$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: chat0QMCieHJWDvvVaguKb29lvuoRzhby3Q4RuZ1fZM= Subject key identifier: 1D:C4:CD:D4:8B:0A:91:F2:3F:D5:18:B2:DB:87:B5:9A:25:EC:6A:63 Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 1919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 190B Signing time: Fri 30 May 2025 16:37:43 +0000 Manifest this update: Fri 30 May 2025 16:37:43 +0000 Manifest next update: Fri 06 Jun 2025 16:37:43 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: vY1jdzWZze9+pWiLoscrPJkFD/yQgS2nENRgsmPItaM=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: XS/tQXFr6hMyKrYJ8vxPUjZePNffAHjlSJ+Stv9rn5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6425 (0x1919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: May 30 16:37:43 2025 GMT Not After : Jun 6 16:37:43 2025 GMT Subject: CN=6839ded7-9292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:1e:6d:24:0c:75:32:f5:55:99:11:e0:4f: 3b:89:97:9d:88:8f:03:cc:3e:04:8b:c1:e2:11:be: 61:19:b2:af:e5:5f:7b:df:78:5d:a5:3e:73:48:15: 6a:64:ca:0c:55:0e:40:ab:b2:62:ee:11:f1:f7:6f: 22:b5:4b:93:2d:e0:63:83:48:c3:78:76:f9:f6:c0: a8:68:16:8e:f0:0f:bb:5d:3c:bb:e5:ee:19:72:3a: ed:13:f6:45:3b:0a:a7:8c:b9:7a:a0:a4:32:e7:55: db:df:14:01:7c:50:48:28:25:a3:90:f1:36:0f:95: 42:90:53:ca:2a:27:93:5f:d5:cb:e9:64:e1:91:5d: b7:e7:0d:c7:5c:9c:01:53:7f:51:f6:d9:cd:60:9a: d3:99:ed:ea:02:be:12:aa:94:7a:2e:17:97:ea:99: 42:f0:1f:2c:8f:ed:67:29:dc:6f:3b:fe:62:f2:d0: ef:b5:a1:55:90:78:e4:67:7c:05:a3:5f:0f:ae:7c: 8e:56:58:b7:6e:f6:34:a7:4c:cc:94:2e:96:1c:0f: 43:ba:00:9f:01:21:4a:9a:89:44:4f:9d:7e:f0:c2: 48:99:a6:8a:c8:3d:1c:90:61:0f:1e:e9:d0:7e:2f: 8f:19:57:40:c5:09:7b:3a:92:7f:f7:13:c8:71:c6: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:CD:D4:8B:0A:91:F2:3F:D5:18:B2:DB:87:B5:9A:25:EC:6A:63 X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fc:7b:72:24:9b:2b:67:a9:13:55:04:71:e3:d8:a0:3b:99: ea:d8:dd:44:5a:20:00:59:ca:11:69:da:7b:fc:81:cc:3a:01: d4:77:d8:6d:38:6f:39:e0:24:fb:e9:2a:c5:83:b1:7f:3c:b0: 64:d2:aa:e9:09:e2:74:bc:a3:da:86:29:2d:d9:d2:4e:1c:f4: 33:43:88:fe:b4:6f:92:b2:4c:e0:56:4d:7a:a4:06:b5:a5:92: a1:81:af:63:b3:37:19:46:8d:79:bf:d9:ee:40:71:25:05:d8: c4:c8:88:01:75:8b:40:e1:6c:fb:58:78:57:08:2b:75:d2:25: fc:88:3e:f1:65:4c:c8:12:ad:f7:40:5f:e6:38:5a:5d:a1:f4: 14:02:e5:d2:c8:aa:df:33:41:7e:e9:3d:82:f2:1e:6f:d3:62: ad:c6:66:bf:dc:b5:c7:31:ff:c2:a5:3f:87:cd:c1:78:5b:66: 46:17:e7:1d:cf:c7:3a:fd:f2:5d:2b:0b:af:ab:60:82:28:40: d8:28:e7:0c:6d:96:19:2c:3b:0c:91:bf:dc:ed:7d:2a:2f:67: 40:03:a6:c3:04:72:02:68:b1:40:0b:dc:b4:24:9d:7a:59:e6: 33:d6:87:7f:1a:c4:5b:d1:e8:21:fc:e6:82:31:79:5c:e9:8f: 65:4d:78:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjUwNTMwMTYzNzQzWhcNMjUwNjA2MTYzNzQzWjAYMRYwFAYD VQQDEw02ODM5ZGVkNy05MjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMoebSQMdTL1VZkR4E87iZediI8DzD4Ei8HiEb5hGbKv5V9733hdpT5zSBVq ZMoMVQ5Aq7Ji7hHx928itUuTLeBjg0jDeHb59sCoaBaO8A+7XTy75e4ZcjrtE/ZF OwqnjLl6oKQy51Xb3xQBfFBIKCWjkPE2D5VCkFPKKieTX9XL6WThkV235w3HXJwB U39R9tnNYJrTme3qAr4SqpR6LheX6plC8B8sj+1nKdxvO/5i8tDvtaFVkHjkZ3wF o18PrnyOVli3bvY0p0zMlC6WHA9DugCfASFKmolET51+8MJImaaKyD0ckGEPHunQ fi+PGVdAxQl7OpJ/9xPIccZOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3EzdSL CpHyP9UYstuHtZol7GpjMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/HtyJJsrZ6kTVQRx49igO5nq2N1EWiAAWcoRadp7/IHMOgHUd9ht OG854CT76SrFg7F/PLBk0qrpCeJ0vKPahikt2dJOHPQzQ4j+tG+SskzgVk16pAa1 pZKhga9jszcZRo15v9nuQHElBdjEyIgBdYtA4Wz7WHhXCCt10iX8iD7xZUzIEq33 QF/mOFpdofQUAuXSyKrfM0F+6T2C8h5v02Ktxma/3LXHMf/CpT+HzcF4W2ZGF+cd z8c6/fJdKwuvq2CCKEDYKOcMbZYZLDsMkb/c7X0qL2dAA6bDBHICaLFAC9y0JJ16 WeYz1od/GsRb0egh/OaCMXlc6Y9lTXj8 -----END CERTIFICATE-----Generated at Sat May 31 17:04:51 2025 by rpki-client