$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: uH8EfOMm8DrhcrGBIoqTcQcntThqU4GH0gwEjOYA1GY= Subject key identifier: A8:ED:0B:0D:D2:B5:83:FE:41:7C:A0:2C:DF:AE:94:D9:67:97:E6:80 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 03D9 Signing time: Tue 15 Apr 2025 00:18:39 +0000 Manifest this update: Tue 15 Apr 2025 00:18:39 +0000 Manifest next update: Tue 22 Apr 2025 00:18:39 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: ieSif3JjxGBXrtPi96yTX0tkMQjwSbLQvxhbEBs0wiI=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 03QgKXxeVhyZFOfohBjqcW0vK1f3sUZMJYpV9kpUL1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Apr 15 00:18:39 2025 GMT Not After : Apr 22 00:18:39 2025 GMT Subject: CN=67fda5df-adde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ea:59:59:9f:7b:44:95:ef:ed:a2:26:11:7d: fe:f7:fd:1c:48:0b:99:2e:98:f2:89:28:8f:6b:3f: 56:1a:ab:00:ce:35:12:ba:df:9e:cd:7a:a7:64:2e: 6e:ab:1d:5b:b5:83:ab:86:d4:ce:e9:ae:36:d5:56: fd:69:81:f7:ed:96:59:be:34:90:e0:f8:cd:bc:53: 7c:87:97:90:fd:d5:3c:d8:80:a7:1d:1f:d3:d0:9d: 4b:f4:5f:b5:d8:bd:cd:c0:6d:9d:68:03:3c:a8:ee: be:12:c0:48:57:d0:0d:b6:fb:97:4d:f6:f6:5d:5b: fa:b3:f7:3e:8c:7b:d8:18:a2:19:cb:2e:cc:45:5d: 90:66:51:09:50:e6:2b:21:a0:c7:16:d8:b7:49:b8: 01:be:74:82:34:4b:38:c7:08:a3:22:45:a5:fa:80: eb:c2:37:71:aa:b9:39:90:5b:ad:37:9b:35:b8:94: 04:7a:5b:65:5e:9e:7f:2f:ec:b1:c7:69:ee:fc:0f: a2:a3:b7:4a:ff:24:c0:09:bb:73:81:dc:69:89:9e: 29:65:09:a0:20:d1:3e:f0:47:85:75:89:ef:ec:a3: 48:d3:97:08:55:ae:31:b6:11:b8:7f:56:16:64:92: f3:2e:ed:17:f6:47:f4:55:81:54:5b:a6:39:1c:df: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:0B:0D:D2:B5:83:FE:41:7C:A0:2C:DF:AE:94:D9:67:97:E6:80 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5c:a5:0a:03:36:78:e5:2a:d7:bd:8c:e9:20:28:40:b3:fb: 0d:e3:25:df:e4:4c:56:20:d9:95:d5:a2:bf:f3:e6:6e:37:18: f7:5d:34:1f:ae:37:7c:2d:7b:be:c2:42:1f:fb:98:f0:7f:40: 58:d8:4d:cb:8d:1c:5c:79:5d:0f:2b:a8:61:a7:85:15:e1:19: 69:77:b2:39:55:14:ca:0c:17:c6:45:22:0f:e2:e8:41:d5:b3: 30:b9:e6:42:6f:c3:40:13:91:4a:e7:8e:02:0b:09:d3:2e:91: c9:87:04:ed:bc:4d:e3:80:d8:35:10:7a:24:13:88:00:ec:92: 6f:12:f4:ab:fb:dc:42:d0:a2:7d:f2:f8:df:f7:94:6b:ba:db: a6:60:14:c5:0b:4e:2f:c6:1a:61:ae:e5:64:c6:0e:a4:67:a8: 9e:db:43:cf:e2:b0:5c:84:8f:c3:3a:08:c2:89:28:cb:89:91: a6:da:0a:a5:81:3f:43:2d:93:5b:57:8d:ee:38:6a:fc:d4:d1: b8:d8:00:7b:eb:86:f9:f7:fe:e6:aa:f8:34:de:ef:17:ec:f9: fe:37:d2:bd:11:cc:63:66:69:a3:f0:53:a2:96:da:4d:98:b2: aa:7c:71:72:41:45:a9:35:6d:e7:36:b0:cc:b2:b3:12:74:0c: cb:44:1c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUwNDE1MDAxODM5WhcNMjUwNDIyMDAxODM5WjAYMRYwFAYD VQQDEw02N2ZkYTVkZi1hZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9OpZWZ97RJXv7aImEX3+9/0cSAuZLpjyiSiPaz9WGqsAzjUSut+ezXqnZC5u qx1btYOrhtTO6a421Vb9aYH37ZZZvjSQ4PjNvFN8h5eQ/dU82ICnHR/T0J1L9F+1 2L3NwG2daAM8qO6+EsBIV9ANtvuXTfb2XVv6s/c+jHvYGKIZyy7MRV2QZlEJUOYr IaDHFti3SbgBvnSCNEs4xwijIkWl+oDrwjdxqrk5kFutN5s1uJQEeltlXp5/L+yx x2nu/A+io7dK/yTACbtzgdxpiZ4pZQmgINE+8EeFdYnv7KNI05cIVa4xthG4f1YW ZJLzLu0X9kf0VYFUW6Y5HN9M+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjtCw3S tYP+QXygLN+ulNlnl+aAMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRXKUKAzZ45SrXvYzpIChAs/sN4yXf5ExWINmV1aK/8+ZuNxj3XTQf rjd8LXu+wkIf+5jwf0BY2E3LjRxceV0PK6hhp4UV4Rlpd7I5VRTKDBfGRSIP4uhB 1bMwueZCb8NAE5FK544CCwnTLpHJhwTtvE3jgNg1EHokE4gA7JJvEvSr+9xC0KJ9 8vjf95RrutumYBTFC04vxhphruVkxg6kZ6ie20PP4rBchI/DOgjCiSjLiZGm2gql gT9DLZNbV43uOGr81NG42AB764b59/7mqvg03u8X7Pn+N9K9EcxjZmmj8FOiltpN mLKqfHFyQUWpNW3nNrDMsrMSdAzLRByj -----END CERTIFICATE-----Generated at Wed Apr 16 15:49:25 2025 by rpki-client