$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: 2Uxv6ZSIBC7Bgguc8Oy8LFjbC56FogPBKWPwvJKZmUc= Subject key identifier: 78:22:10:D1:2D:A3:72:3A:C0:C9:19:8C:E1:A8:F1:A9:85:A1:CF:E1 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 018A Signing time: Sat 31 May 2025 03:17:28 +0000 Manifest this update: Sat 31 May 2025 03:17:28 +0000 Manifest next update: Sat 07 Jun 2025 03:17:28 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: J8b4w312pjp44g3WxYRp2rE2zvcvY3H6mhAGjYadk2I=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: May 31 03:17:28 2025 GMT Not After : Jun 7 03:17:28 2025 GMT Subject: CN=683a74c8-ef43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:ce:da:2e:9a:64:3d:f1:49:ae:7f:db:27: b7:61:7c:2d:18:7f:a4:ac:88:64:64:20:5c:59:23: ae:ad:54:4e:68:4f:4c:f1:6a:bc:2e:11:ea:f6:85: 1e:f5:73:33:1e:61:06:a6:5b:fd:04:75:08:d7:d1: 80:b5:42:6d:87:28:80:3d:98:20:91:89:d5:09:8a: 5f:55:0c:e6:de:58:fd:99:a3:70:5d:82:c8:96:d2: c8:7a:cb:fb:13:de:e6:72:90:54:41:dd:ed:eb:72: 93:3d:42:af:65:34:ac:a5:e9:31:e2:b4:90:c1:3c: cd:4d:9f:2d:44:a0:1a:82:7d:79:4d:3c:66:0e:1f: e9:c9:5e:27:0f:42:40:d9:a5:61:e3:30:42:68:9a: 05:1c:e3:d5:ad:69:d8:67:49:25:e8:14:00:11:78: 47:56:d4:ae:ad:c2:aa:f6:bd:7c:ab:7a:44:48:c7: 42:a5:98:e1:ca:4a:e4:f2:80:2b:7f:52:89:67:8a: 8b:bc:13:2e:e0:c9:24:b9:59:8d:e0:14:9c:ff:99: f4:e9:2e:12:a4:73:f1:93:49:c9:c3:ed:61:94:99: c7:2a:5e:95:89:73:d2:be:3f:d8:e1:66:1d:27:fd: 10:db:cf:8b:d7:6f:69:5d:f6:98:07:ae:5a:2e:27: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:22:10:D1:2D:A3:72:3A:C0:C9:19:8C:E1:A8:F1:A9:85:A1:CF:E1 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:84:b0:be:74:25:28:09:44:9d:ca:49:3a:6b:09:ee:21:0e: 05:03:d2:4f:82:bd:fb:d2:4a:76:27:66:9a:e4:86:c4:f8:22: 3e:90:2e:43:1b:ce:7d:b1:8f:25:78:6a:14:a2:9a:41:8d:eb: fe:8a:1c:7c:93:a6:15:c5:d6:4d:d4:d8:07:18:3c:4e:43:3f: 1e:72:ab:25:c4:cb:c1:a4:48:b4:a7:44:05:76:f8:45:a5:ee: 15:95:c4:57:2f:ee:8c:bf:e9:c1:3f:c5:8d:53:c9:3f:d6:af: db:a1:82:a3:93:cc:71:8a:c4:65:a1:21:99:fb:35:9e:fa:12: 58:94:17:7a:72:08:9b:4b:0f:43:f5:bd:89:c4:56:20:43:43: ba:3f:94:85:6d:f3:d3:5c:5d:86:b8:ec:7c:fb:17:df:05:91: 32:31:d5:80:ad:84:3e:c0:41:11:87:93:5b:4b:79:b4:e4:40: 7f:5b:e0:aa:41:3e:9b:13:93:ab:a4:e8:15:c5:d4:c7:7d:d8: bf:9f:12:7d:05:58:d1:f3:94:41:32:48:52:66:f6:aa:58:6a: e1:de:6d:f1:5e:11:a2:47:c6:2d:55:6e:24:a5:ca:1e:3f:38: a1:89:9a:a6:f3:57:67:67:19:dd:ca:6e:6e:11:93:06:ba:ec: 54:e3:ea:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwNTMxMDMxNzI4WhcNMjUwNjA3MDMxNzI4WjAYMRYwFAYD VQQDEw02ODNhNzRjOC1lZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9zO2i6aZD3xSa5/2ye3YXwtGH+krIhkZCBcWSOurVROaE9M8Wq8LhHq9oUe 9XMzHmEGplv9BHUI19GAtUJthyiAPZggkYnVCYpfVQzm3lj9maNwXYLIltLIesv7 E97mcpBUQd3t63KTPUKvZTSspekx4rSQwTzNTZ8tRKAagn15TTxmDh/pyV4nD0JA 2aVh4zBCaJoFHOPVrWnYZ0kl6BQAEXhHVtSurcKq9r18q3pESMdCpZjhykrk8oAr f1KJZ4qLvBMu4MkkuVmN4BSc/5n06S4SpHPxk0nJw+1hlJnHKl6ViXPSvj/Y4WYd J/0Q28+L129pXfaYB65aLieRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgiENEt o3I6wMkZjOGo8amFoc/hMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGhLC+dCUoCUSdykk6awnuIQ4FA9JPgr370kp2J2aa5IbE+CI+kC5D G859sY8leGoUoppBjev+ihx8k6YVxdZN1NgHGDxOQz8ecqslxMvBpEi0p0QFdvhF pe4VlcRXL+6Mv+nBP8WNU8k/1q/boYKjk8xxisRloSGZ+zWe+hJYlBd6cgibSw9D 9b2JxFYgQ0O6P5SFbfPTXF2GuOx8+xffBZEyMdWArYQ+wEERh5NbS3m05EB/W+Cq QT6bE5OrpOgVxdTHfdi/nxJ9BVjR85RBMkhSZvaqWGrh3m3xXhGiR8YtVW4kpcoe PzihiZqm81dnZxndym5uEZMGuuxU4+r1 -----END CERTIFICATE-----Generated at Sat May 31 15:07:54 2025 by rpki-client