$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: dQkrJSzVvvHobbwpawYo8QEkV7ynSrPHBYGCMNK0fSM= Subject key identifier: 47:75:84:97:5D:62:D6:10:1F:4B:23:7F:81:FA:90:AD:6A:E0:A8:4B Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0AB4 Signing time: Fri 30 May 2025 19:42:05 +0000 Manifest this update: Fri 30 May 2025 19:42:04 +0000 Manifest next update: Fri 06 Jun 2025 19:42:04 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: LZhWENimInhlINzG5hIKlY6SKFiX5WGdd5iF1fj9wNU=) 2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: ip0tFLU4ZQT3pfoDMLAgucX2vvcCHaknK3+b2q4VRsQ=) 3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=) 4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=) 5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: May 30 19:42:04 2025 GMT Not After : Jun 6 19:42:04 2025 GMT Subject: CN=683a0a0d-c7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:f2:bf:59:79:1c:2d:65:7b:4e:71:cf:89: fd:55:76:ed:fd:70:24:53:89:71:04:e8:59:04:9e: 53:20:c4:9b:34:9f:0a:1b:2b:d5:25:cd:f8:30:2f: 22:43:23:9e:61:8d:c0:48:9b:eb:ba:8f:4d:ca:0c: a4:0b:01:e9:8e:aa:a9:3c:32:8d:80:7a:cf:83:b7: 9c:a1:21:09:4c:c3:54:a6:f9:71:65:42:88:28:c6: 1d:54:ee:03:f9:2b:ee:d8:29:05:62:fb:2b:0a:63: 2f:07:5e:4f:c9:47:51:93:85:f2:d8:85:92:ef:96: 8f:b5:9f:57:16:00:ce:4a:b5:7d:e2:88:46:a3:fd: 33:b1:e8:5e:ad:87:c6:94:9e:9b:59:16:ed:e1:53: 0c:40:68:46:01:7a:64:c5:5a:7f:e0:bc:9c:d9:f3: 02:55:1e:77:43:f1:b7:17:a1:2f:b0:60:1e:9a:29: 51:b9:f2:a5:99:f3:dd:bd:28:18:ff:13:c7:9f:3a: 57:fd:f4:dc:02:79:d6:91:6a:f3:01:77:45:3f:98: cb:be:67:6b:37:83:e3:d9:18:62:89:9e:18:f4:5d: df:1f:6e:96:46:71:fc:12:1a:f4:b4:c1:89:4b:55: 43:e3:0b:c2:cf:5d:60:84:fd:d3:a8:49:3f:e2:ee: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:84:97:5D:62:D6:10:1F:4B:23:7F:81:FA:90:AD:6A:E0:A8:4B X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:6e:a7:f2:1d:a3:dd:ca:02:da:be:de:cb:64:08:e8:f9:cd: 26:fd:57:3c:8b:68:0c:99:26:61:0d:84:79:39:cf:24:c3:72: 0c:c8:73:69:4d:4d:b2:d5:11:21:da:45:50:55:f7:e5:27:ed: 82:9d:30:58:c0:c9:c9:32:61:c0:a3:c8:43:8d:92:5a:b3:d0: 27:80:b9:e2:8f:fb:d4:c9:ec:f0:d3:2e:b0:24:30:9b:91:c9: c0:fd:78:50:14:d0:fc:ba:0a:6f:2c:f6:c7:a7:87:5e:10:ab: 31:7c:76:1a:e7:c4:23:3d:50:81:50:99:8a:63:6d:16:7e:7c: 9c:22:ab:07:8b:48:08:4f:0a:9a:c7:0b:e6:51:78:3c:15:28: fa:06:71:33:3e:76:4b:5f:04:52:27:43:d3:02:ec:c7:93:10: c5:8d:81:db:d7:a3:90:1a:17:78:33:8e:b6:76:68:89:30:16: 63:9f:d7:59:ad:7d:82:ca:06:8d:c9:1c:43:24:00:a0:4e:2c: 69:2d:f6:91:1a:76:86:35:df:1e:48:9e:38:27:46:5d:25:37: 34:75:b6:ed:f2:a0:31:97:4c:fa:78:06:db:9e:41:61:f4:ee: 2d:7b:5c:80:66:e9:db:d4:48:85:6e:5d:14:d0:08:c6:1e:c3: 16:15:d2:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwNTMwMTk0MjA0WhcNMjUwNjA2MTk0MjA0WjAYMRYwFAYD VQQDEw02ODNhMGEwZC1jN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr3yv1l5HC1le05xz4n9VXbt/XAkU4lxBOhZBJ5TIMSbNJ8KGyvVJc34MC8i QyOeYY3ASJvruo9NygykCwHpjqqpPDKNgHrPg7ecoSEJTMNUpvlxZUKIKMYdVO4D +Svu2CkFYvsrCmMvB15PyUdRk4Xy2IWS75aPtZ9XFgDOSrV94ohGo/0zseherYfG lJ6bWRbt4VMMQGhGAXpkxVp/4Lyc2fMCVR53Q/G3F6EvsGAemilRufKlmfPdvSgY /xPHnzpX/fTcAnnWkWrzAXdFP5jLvmdrN4Pj2RhiiZ4Y9F3fH26WRnH8Ehr0tMGJ S1VD4wvCz11ghP3TqEk/4u4d/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd1hJdd YtYQH0sjf4H6kK1q4KhLMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQbqfyHaPdygLavt7LZAjo+c0m/Vc8i2gMmSZhDYR5Oc8kw3IMyHNp TU2y1REh2kVQVfflJ+2CnTBYwMnJMmHAo8hDjZJas9AngLnij/vUyezw0y6wJDCb kcnA/XhQFND8ugpvLPbHp4deEKsxfHYa58QjPVCBUJmKY20WfnycIqsHi0gITwqa xwvmUXg8FSj6BnEzPnZLXwRSJ0PTAuzHkxDFjYHb16OQGhd4M462dmiJMBZjn9dZ rX2CygaNyRxDJACgTixpLfaRGnaGNd8eSJ44J0ZdJTc0dbbt8qAxl0z6eAbbnkFh 9O4te1yAZunb1EiFbl0U0AjGHsMWFdJt -----END CERTIFICATE-----Generated at Sat May 31 16:49:12 2025 by rpki-client