$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: hE3gI4BjtdzIafBtHnc5lB9DcU+yy4az8KmmmCjdX+A= Subject key identifier: E7:74:C5:E7:0D:81:3F:8C:11:01:19:F2:53:9F:52:BE:22:D2:F2:86 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 34B9 Signing time: Fri 04 Apr 2025 14:25:56 +0000 Manifest this update: Fri 04 Apr 2025 14:25:55 +0000 Manifest next update: Fri 11 Apr 2025 14:25:55 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: fXJoVo4jVyIYi3EPQVNyiOYOyJB5QqpZKRJ9xiNyoIU=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13576 (0x3508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE Validity Not Before: Apr 4 14:25:55 2025 GMT Not After : Apr 11 14:25:55 2025 GMT Subject: CN=67efebf3-3057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:bc:70:56:20:d3:10:ad:04:b1:56:c4:1b: 3f:4f:0d:1e:8e:9b:ac:9f:86:87:e9:b6:a1:74:fd: 44:d0:4b:67:75:a7:65:56:36:7f:ff:72:55:67:b7: 04:c7:43:28:4d:31:c6:60:9a:b0:6a:ff:97:3a:29: f9:04:f0:92:f2:8c:88:8c:3a:b8:21:76:cd:ce:7b: f7:92:77:bf:9c:a0:2d:04:f4:25:29:b9:63:5a:07: 74:25:60:94:28:2d:5a:15:78:f8:96:78:6e:51:24: 87:69:98:bc:ea:ca:65:7c:b4:97:0b:58:5a:9d:3a: ad:c7:fe:2c:3a:00:cc:70:2b:96:93:a3:64:da:f0: 9e:5a:86:35:24:23:70:21:33:6d:35:e0:28:de:cd: 0a:c7:f7:9e:d2:30:d8:4c:27:bd:f7:e9:90:1e:8b: 85:8c:cb:ed:0e:2c:60:23:6f:87:33:ea:13:1c:35: 11:d1:fc:de:69:96:88:79:30:9d:b0:17:3d:8b:c6: 5a:c0:04:3f:49:45:0f:f5:90:65:f6:64:9d:d5:29: af:6c:26:2b:4c:27:1e:d4:23:7c:b0:ab:d1:89:df: 36:ec:3a:17:1d:ae:df:11:ba:20:f1:34:29:da:e9: ad:46:77:36:bd:49:e4:ff:ad:21:52:19:de:08:2f: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:74:C5:E7:0D:81:3F:8C:11:01:19:F2:53:9F:52:BE:22:D2:F2:86 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fa:f8:58:e2:fe:05:3c:70:ab:62:3c:10:77:ea:1f:d7:13: b2:66:6e:16:6e:a2:55:42:60:45:0a:06:eb:4f:a5:ef:e2:27: e1:b0:4d:b0:8d:56:c2:e5:bb:b9:ce:c0:59:ed:eb:0b:d4:92: 73:09:7c:4d:78:68:0a:60:e6:c4:16:e7:ee:b7:37:6e:8a:91: 7e:7f:08:35:43:9d:14:80:f0:7d:db:e9:7d:f8:a4:ac:48:f7: aa:d2:e9:38:9a:d9:b1:59:d1:06:f7:31:f1:86:50:88:1f:73: 0f:9d:0a:af:96:eb:28:b0:ba:31:7d:10:42:87:bc:56:fc:f8: 45:f8:43:0b:3f:a1:50:86:bf:10:63:3c:71:7a:eb:be:7d:d3: 9d:54:31:f5:fc:6c:b0:58:3d:2b:52:22:ec:37:41:d5:c4:4a: f8:6f:1f:3e:4e:8e:c1:dd:0a:b2:07:d8:7b:de:72:42:c6:9c: 45:bc:e2:9c:e5:b9:6e:3d:68:83:02:03:ac:a7:8c:79:2c:70: 42:59:c7:4e:d9:de:61:b7:af:6d:62:2b:15:c2:ab:4e:76:78: 35:66:d8:24:41:53:9b:4e:c9:83:8a:3b:cc:62:1e:c5:04:7d: 7f:38:f4:28:bf:2e:b0:22:cf:63:38:9f:4b:dc:da:6c:de:bf: 5d:2f:b3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwNDA0MTQyNTU1WhcNMjUwNDExMTQyNTU1WjAYMRYwFAYD VQQDEw02N2VmZWJmMy0zMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgC8cFYg0xCtBLFWxBs/Tw0ejpusn4aH6bahdP1E0EtndadlVjZ//3JVZ7cE x0MoTTHGYJqwav+XOin5BPCS8oyIjDq4IXbNznv3kne/nKAtBPQlKbljWgd0JWCU KC1aFXj4lnhuUSSHaZi86splfLSXC1hanTqtx/4sOgDMcCuWk6Nk2vCeWoY1JCNw ITNtNeAo3s0Kx/ee0jDYTCe99+mQHouFjMvtDixgI2+HM+oTHDUR0fzeaZaIeTCd sBc9i8ZawAQ/SUUP9ZBl9mSd1SmvbCYrTCce1CN8sKvRid827DoXHa7fEbog8TQp 2umtRnc2vUnk/60hUhneCC+fVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd0xecN gT+MEQEZ8lOfUr4i0vKGMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU+vhY4v4FPHCrYjwQd+of1xOyZm4WbqJVQmBFCgbrT6Xv4ifhsE2w jVbC5bu5zsBZ7esL1JJzCXxNeGgKYObEFufutzduipF+fwg1Q50UgPB92+l9+KSs SPeq0uk4mtmxWdEG9zHxhlCIH3MPnQqvlusosLoxfRBCh7xW/PhF+EMLP6FQhr8Q Yzxxeuu+fdOdVDH1/GywWD0rUiLsN0HVxEr4bx8+To7B3QqyB9h73nJCxpxFvOKc 5bluPWiDAgOsp4x5LHBCWcdO2d5ht69tYisVwqtOdng1ZtgkQVObTsmDijvMYh7F BH1/OPQovy6wIs9jOJ9L3Nps3r9dL7O8 -----END CERTIFICATE-----Generated at Sun Apr 6 06:33:08 2025 by rpki-client