$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: L7fKzcnfp8iJTtl+JRnMOmskpD9MKHmGqnAvy3WKvZI= Subject key identifier: 7A:6E:69:2E:19:77:E8:40:AB:5A:0B:7D:82:41:A3:31:AD:3A:20:D9 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F23 Signing time: Sun 20 Apr 2025 17:30:41 +0000 Manifest this update: Sun 20 Apr 2025 17:30:41 +0000 Manifest next update: Sun 27 Apr 2025 17:30:41 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: r1FFt8sEkrTL3d/xRE4B7GDRJFjMhTe9ITkN9C3rK6E=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3884 (0xf2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Apr 20 17:30:41 2025 GMT Not After : Apr 27 17:30:41 2025 GMT Subject: CN=68052f41-1ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f2:b0:75:7e:46:cf:de:9d:80:2a:60:2a:22: 55:2e:36:42:b2:8e:a8:f5:ce:e8:9b:c0:b9:ba:cb: f5:16:3b:aa:c6:6e:59:54:1d:b8:af:f3:0f:fc:79: 79:8b:ec:27:5e:f3:0f:c7:a9:e0:78:d5:04:e6:ca: 3b:ee:bc:9e:3d:6a:22:ae:44:3c:96:58:ea:5c:69: 23:05:ce:a9:bd:13:33:1e:45:2d:68:30:88:1d:01: e5:74:91:ad:c3:d1:7c:24:78:ef:89:cc:09:f1:eb: ef:97:b4:af:03:bc:0c:b5:a2:93:64:50:56:90:b5: ea:17:df:29:ee:85:be:93:0f:34:1f:02:57:2e:65: 1f:44:73:e7:ba:18:65:ad:6e:9b:1f:48:53:cb:8c: 80:08:1f:ba:12:53:87:a8:68:fa:ba:aa:ab:c4:ac: 4b:6f:22:6c:34:5c:ea:13:08:3f:0e:04:81:cb:22: 50:2b:35:d0:fa:81:b8:c5:c2:2c:9c:8a:44:01:34: 97:a1:1a:bc:1c:68:b9:0f:74:ac:0b:2a:12:1b:64: 27:81:32:0b:25:ff:4f:b8:1c:a4:e8:2c:fa:7f:3f: f1:7b:43:fa:44:47:37:5d:58:dc:b9:b1:7d:2b:ff: a3:f7:63:c6:68:bd:65:29:42:75:9a:b8:46:d4:80: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:69:2E:19:77:E8:40:AB:5A:0B:7D:82:41:A3:31:AD:3A:20:D9 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7c:c5:e0:59:6f:b3:8f:f1:93:d5:0e:33:cb:5e:3d:66:47: 06:9c:e1:0e:0b:f6:3c:b2:ca:8d:78:32:1a:b5:95:dd:21:b7: a0:d7:91:31:cd:a8:89:e5:d3:aa:2e:12:48:65:48:85:c9:a8: b6:7d:73:ad:6b:bd:2b:8f:d9:6f:cd:54:62:89:90:e3:01:b3: 3b:4d:d1:56:9f:af:38:1e:29:5f:25:8b:03:a9:c0:ed:ae:a2: c2:5a:c3:c6:3d:e4:39:a8:90:91:c5:6b:2d:b0:8a:52:92:65: 58:57:7d:85:94:7f:1b:9c:a6:01:27:50:2b:e9:c9:94:da:2f: c9:13:c9:14:21:98:31:ea:68:a4:fa:73:91:15:cd:d4:2e:2d: 6d:85:7d:d1:7c:95:95:5a:7d:62:a1:ba:56:b2:df:e2:45:20: 74:1b:2e:61:0f:6d:50:80:e3:dc:a9:25:af:cb:bb:d8:a5:04: 94:8c:62:49:eb:5f:1e:38:9f:71:3e:1d:70:23:6e:c2:fe:ca: 23:8f:27:06:f9:5c:fc:d2:12:83:79:cf:75:29:13:f9:11:2a: 65:d4:3b:2f:10:73:4e:02:0c:09:05:3f:c8:3d:a0:94:32:01: 60:4a:38:f3:ab:2d:64:0b:1e:95:15:f3:8b:bd:78:60:c4:cb: 8f:ca:5d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNDIwMTczMDQxWhcNMjUwNDI3MTczMDQxWjAYMRYwFAYD VQQDEw02ODA1MmY0MS0xZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/KwdX5Gz96dgCpgKiJVLjZCso6o9c7om8C5usv1Fjuqxm5ZVB24r/MP/Hl5 i+wnXvMPx6ngeNUE5so77ryePWoirkQ8lljqXGkjBc6pvRMzHkUtaDCIHQHldJGt w9F8JHjvicwJ8evvl7SvA7wMtaKTZFBWkLXqF98p7oW+kw80HwJXLmUfRHPnuhhl rW6bH0hTy4yACB+6ElOHqGj6uqqrxKxLbyJsNFzqEwg/DgSByyJQKzXQ+oG4xcIs nIpEATSXoRq8HGi5D3SsCyoSG2QngTILJf9PuByk6Cz6fz/xe0P6REc3XVjcubF9 K/+j92PGaL1lKUJ1mrhG1IDaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpuaS4Z d+hAq1oLfYJBozGtOiDZMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7fMXgWW+zj/GT1Q4zy149ZkcGnOEOC/Y8ssqNeDIatZXdIbeg15Ex zaiJ5dOqLhJIZUiFyai2fXOta70rj9lvzVRiiZDjAbM7TdFWn684HilfJYsDqcDt rqLCWsPGPeQ5qJCRxWstsIpSkmVYV32FlH8bnKYBJ1Ar6cmU2i/JE8kUIZgx6mik +nORFc3ULi1thX3RfJWVWn1iobpWst/iRSB0Gy5hD21QgOPcqSWvy7vYpQSUjGJJ 618eOJ9xPh1wI27C/sojjycG+Vz80hKDec91KRP5ESpl1DsvEHNOAgwJBT/IPaCU MgFgSjjzqy1kCx6VFfOLvXhgxMuPyl3a -----END CERTIFICATE-----Generated at Tue Apr 22 17:24:31 2025 by rpki-client