$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: krSkDwdjVT5pB5ld37WK4HXLpHenxouscB/ZcIIbe4M= Subject key identifier: 34:3F:FB:56:2F:13:2C:FB:B1:32:29:B8:97:FA:13:D9:20:88:C0:73 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 0F Signing time: Sat 29 Mar 2025 07:22:19 +0000 Manifest this update: Sat 29 Mar 2025 07:22:19 +0000 Manifest next update: Sat 05 Apr 2025 07:22:18 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: C9Og1D3LGnHKJ1l+JyFE7u3eK+GZmQJNTziTR/PNEKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86 Validity Not Before: Mar 29 07:22:19 2025 GMT Not After : Apr 5 07:22:18 2025 GMT Subject: CN=67e79fab-731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:41:41:ba:6b:f8:77:7e:e3:ae:ba:74:7b: 5c:79:a4:83:c8:4b:86:7b:fc:dd:3f:4a:27:c5:0c: b2:9c:2d:67:52:bb:b8:c0:a6:84:cd:da:75:b2:06: 41:b0:df:2b:19:46:70:e4:8a:47:d6:53:66:71:f5: d1:a1:62:4c:7d:db:5f:a9:0b:4e:8d:25:92:62:66: 28:45:07:8f:36:52:6e:23:74:3d:fa:f4:c8:60:5c: d8:d1:67:61:5f:a9:d5:83:8e:9d:fc:f5:fd:52:5c: 68:ae:6e:9b:32:96:29:ea:44:52:6b:c0:48:27:ef: a8:0b:1f:3b:00:c6:8f:ca:7d:2c:d6:79:1f:8c:9a: 52:d8:b1:bc:33:1a:64:b4:77:dd:c9:ef:98:18:97: bb:58:ea:5d:fe:68:47:12:90:0f:57:4b:ad:b9:39: 7a:74:51:42:b6:ac:91:b6:78:cd:18:29:df:cc:e8: 2d:52:9c:08:ea:80:54:23:6d:fc:95:5b:96:22:e1: e0:d0:c9:b3:29:ea:80:0d:1c:6a:04:83:5f:fb:8a: 71:c4:29:ac:65:86:41:a6:e3:71:2b:bf:6f:9e:bf: 70:07:00:38:a5:3d:3d:9d:ae:61:a6:bc:37:d3:9f: cb:5c:31:08:9a:bb:42:c2:2b:e8:f6:6c:f1:e6:df: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:FB:56:2F:13:2C:FB:B1:32:29:B8:97:FA:13:D9:20:88:C0:73 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:6e:ee:a5:26:ac:8d:3c:f0:f8:fc:02:73:2e:52:90:1e:2b: ec:ad:41:eb:71:8a:5b:e0:0c:bb:36:91:8f:f0:98:28:15:10: d4:6d:59:f7:2f:65:8c:65:86:f3:bb:9d:6f:c6:22:9c:f9:aa: 3a:f1:9f:20:c2:e4:39:fc:8e:2f:9e:27:a9:e1:03:95:f0:ca: c4:64:ea:71:89:f2:05:c4:b3:79:5d:2d:44:88:1a:ff:f2:48: bc:cc:17:af:eb:09:c5:16:1f:1e:5b:3f:39:09:3c:fc:03:48: f7:34:97:db:80:ac:55:83:d4:9c:b7:99:b6:e2:f0:a4:da:83: 00:5b:4b:df:04:52:e1:d2:e4:bb:cd:1a:4d:1d:45:b0:75:aa: 98:f7:19:85:8b:b1:b7:23:75:5c:df:47:86:f8:55:3c:ed:78: e8:7a:70:e4:1e:08:69:8b:fc:9d:f6:22:b2:69:57:4f:20:5b: ec:68:59:8c:26:b3:21:73:36:39:34:eb:50:8f:40:7b:d4:54: 12:3f:92:12:09:e1:23:63:e4:6f:15:97:63:04:1e:70:65:3e: c5:07:cf:3b:45:b7:55:ae:d4:3a:f5:dc:5d:92:c7:1d:39:c5: 2c:56:cc:83:69:40:36:65:92:30:23:45:b1:02:9f:34:e4:da: 12:ab:48:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoMTRENUFEMjcyMkFDQTg2QUQzNEYwRjlBMzQ0NzI2Q0I2 Njk4MDgzMTAeFw0yNTAzMjkwNzIyMTlaFw0yNTA0MDUwNzIyMThaMBgxFjAUBgNV BAMTDTY3ZTc5ZmFiLTczMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuX0FBumv4d37jrrp0e1x5pIPIS4Z7/N0/SifFDLKcLWdSu7jApoTN2nWyBkGw 3ysZRnDkikfWU2Zx9dGhYkx921+pC06NJZJiZihFB482Um4jdD369MhgXNjRZ2Ff qdWDjp389f1SXGiubpsylinqRFJrwEgn76gLHzsAxo/KfSzWeR+MmlLYsbwzGmS0 d93J75gYl7tY6l3+aEcSkA9XS625OXp0UUK2rJG2eM0YKd/M6C1SnAjqgFQjbfyV W5Yi4eDQybMp6oANHGoEg1/7inHEKaxlhkGm43Erv2+ev3AHADilPT2drmGmvDfT n8tcMQiau0LCK+j2bPHm30Q3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUND/7Vi8T LPuxMim4l/oT2SCIwHMwHwYDVR0jBBgwFoAUFNWtJyKsqGrTTw+aNEcmy2aYCDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2LzkzMDZBMkM0RjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk5XdEp5S3NxR3JUVHctYU5FY215MmFZQ0RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2LzkzMDZBMkM0RjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdy VFR3LWFORWNteTJhWUNERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlu7qUmrI088Pj8AnMuUpAeK+ytQetxilvgDLs2kY/wmCgVENRtWfcv ZYxlhvO7nW/GIpz5qjrxnyDC5Dn8ji+eJ6nhA5XwysRk6nGJ8gXEs3ldLUSIGv/y SLzMF6/rCcUWHx5bPzkJPPwDSPc0l9uArFWD1Jy3mbbi8KTagwBbS98EUuHS5LvN Gk0dRbB1qpj3GYWLsbcjdVzfR4b4VTzteOh6cOQeCGmL/J32IrJpV08gW+xoWYwm syFzNjk061CPQHvUVBI/khIJ4SNj5G8Vl2MEHnBlPsUHzztFt1Wu1Dr13F2Sxx05 xSxWzINpQDZlkjAjRbECnzTk2hKrSJs= -----END CERTIFICATE-----Generated at Fri Apr 4 22:20:00 2025 by rpki-client