$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: QiXlYxf9b/5lpPjCxt41fXZTZ5vtVHMDAY1sRBl9LCg= Subject key identifier: 56:8B:B2:EC:26:47:E6:F9:59:6D:54:05:36:31:9B:BB:D3:1E:13:5E Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 03A6 Signing time: Sat 31 May 2025 00:56:29 +0000 Manifest this update: Sat 31 May 2025 00:56:28 +0000 Manifest next update: Sat 07 Jun 2025 00:56:28 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 6TD54wCwC7gUBiyxdmy7s0LfLbVY5blY37G2UMio5bE=) 2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=) 3: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: May 31 00:56:28 2025 GMT Not After : Jun 7 00:56:28 2025 GMT Subject: CN=683a53bd-d2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:55:e8:81:76:bd:94:f5:4f:88:62:2b:18: a5:08:62:af:f5:45:00:79:fe:29:d3:d4:f7:dd:71: b1:10:bd:4b:8c:5b:6f:1c:55:67:d5:eb:d9:6d:c2: 99:ae:ff:7e:74:ab:54:a4:39:4b:8f:e8:26:fa:d6: 2c:ea:f0:af:e5:67:57:e8:eb:3a:42:b6:5f:9f:87: d9:12:c9:25:37:44:6a:0f:64:23:1f:c9:4b:30:2c: 84:82:d1:0b:52:08:01:cd:b7:1a:80:6a:c7:24:85: 2e:d1:8c:e9:f3:20:70:90:63:b0:fa:8c:4e:2a:18: 3c:fd:2d:b7:f2:4d:73:6d:98:a1:7f:de:8c:68:02: c4:ce:21:0a:fb:85:fe:d3:e6:2f:96:c3:5f:8b:99: 81:72:0d:6d:a9:fb:25:3d:47:b3:25:48:78:20:b9: 08:2a:c5:6a:19:6b:87:61:cc:6b:6b:5a:4e:6c:d6: b3:f9:8c:2d:ae:4a:ee:4f:ae:e3:5b:05:4a:64:ed: 90:be:60:e6:99:b4:ec:8d:67:0b:de:7b:85:d2:12: 4d:ca:15:b6:89:35:ca:65:2c:8d:f9:d0:9d:61:da: 87:5f:8b:9a:9c:7a:c7:23:44:66:14:49:e2:42:87: c2:c2:5c:7a:a2:f4:97:4e:1c:1d:cd:01:be:de:a4: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:B2:EC:26:47:E6:F9:59:6D:54:05:36:31:9B:BB:D3:1E:13:5E X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d2:c2:f0:e1:43:0f:09:51:29:89:93:ee:40:66:47:cc:c1: 3e:f6:22:4c:ad:41:5c:ba:35:b2:11:be:b3:9d:7f:e0:01:64: 1c:e9:1c:5f:6c:bb:9f:4e:ed:84:8c:7b:8c:2b:5c:e5:a5:27: 1f:0c:ec:a5:44:02:49:9c:26:f3:77:1e:48:d9:27:79:40:01: 54:00:e6:21:56:b7:e5:b9:af:63:a4:e5:66:ef:b8:e9:4d:90: 22:bd:da:9a:3e:c4:70:41:00:78:f6:2e:3d:3e:77:97:7b:43: 1c:3e:24:88:ab:bc:41:f3:cc:1b:29:8e:3a:36:87:3d:ce:3f: 5a:26:79:59:93:36:32:0a:3d:15:97:56:3d:79:e3:83:16:7e: 07:b9:c5:12:64:35:07:1d:ad:8d:a0:a5:ce:21:60:a4:bc:78: cf:91:d3:5a:f9:e7:a0:41:c2:31:6b:d6:d5:fe:ab:31:f7:95: 60:6b:2d:c2:03:b0:5e:7e:81:ee:d0:44:15:a6:83:a2:5a:26: 1f:d0:9e:36:31:3d:d7:b3:be:d1:a1:91:66:70:2f:83:75:b3: ad:5b:67:5a:bc:21:08:4b:13:75:28:c9:89:28:1d:6a:f2:4b: 24:8b:03:d0:06:fb:61:47:d9:08:f2:4f:94:82:32:eb:ba:4e: bc:07:f3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUwNTMxMDA1NjI4WhcNMjUwNjA3MDA1NjI4WjAYMRYwFAYD VQQDEw02ODNhNTNiZC1kMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxVV6IF2vZT1T4hiKxilCGKv9UUAef4p09T33XGxEL1LjFtvHFVn1evZbcKZ rv9+dKtUpDlLj+gm+tYs6vCv5WdX6Os6QrZfn4fZEsklN0RqD2QjH8lLMCyEgtEL UggBzbcagGrHJIUu0Yzp8yBwkGOw+oxOKhg8/S238k1zbZihf96MaALEziEK+4X+ 0+YvlsNfi5mBcg1tqfslPUezJUh4ILkIKsVqGWuHYcxra1pObNaz+YwtrkruT67j WwVKZO2QvmDmmbTsjWcL3nuF0hJNyhW2iTXKZSyN+dCdYdqHX4uanHrHI0RmFEni QofCwlx6ovSXThwdzQG+3qRWGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaLsuwm R+b5WW1UBTYxm7vTHhNeMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg0sLw4UMPCVEpiZPuQGZHzME+9iJMrUFcujWyEb6znX/gAWQc6Rxf bLufTu2EjHuMK1zlpScfDOylRAJJnCbzdx5I2Sd5QAFUAOYhVrflua9jpOVm77jp TZAivdqaPsRwQQB49i49PneXe0McPiSIq7xB88wbKY46Noc9zj9aJnlZkzYyCj0V l1Y9eeODFn4HucUSZDUHHa2NoKXOIWCkvHjPkdNa+eegQcIxa9bV/qsx95Vgay3C A7BefoHu0EQVpoOiWiYf0J42MT3Xs77RoZFmcC+DdbOtW2davCEISxN1KMmJKB1q 8kskiwPQBvthR9kI8k+UgjLruk68B/OF -----END CERTIFICATE-----Generated at Sat May 31 17:17:35 2025 by rpki-client