$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: n/MNI5AfilB/FDCx4EYV2FD56GHEppj0eefK3WCUnkY= Subject key identifier: 7D:10:92:6B:D9:00:77:3A:51:8B:88:61:D9:47:F4:8A:F6:33:02:14 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 011F Signing time: Sat 31 May 2025 04:21:14 +0000 Manifest this update: Sat 31 May 2025 04:21:14 +0000 Manifest next update: Sat 07 Jun 2025 04:21:14 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: CDEpmyGGssyM+CTE4Bp/wfY1eSHgvnIrUlmfC8qDndQ=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: May 31 04:21:14 2025 GMT Not After : Jun 7 04:21:14 2025 GMT Subject: CN=683a83ba-3cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:bf:f3:f4:7d:36:ba:65:8a:0c:c7:b2:0a: 39:65:7f:a6:25:f6:99:2c:05:5f:6b:57:07:07:56: 50:fb:a8:05:bd:cf:95:f4:69:2a:cf:21:44:d8:3e: fc:95:f0:a8:98:b2:12:c4:af:77:f9:bf:2f:ca:71: c7:36:b0:75:3a:a5:55:f8:16:d7:5f:a9:0a:86:ef: 13:7d:a3:4a:83:97:53:54:da:84:86:4e:82:e4:09: 58:0f:61:82:39:3b:47:83:70:a1:92:29:b6:87:25: c8:ea:9c:5f:86:43:fb:81:6e:b5:44:63:58:2f:da: d8:b5:ea:35:fa:d9:a6:38:d9:4d:1f:07:74:3c:5c: 81:15:2f:f0:ef:44:56:63:7e:2b:b9:95:ce:7a:e1: 87:f4:a8:4e:2f:c6:db:ce:51:2a:fa:1a:a8:5f:37: 7a:2a:e4:fa:b5:cc:4e:2a:9f:41:94:ea:4d:68:c0: 0d:24:14:ce:48:89:44:b2:b3:8a:4c:e9:9d:ed:1b: 51:86:ef:ef:ce:06:9b:65:0b:e8:0b:94:7b:25:a3: 50:ee:7f:67:0c:a1:2a:a3:73:c0:04:8c:0c:2d:21: da:46:1f:32:74:0f:2e:e2:e7:d8:07:7e:f0:d9:4a: b1:8e:f2:5f:8e:e3:f8:d7:0b:52:4c:1b:fe:21:cc: 44:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:92:6B:D9:00:77:3A:51:8B:88:61:D9:47:F4:8A:F6:33:02:14 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b7:28:4a:69:95:23:80:ce:6f:69:dc:3d:85:57:df:03:9c: bb:c8:93:d6:fc:43:8b:ba:38:6c:8a:3a:4a:cc:77:8a:7d:77: 20:79:3d:ac:2c:bc:ef:8a:83:44:16:21:db:81:a7:b6:d7:67: 06:21:60:a2:6c:51:3b:3b:7e:45:e4:cb:c3:d1:15:26:98:89: 66:91:8d:39:ed:93:ff:2c:60:5c:30:15:3d:fe:89:31:21:8c: 7d:ac:16:f9:64:b3:af:fa:0c:3d:04:c9:2b:92:e3:23:90:04: 95:da:47:8d:2f:bf:f5:9e:3a:07:af:54:25:9a:04:ee:e0:5b: 1a:5a:d9:d0:2a:3d:05:ce:af:85:ed:fc:d4:30:90:3b:89:88: 20:b8:73:2f:c0:0b:85:d8:79:8d:96:a6:a1:e4:20:6e:57:9f: 88:33:73:25:68:c0:b3:27:42:44:6c:89:f5:93:00:95:68:b9: b1:2c:94:c0:6a:1b:b3:41:f6:4e:a6:67:e2:94:8c:80:ae:c4: fe:4d:d7:b6:43:d9:16:54:28:bc:45:bc:84:f5:c7:82:b4:cb: cd:1f:a6:79:1d:c2:9e:4b:47:f1:99:2d:bd:d3:f9:79:fd:86: ed:dc:e0:e8:72:38:90:0c:0e:3d:f7:ec:05:2e:7c:39:f3:3f: 6e:bb:cf:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUwNTMxMDQyMTE0WhcNMjUwNjA3MDQyMTE0WjAYMRYwFAYD VQQDEw02ODNhODNiYS0zY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bS/8/R9NrpligzHsgo5ZX+mJfaZLAVfa1cHB1ZQ+6gFvc+V9GkqzyFE2D78 lfComLISxK93+b8vynHHNrB1OqVV+BbXX6kKhu8TfaNKg5dTVNqEhk6C5AlYD2GC OTtHg3Chkim2hyXI6pxfhkP7gW61RGNYL9rYteo1+tmmONlNHwd0PFyBFS/w70RW Y34ruZXOeuGH9KhOL8bbzlEq+hqoXzd6KuT6tcxOKp9BlOpNaMANJBTOSIlEsrOK TOmd7RtRhu/vzgabZQvoC5R7JaNQ7n9nDKEqo3PABIwMLSHaRh8ydA8u4ufYB37w 2UqxjvJfjuP41wtSTBv+IcxEQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0QkmvZ AHc6UYuIYdlH9Ir2MwIUMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBztyhKaZUjgM5vadw9hVffA5y7yJPW/EOLujhsijpKzHeKfXcgeT2s LLzvioNEFiHbgae212cGIWCibFE7O35F5MvD0RUmmIlmkY057ZP/LGBcMBU9/okx IYx9rBb5ZLOv+gw9BMkrkuMjkASV2keNL7/1njoHr1QlmgTu4FsaWtnQKj0Fzq+F 7fzUMJA7iYgguHMvwAuF2HmNlqah5CBuV5+IM3MlaMCzJ0JEbIn1kwCVaLmxLJTA ahuzQfZOpmfilIyArsT+Tde2Q9kWVCi8RbyE9ceCtMvNH6Z5HcKeS0fxmS290/l5 /Ybt3ODocjiQDA499+wFLnw58z9uu8+u -----END CERTIFICATE-----Generated at Sat May 31 16:56:12 2025 by rpki-client