$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json) Hash identifier: 2A4s5tFRpbZHbsnIP2EFXz34Z1zrpa1Z6VwvBTe3TyI= Subject key identifier: 30:8C:47:AB:09:FD:8C:54:E5:37:59:88:03:64:80:26:D6:5B:88:A9 Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft Manifest number: 065E Signing time: Fri 04 Apr 2025 22:31:32 +0000 Manifest this update: Fri 04 Apr 2025 22:31:31 +0000 Manifest next update: Fri 11 Apr 2025 22:31:31 +0000 Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: VnlBjQ9VKglqr8nf89Cp4gfdZYyUAzFqx91KX5+zLng=) 2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB Validity Not Before: Apr 4 22:31:31 2025 GMT Not After : Apr 11 22:31:31 2025 GMT Subject: CN=67f05dc3-9e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:3e:e5:2f:78:cf:4b:57:ce:cf:d4:2e:a2: 3a:6f:90:38:e6:b1:e8:6f:99:d9:89:ac:0c:39:12: 23:84:44:c3:0d:17:6f:21:29:9a:09:5c:23:ea:ae: 68:f7:60:43:5d:04:6b:29:46:8c:07:c6:5c:80:db: eb:dc:27:05:f7:88:18:0a:d8:61:5b:d5:6d:27:94: 21:97:b0:6e:cd:92:4d:77:25:60:f0:0b:bb:0a:9c: 2b:cb:58:ef:54:f5:9a:e8:9c:07:0d:18:b7:35:a9: f0:dc:cc:18:09:58:24:6f:28:0f:07:68:7f:b7:23: 5f:8b:ff:9c:84:85:54:3e:d4:52:ca:c7:b0:a0:1b: 4c:47:81:ec:33:f4:03:80:a6:3c:a4:20:68:af:b0: ff:c7:1c:91:5b:c2:d4:50:9c:3a:b8:e2:77:b3:90: 39:14:cf:e5:81:da:71:ad:5b:30:d5:18:cf:40:83: fd:2e:73:66:d8:4e:b2:ec:5d:93:f0:90:83:c8:c0: 9e:eb:2a:25:5b:81:86:bd:b3:1c:65:f3:a0:aa:37: 51:1d:46:df:93:84:0e:82:2c:5f:96:20:e8:3e:75: 70:08:50:f1:a6:5f:e5:c2:75:7e:27:11:13:6a:e7: e3:1a:25:d0:1b:06:52:59:dc:e0:e4:25:e7:3b:74: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8C:47:AB:09:FD:8C:54:E5:37:59:88:03:64:80:26:D6:5B:88:A9 X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:40:c6:23:71:1a:16:38:ee:c5:98:c8:39:a6:a1:ee:7b:2e: 5e:cf:68:61:aa:ff:68:61:18:4c:e1:51:ec:62:f3:32:46:a5: 06:64:da:45:c1:eb:d3:f3:a4:3d:4e:b7:b5:6c:de:ad:34:cb: f1:a6:e4:86:b4:29:3c:5b:0d:20:dd:37:d0:fe:67:8b:74:96: cf:d8:af:ee:47:1d:98:8e:e1:fd:48:4c:ec:a8:c7:58:a3:36: 65:cf:e0:ad:d9:21:62:3b:71:59:cd:2c:7d:dc:02:7c:3c:5d: 19:ad:8d:6d:bf:12:c7:76:8a:88:94:67:05:fb:c7:c0:6c:50: 83:37:b7:a6:1f:f1:50:2e:d9:e0:da:07:ea:eb:43:63:b2:b9: 61:d4:45:76:1a:62:3b:b9:b7:0c:d5:2e:68:59:6f:64:eb:c0: c9:3d:97:87:7c:db:01:9a:f0:44:98:2a:57:23:8b:87:b5:3b: c5:12:ba:50:df:b5:d8:92:cb:57:52:f9:ad:4d:15:9e:eb:e4: 59:c0:d7:ce:f8:75:02:da:8d:a0:01:6a:6f:cd:f2:72:3e:52: 64:ae:9e:b3:f7:e2:15:49:48:cb:7d:e9:bd:ca:d8:c9:84:9a: 87:58:2e:97:bb:e1:42:f4:d2:6d:bd:0e:5a:3f:cf:ba:bb:dd: f8:a1:e0:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjUwNDA0MjIzMTMxWhcNMjUwNDExMjIzMTMxWjAYMRYwFAYD VQQDEw02N2YwNWRjMy05ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYQ+5S94z0tXzs/ULqI6b5A45rHob5nZiawMORIjhETDDRdvISmaCVwj6q5o 92BDXQRrKUaMB8ZcgNvr3CcF94gYCthhW9VtJ5Qhl7BuzZJNdyVg8Au7Cpwry1jv VPWa6JwHDRi3Nanw3MwYCVgkbygPB2h/tyNfi/+chIVUPtRSysewoBtMR4HsM/QD gKY8pCBor7D/xxyRW8LUUJw6uOJ3s5A5FM/lgdpxrVsw1RjPQIP9LnNm2E6y7F2T 8JCDyMCe6yolW4GGvbMcZfOgqjdRHUbfk4QOgixfliDoPnVwCFDxpl/lwnV+JxET aufjGiXQGwZSWdzg5CXnO3SszwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCMR6sJ /YxU5TdZiANkgCbWW4ipMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2 NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpQMYjcRoWOO7FmMg5pqHuey5ez2hhqv9oYRhM4VHsYvMyRqUGZNpF wevT86Q9Tre1bN6tNMvxpuSGtCk8Ww0g3TfQ/meLdJbP2K/uRx2YjuH9SEzsqMdY ozZlz+Ct2SFiO3FZzSx93AJ8PF0ZrY1tvxLHdoqIlGcF+8fAbFCDN7emH/FQLtng 2gfq60Njsrlh1EV2GmI7ubcM1S5oWW9k68DJPZeHfNsBmvBEmCpXI4uHtTvFErpQ 37XYkstXUvmtTRWe6+RZwNfO+HUC2o2gAWpvzfJyPlJkrp6z9+IVSUjLfem9ytjJ hJqHWC6Xu+FC9NJtvQ5aP8+6u934oeBz -----END CERTIFICATE-----Generated at Sat Apr 5 19:25:34 2025 by rpki-client