$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: J5lssd+/179Lk992hArKv7yXzGFKufRacQpT2BZ2/mo= Subject key identifier: 2C:76:77:91:53:BB:63:2F:87:F0:BD:05:4C:A9:03:00:83:CE:C8:D1 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B4F Signing time: Fri 30 May 2025 19:18:45 +0000 Manifest this update: Fri 30 May 2025 19:18:44 +0000 Manifest next update: Fri 06 Jun 2025 19:18:44 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: ky20gJv8tjYMG+R6mPeNmzuho4MWsIW0jafSQimJTv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: May 30 19:18:44 2025 GMT Not After : Jun 6 19:18:44 2025 GMT Subject: CN=683a0494-0fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:07:70:3a:31:d5:11:a5:9c:41:10:83:9d: 6d:e6:02:17:3e:99:73:05:83:61:cb:3e:77:72:03: 50:b5:59:0a:a5:d6:a6:95:57:51:74:45:fb:a4:f9: 22:79:9c:68:e9:4d:fe:08:6b:be:73:0d:17:04:da: 4c:00:12:2c:3a:97:c5:4d:bb:21:8e:7a:ce:cd:8c: d5:95:e7:f7:b0:18:01:cd:8f:06:26:d5:08:bf:02: 4a:9d:56:ed:1b:f3:ec:2e:b2:09:0f:b7:94:a6:ec: 13:a9:88:34:5d:05:91:3e:4a:61:28:43:fd:cb:b5: c7:99:7e:2d:f2:fa:52:54:b0:0e:70:2e:26:b8:85: 87:c8:08:d2:fb:09:59:08:2a:7f:41:f8:62:2b:73: 26:bf:e5:12:c0:5d:8e:84:b7:84:35:f6:46:8f:b0: db:ce:e5:b5:c6:f0:f5:0b:e6:f6:bd:47:09:51:a8: 80:e4:9c:1f:7b:8a:4b:3e:c8:97:4a:ca:c4:b7:15: 2f:9b:73:2e:91:9b:7c:5b:03:c3:9a:13:69:31:65: 23:0b:43:13:fd:04:60:2f:51:b5:b2:f4:8a:cb:29: e5:16:87:d1:4e:f4:cd:88:7d:40:9e:62:1c:73:c8: 23:5b:fe:5c:19:fc:3f:c8:c3:a4:4e:bd:9c:cf:51: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:77:91:53:BB:63:2F:87:F0:BD:05:4C:A9:03:00:83:CE:C8:D1 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c4:6b:b0:2e:e9:58:92:fd:bd:a1:e7:6c:50:ab:9a:13:7b: 7c:44:21:8c:22:fc:0a:5a:1f:78:7c:09:8c:6a:3d:5d:a4:36: 21:a1:77:2e:61:bd:f5:18:a6:6c:ec:85:54:85:d6:05:ae:8d: bb:73:19:eb:e7:ce:21:6f:93:0c:be:ab:a9:5e:e1:e9:c8:49: 35:d3:b0:8f:aa:7e:16:bf:10:66:0d:98:e7:9b:37:b4:1e:74: 79:4b:f9:b7:f2:df:b1:f4:9a:7e:c2:37:43:b1:18:24:23:eb: 6e:13:12:bf:7d:28:5f:44:76:13:b4:9e:ad:19:59:c3:cc:57: 4f:04:e0:bd:f9:a2:9a:7c:97:93:ef:93:6f:56:27:b3:bb:91: 5b:48:af:54:34:3d:f6:30:6a:d6:7f:ce:d9:7d:00:a0:ad:1c: 98:85:f6:dc:f5:9c:9e:30:3f:44:ff:c3:cd:9b:81:53:fa:65: 14:23:a5:61:f6:58:5e:da:29:a4:38:f4:5f:8a:36:bc:a9:bf: 56:72:e1:c3:6a:2a:e6:64:23:91:d5:37:b7:43:22:42:33:40: d2:91:d7:2f:23:be:9a:2c:b0:98:f5:a3:ea:dc:6e:1c:31:10: a5:3e:b8:49:ce:a6:f8:e3:e9:ec:4f:0f:0d:92:e9:3e:17:86: b8:08:ec:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwNTMwMTkxODQ0WhcNMjUwNjA2MTkxODQ0WjAYMRYwFAYD VQQDEw02ODNhMDQ5NC0wZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1scHcDox1RGlnEEQg51t5gIXPplzBYNhyz53cgNQtVkKpdamlVdRdEX7pPki eZxo6U3+CGu+cw0XBNpMABIsOpfFTbshjnrOzYzVlef3sBgBzY8GJtUIvwJKnVbt G/PsLrIJD7eUpuwTqYg0XQWRPkphKEP9y7XHmX4t8vpSVLAOcC4muIWHyAjS+wlZ CCp/QfhiK3Mmv+USwF2OhLeENfZGj7DbzuW1xvD1C+b2vUcJUaiA5Jwfe4pLPsiX SsrEtxUvm3MukZt8WwPDmhNpMWUjC0MT/QRgL1G1svSKyynlFofRTvTNiH1AnmIc c8gjW/5cGfw/yMOkTr2cz1F5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx2d5FT u2Mvh/C9BUypAwCDzsjRMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0xGuwLulYkv29oedsUKuaE3t8RCGMIvwKWh94fAmMaj1dpDYhoXcu Yb31GKZs7IVUhdYFro27cxnr584hb5MMvqupXuHpyEk107CPqn4WvxBmDZjnmze0 HnR5S/m38t+x9Jp+wjdDsRgkI+tuExK/fShfRHYTtJ6tGVnDzFdPBOC9+aKafJeT 75NvViezu5FbSK9UND32MGrWf87ZfQCgrRyYhfbc9ZyeMD9E/8PNm4FT+mUUI6Vh 9lhe2imkOPRfija8qb9WcuHDairmZCOR1Te3QyJCM0DSkdcvI76aLLCY9aPq3G4c MRClPrhJzqb44+nsTw8Nkuk+F4a4COz1 -----END CERTIFICATE-----Generated at Sat May 31 17:32:01 2025 by rpki-client