$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: 7YjtsHOiG/NGadbWvARLBqDA6zl5/8hEVy0Xm6yV6aA= Subject key identifier: FD:38:D7:23:7C:28:AD:7D:B8:52:02:21:B9:0B:8C:05:DA:7F:17:56 Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 04FC Signing time: Fri 04 Apr 2025 23:47:05 +0000 Manifest this update: Fri 04 Apr 2025 23:47:04 +0000 Manifest next update: Fri 11 Apr 2025 23:47:04 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: Xrw4DJ0SIEsiwp8uef0S3GKXBRNhPBqyzRzEKHrFpvs=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88 Validity Not Before: Apr 4 23:47:04 2025 GMT Not After : Apr 11 23:47:04 2025 GMT Subject: CN=67f06f79-0dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:81:ed:4e:c6:96:93:e0:85:c2:76:95:ab: 0c:32:48:49:0d:0c:d1:75:e9:47:e0:c8:9e:ad:04: 88:e4:b9:14:8a:e4:16:8f:35:ff:45:96:fe:d6:93: 2f:e2:ee:d6:c7:e5:27:fe:3f:6f:02:88:d7:34:be: 60:9e:b0:dc:3f:db:fc:12:01:3b:8d:c5:2f:7a:7c: 9b:37:f8:b3:6b:78:94:62:57:c9:ed:a4:df:b4:3c: 5f:c5:f0:2c:01:a4:3c:02:52:bb:cf:b6:cb:63:6a: 90:b8:df:6f:bc:f0:e2:d6:7b:c9:7a:42:2f:77:49: 44:0f:e5:c1:29:5c:50:38:35:a4:fc:ff:37:fc:d0: 1f:8e:67:91:b5:ae:72:38:2d:3d:65:5e:35:d4:a5: 9d:b2:7e:fe:99:0f:3d:40:5f:c1:22:33:f0:a5:c2: 85:02:34:27:c3:15:c0:fe:fd:51:2f:74:7d:18:a2: a0:80:6b:a3:04:35:0b:29:ce:5e:ac:8c:e5:33:ee: c4:fc:1d:07:a3:b9:11:0c:0e:24:6e:c6:8a:58:16: 9b:08:11:68:c8:aa:90:ca:da:7e:f8:bf:73:89:83: 16:cb:a1:54:0c:b1:75:c9:64:cd:43:11:cf:ef:29: 55:3b:49:f7:a9:68:3e:de:c2:d0:70:3c:88:88:f3: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:38:D7:23:7C:28:AD:7D:B8:52:02:21:B9:0B:8C:05:DA:7F:17:56 X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:08:59:81:5c:0d:96:a9:3f:1b:8a:b8:2c:3f:79:3f:f8:0a: 81:41:5e:ee:2c:80:c8:e2:21:8d:43:da:cd:3f:ba:7c:92:74: b7:15:d1:ea:66:d7:19:06:ff:67:17:a7:64:fc:47:c5:c4:c0: 00:52:2d:92:84:d6:b9:0a:03:b7:5c:0c:67:9d:b8:e1:7b:7d: f6:b8:c7:72:63:0e:a6:f8:6d:65:e2:0a:af:4e:e3:83:8d:22: ee:b9:4d:23:ff:22:70:f7:5d:5e:73:9d:4b:8c:08:ab:ed:35: 33:21:e7:b9:af:81:1e:1d:87:4b:6f:0e:95:87:c9:6b:4d:91: 19:0d:82:ad:95:b0:a7:e0:fd:58:0b:21:c7:78:94:75:11:c6: 1c:92:4d:e0:d1:fc:c5:f8:49:11:db:a0:ed:76:f2:24:a6:69: ff:f2:83:7d:92:34:c3:c8:03:64:a8:1c:8a:8d:a0:66:40:07: d0:14:03:93:4a:41:3c:8f:83:8b:c4:be:95:70:d2:d5:09:62: 61:ba:3d:76:80:aa:5e:38:80:f0:d9:de:99:2f:7f:37:53:39: b8:d2:1e:86:7d:1f:1d:a2:2a:48:c3:e2:05:5b:9b:e2:3e:5d: 49:1d:ed:6b:ca:d1:87:a3:4e:6a:bb:cb:eb:32:d5:6c:69:ff: e6:c2:87:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwNDA0MjM0NzA0WhcNMjUwNDExMjM0NzA0WjAYMRYwFAYD VQQDEw02N2YwNmY3OS0wZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaaB7U7GlpPghcJ2lasMMkhJDQzRdelH4MierQSI5LkUiuQWjzX/RZb+1pMv 4u7Wx+Un/j9vAojXNL5gnrDcP9v8EgE7jcUvenybN/iza3iUYlfJ7aTftDxfxfAs AaQ8AlK7z7bLY2qQuN9vvPDi1nvJekIvd0lED+XBKVxQODWk/P83/NAfjmeRta5y OC09ZV411KWdsn7+mQ89QF/BIjPwpcKFAjQnwxXA/v1RL3R9GKKggGujBDULKc5e rIzlM+7E/B0Ho7kRDA4kbsaKWBabCBFoyKqQytp++L9ziYMWy6FUDLF1yWTNQxHP 7ylVO0n3qWg+3sLQcDyIiPMwAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP041yN8 KK19uFICIbkLjAXafxdWMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAECFmBXA2WqT8birgsP3k/+AqBQV7uLIDI4iGNQ9rNP7p8knS3FdHq ZtcZBv9nF6dk/EfFxMAAUi2ShNa5CgO3XAxnnbjhe332uMdyYw6m+G1l4gqvTuOD jSLuuU0j/yJw911ec51LjAir7TUzIee5r4EeHYdLbw6Vh8lrTZEZDYKtlbCn4P1Y CyHHeJR1EcYckk3g0fzF+EkR26DtdvIkpmn/8oN9kjTDyANkqByKjaBmQAfQFAOT SkE8j4OLxL6VcNLVCWJhuj12gKpeOIDw2d6ZL383Uzm40h6GfR8doipIw+IFW5vi Pl1JHe1rytGHo05qu8vrMtVsaf/mwoeD -----END CERTIFICATE-----Generated at Sat Apr 5 10:08:02 2025 by rpki-client