:ae:50: 4a:d1:68:30:38:c0:c9:ae:33:4e:b6:49:83:c3:1a: 64:6c:d7:19:29:f3:76:57:3e:d4:ed:99:8f:01:95: 2d:aa:08:1e:e6:de:f9:6e:eb:b1:bd:f7:65:a6:1f: 44:b4:07:a1:c9:f6:f8:25:7d:76:61:d4:55:fe:2b: 13:ba:e0:5e:ae:57:42:69:92:a3:32:b2:33:87:9e: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C5:DE:15:36:22:2B:B8:7F:90:03:AB:33:FE:26:3C:E1:BA:73:C9 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:89:52:b5:d9:5c:17:9f:05:84:e9:99:94:60:54:cf:a5:1b: 72:33:24:be:7b:e2:50:b1:09:4e:63:15:95:74:7e:3e:41:65: 1c:70:93:72:fd:75:9a:1a:30:ac:34:eb:9a:cd:da:82:88:cc: 8d:9a:42:53:37:22:ff:43:95:97:d2:60:42:e1:d8:0f:b7:9e: ed:ed:78:62:a9:6e:c4:46:7c:2f:ce:b0:1b:6a:8a:be:f9:cb: 01:26:de:ed:58:17:e5:6d:d9:4b:61:34:03:62:e1:6b:cd:55: 05:b6:93:9e:51:9b:a2:59:f1:4f:44:32:90:b1:58:ad:21:2c: f4:54:9f:a6:5d:d2:eb:61:46:48:21:ff:09:be:fd:db:21:47: 8f:03:af:b0:35:b5:63:a1:e9:2f:43:67:7c:76:a2:06:5f:4b: 09:0a:9b:f0:8a:03:70:bb:f5:57:9f:56:c1:e9:66:de:60:61: ea:39:58:5d:3a:fa:69:79:90:41:40:58:17:13:61:a8:18:77: b9:0e:2e:af:64:bd:4a:24:1e:bd:ee:68:a2:53:0e:0b:21:22: c7:f5:eb:70:79:78:f2:f6:a6:21:d2:10:23:80:98:f8:31:ae: 66:39:77:3a:a1:02:62:69:5b:86:5b:80:ac:db:f9:2f:25:eb: dc:0d:68:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwMzI5MDI1NTM2WhcNMjUwNDA1MDI1NTM2WjAYMRYwFAYD VQQDEw02N2U3NjEyOC00MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypG8eyeuY9gIEulvNRWKun3pZELPpmi0yWUC8k7+XNupTjhNd1U6QBTfrJw0 r4Q/8SWcj9pZFHxS0ZDUtANCMWgd4LpBzBE23tmVDi7/zLmfAdyK1I+0k1p+/z+H UaZloYH8c+P2alylwdTpRnp/P5Dxtq9VkrWO4z/OvMR8+EqxOZ0tfDF2nwWIthIh YdZeXc4h0DYp/lZ2UMUrMx15lPlun1Y992Fp2qq+QNJBttfOrlBK0WgwOMDJrjNO tkmDwxpkbNcZKfN2Vz7U7ZmPAZUtqgge5t75buuxvfdlph9EtAehyfb4JX12YdRV /isTuuBerldCaZKjMrIzh54e3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7F3hU2 Iiu4f5ADqzP+JjzhunPJMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRiVK12VwXnwWE6ZmUYFTPpRtyMyS+e+JQsQlOYxWVdH4+QWUccJNy /XWaGjCsNOuazdqCiMyNmkJTNyL/Q5WX0mBC4dgPt57t7XhiqW7ERnwvzrAbaoq+ +csBJt7tWBflbdlLYTQDYuFrzVUFtpOeUZuiWfFPRDKQsVitISz0VJ+mXdLrYUZI If8Jvv3bIUePA6+wNbVjoekvQ2d8dqIGX0sJCpvwigNwu/VXn1bB6WbeYGHqOVhd OvppeZBBQFgXE2GoGHe5Di6vZL1KJB697miiUw4LISLH9etweXjy9qYh0hAjgJj4 Ma5mOXc6oQJiaVuGW4Cs2/kvJevcDWi9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:02:03 2025 by rpki-client