$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: dZZWOB7Rc1X8HByehHAdNIvHF91kfasY+GG+rnTFcxQ= Subject key identifier: 45:B1:D1:FB:52:3E:90:75:72:6E:56:09:9E:EF:3E:0C:B2:0F:B2:ED Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 4F Signing time: Fri 11 Apr 2025 06:29:10 +0000 Manifest this update: Fri 11 Apr 2025 06:29:10 +0000 Manifest next update: Fri 18 Apr 2025 06:29:10 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: /3tkHLsekt25H85U1zoHDnQIuUYrZhnynw4288Z00VE=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: plZkhxc00wQXxhpH5zdDV/kYvwUsg48B+WnMIB2ox4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Apr 11 06:29:10 2025 GMT Not After : Apr 18 06:29:10 2025 GMT Subject: CN=67f8b6b6-41e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:61:6e:b6:57:84:1f:35:fd:3a:b8:07:5f: c7:0f:48:32:af:b6:27:74:ca:a3:70:3b:3d:b4:9c: ef:53:02:74:26:f0:33:a2:9e:ed:5c:f2:85:03:94: a8:c6:52:62:05:54:ae:8e:7a:a4:29:08:83:2c:b8: b9:99:a4:50:48:38:09:98:7a:4e:e2:f9:08:1c:0f: 39:f3:1a:2a:8f:d3:ba:bc:4e:cc:71:23:89:30:71: f6:1a:1a:d2:53:4d:d3:1a:7e:53:68:10:2f:c9:c6: 1a:35:d7:7e:bb:4c:5c:9e:3f:2c:88:3a:47:c3:00: b3:93:9a:56:45:6c:7e:3f:59:4f:11:cd:7f:37:dc: 29:f2:0a:7b:ea:36:72:7d:bc:6c:36:8f:ae:60:2b: f3:9c:1b:18:73:ca:5c:8f:c2:53:5c:8b:7d:86:36: 79:cf:6c:46:e0:bf:de:5f:99:13:ad:00:21:1a:d8: 70:8a:c2:e1:f2:60:03:e2:ee:73:ec:7e:44:0b:37: be:f8:10:c5:7d:40:ac:93:14:f8:bb:f3:ff:32:ae: 59:56:07:0f:b5:2e:1f:e9:19:4d:03:75:24:27:d5: 43:8c:da:16:19:f0:73:84:bc:4f:3e:85:b8:9c:63: 37:c4:b7:67:9b:66:a2:89:fc:13:51:ac:d9:b9:b5: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:D1:FB:52:3E:90:75:72:6E:56:09:9E:EF:3E:0C:B2:0F:B2:ED X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:75:65:07:23:5d:c0:27:1d:87:eb:ea:9e:ff:19:e5:83:73: 45:2b:b0:51:72:b9:a7:63:c0:b7:8f:3b:1a:4c:d2:28:20:f7: e7:d6:31:22:99:c5:f3:6d:69:66:93:82:40:4d:1e:a9:fe:dc: 47:ed:41:ab:ff:e1:1c:95:57:ee:e9:5d:23:51:39:f9:93:e6: 40:21:71:1c:b9:b4:7e:59:cb:cc:71:04:9a:6e:a5:5d:48:cd: a9:e8:7f:37:e4:41:db:58:10:e8:c0:f0:f5:29:f8:17:6a:d7: 68:11:14:c1:33:59:d7:c8:6c:0e:d9:a8:c4:7a:08:8d:96:d9: d1:c9:da:51:df:66:aa:79:f2:fb:28:33:64:00:9b:eb:c8:8d: 0a:c8:0a:29:89:75:1a:0e:34:26:10:89:05:09:1a:e0:44:77: ec:8f:00:e2:9c:d8:91:b0:87:4d:9f:b7:f5:f8:6c:10:6a:e3: 71:4f:d7:80:58:85:b3:f9:7b:20:d1:7a:c9:6f:32:c4:97:51: e7:7f:b5:60:fc:ad:03:d2:56:93:be:9a:99:4c:99:d9:d4:c4: 8c:47:ac:b5:94:16:98:4a:c0:1c:f7:f5:a1:cb:f4:59:f6:82: 9c:bd:64:3d:16:c3:7a:9b:f8:17:21:02:1a:1f:1c:42:e5:f9: 20:9a:b2:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNTA0MTEwNjI5MTBaFw0yNTA0MTgwNjI5MTBaMBgxFjAUBgNV BAMTDTY3ZjhiNmI2LTQxZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqcmFutleEHzX9OrgHX8cPSDKvtid0yqNwOz20nO9TAnQm8DOinu1c8oUDlKjG UmIFVK6OeqQpCIMsuLmZpFBIOAmYek7i+QgcDznzGiqP07q8TsxxI4kwcfYaGtJT TdMaflNoEC/Jxho11367TFyePyyIOkfDALOTmlZFbH4/WU8RzX833CnyCnvqNnJ9 vGw2j65gK/OcGxhzylyPwlNci32GNnnPbEbgv95fmROtACEa2HCKwuHyYAPi7nPs fkQLN774EMV9QKyTFPi78/8yrllWBw+1Lh/pGU0DdSQn1UOM2hYZ8HOEvE8+hbic YzfEt2ebZqKJ/BNRrNm5taqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURbHR+1I+ kHVyblYJnu8+DLIPsu0wHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH51ZQcjXcAnHYfr6p7/GeWDc0UrsFFyuadjwLePOxpM0igg9+fWMSKZ xfNtaWaTgkBNHqn+3EftQav/4RyVV+7pXSNROfmT5kAhcRy5tH5Zy8xxBJpupV1I zanofzfkQdtYEOjA8PUp+Bdq12gRFMEzWdfIbA7ZqMR6CI2W2dHJ2lHfZqp58vso M2QAm+vIjQrICimJdRoONCYQiQUJGuBEd+yPAOKc2JGwh02ft/X4bBBq43FP14BY hbP5eyDReslvMsSXUed/tWD8rQPSVpO+mplMmdnUxIxHrLWUFphKwBz39aHL9Fn2 gpy9ZD0Ww3qb+BchAhofHELl+SCaslc= -----END CERTIFICATE-----Generated at Sun Apr 13 01:55:40 2025 by rpki-client