$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: uOq4ywtfTf+OrH8XLQdtsflAZhcL14EzjToZ35lu8v8= Subject key identifier: F6:E1:16:4A:A5:51:73:C3:8F:30:63:D7:71:3D:76:6B:51:9D:B2:5E Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0AB8 Signing time: Fri 04 Apr 2025 19:38:09 +0000 Manifest this update: Fri 04 Apr 2025 19:38:09 +0000 Manifest next update: Fri 11 Apr 2025 19:38:09 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: M1APL2S/ttyoF0ZCfWM2Ixt2aDXFFxqePyiGOhJCZo8=) 2: 27865D0CA81311EF8B4DB01EC4F9AE02.roa (hash: fmHDWgZFbuZ3uh/fC7/RH+WZvmspuBEuvGTJ5HF+QiQ=) 3: 6573863A759B11EF9C117755C4F9AE02.roa (hash: /YBepwkrSKyiO32KQXkwoddzieTMhKVXLDr6JjkdpKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9 Validity Not Before: Apr 4 19:38:09 2025 GMT Not After : Apr 11 19:38:09 2025 GMT Subject: CN=67f03521-6dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:c8:9e:0e:a7:c2:32:df:d7:9c:ec:76:b1: 6e:96:39:63:bb:3b:3c:19:bf:27:2d:6d:1d:84:53: ab:50:f0:78:7f:03:c6:2c:85:41:d8:df:78:9a:cd: e2:ab:c2:1e:fa:bc:45:b8:ab:34:9e:e7:33:da:7c: fa:4a:ce:16:ed:d7:df:72:7f:80:1c:52:69:6e:53: 0a:b7:d9:84:25:7c:99:43:59:32:ef:3c:49:ce:bb: f7:3c:a2:48:b0:2b:bd:1a:99:fc:d5:ad:cf:bc:00: 84:41:07:c1:3e:f7:a7:9e:54:ec:f0:41:76:c8:94: 13:cc:08:ae:b8:fb:6a:1b:17:d1:c9:10:79:f5:e4: a1:b4:1c:33:be:23:1e:03:a7:b5:4b:09:38:0b:ea: 46:55:f2:0d:89:33:b4:53:aa:ec:64:8f:ca:01:9e: d5:87:b9:58:be:49:37:cb:e9:93:e9:a1:10:b0:1b: 2d:fd:0b:48:a3:f1:41:ef:f9:bb:9c:10:2c:2a:fb: ac:76:2c:c3:8a:29:d5:eb:34:97:61:7d:54:9d:ff: 2f:ba:1a:ea:bc:27:2e:46:ae:e1:8b:be:25:82:7b: 7b:e5:82:8a:95:70:41:c3:2c:88:9d:e7:39:33:ca: 1e:c6:7a:ad:fa:42:3f:02:9a:54:c4:0c:16:0c:fb: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:16:4A:A5:51:73:C3:8F:30:63:D7:71:3D:76:6B:51:9D:B2:5E X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1b:26:e1:2c:2a:38:34:ad:41:34:13:49:8e:c5:40:07:8a: a4:07:cb:3d:fe:7b:80:e2:e4:a2:cf:54:05:eb:5a:43:88:e8: 3c:c5:3e:39:b8:fe:e6:9a:e9:d8:b9:43:3b:52:95:49:41:5f: e2:92:29:73:a3:d0:d0:0c:a3:41:6a:94:5c:ba:98:ef:60:7a: 41:f8:40:ae:f4:46:0e:29:1e:d9:05:dc:02:f4:49:57:12:dd: 23:54:79:55:6b:ad:38:5f:9a:7c:19:65:90:69:7c:d4:94:9e: 2f:ad:43:81:ae:de:22:e2:a5:8e:35:21:1e:fd:cb:a1:0c:dc: 7e:6a:16:ab:17:9c:f9:ce:07:87:f3:f8:e8:bd:c2:f7:46:3d: a5:54:ec:58:3a:9a:a1:82:bf:41:88:07:a3:eb:90:0a:8b:b5: 98:fc:70:ee:7f:53:f2:17:18:07:9e:25:da:72:7a:08:bd:fb: 00:ba:b3:cf:a7:35:a6:37:53:c9:3b:78:8b:d7:8c:f0:3c:dc: ad:98:67:4a:87:d0:95:e0:d6:57:3b:91:e1:d0:51:e7:50:24: 39:99:94:1a:a4:00:76:40:1b:bb:ba:72:36:95:b6:d2:e1:cd: 29:32:29:d5:5f:c9:52:93:d4:04:4b:17:09:80:6e:f7:da:f1: 52:af:50:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUwNDA0MTkzODA5WhcNMjUwNDExMTkzODA5WjAYMRYwFAYD VQQDEw02N2YwMzUyMS02ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p/Ing6nwjLf15zsdrFuljljuzs8Gb8nLW0dhFOrUPB4fwPGLIVB2N94ms3i q8Ie+rxFuKs0nucz2nz6Ss4W7dffcn+AHFJpblMKt9mEJXyZQ1ky7zxJzrv3PKJI sCu9Gpn81a3PvACEQQfBPvennlTs8EF2yJQTzAiuuPtqGxfRyRB59eShtBwzviMe A6e1Swk4C+pGVfINiTO0U6rsZI/KAZ7Vh7lYvkk3y+mT6aEQsBst/QtIo/FB7/m7 nBAsKvusdizDiinV6zSXYX1Unf8vuhrqvCcuRq7hi74lgnt75YKKlXBBwyyInec5 M8oexnqt+kI/AppUxAwWDPt3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbhFkql UXPDjzBj13E9dmtRnbJeMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHGybhLCo4NK1BNBNJjsVAB4qkB8s9/nuA4uSiz1QF61pDiOg8xT45 uP7mmunYuUM7UpVJQV/ikilzo9DQDKNBapRcupjvYHpB+ECu9EYOKR7ZBdwC9ElX Et0jVHlVa604X5p8GWWQaXzUlJ4vrUOBrt4i4qWONSEe/cuhDNx+aharF5z5zgeH 8/jovcL3Rj2lVOxYOpqhgr9BiAej65AKi7WY/HDuf1PyFxgHniXacnoIvfsAurPP pzWmN1PJO3iL14zwPNytmGdKh9CV4NZXO5Hh0FHnUCQ5mZQapAB2QBu7unI2lbbS 4c0pMinVX8lSk9QESxcJgG732vFSr1Bl -----END CERTIFICATE-----Generated at Sun Apr 6 18:28:56 2025 by rpki-client