$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: z7nqOBR5rNJ0Z3QiDgCsjTUbP9z2CY+r2zotfUWrCG4= Subject key identifier: 0E:5C:FB:4E:23:6C:AF:01:93:04:45:DA:CF:AC:1D:93:88:7D:65:C4 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0883 Signing time: Fri 30 May 2025 20:49:41 +0000 Manifest this update: Fri 30 May 2025 20:49:41 +0000 Manifest next update: Fri 06 Jun 2025 20:49:41 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: GlYEeJuTjIQEgZTsCd5kOZQK8Z8ozDIpWxSL34+aHFM=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: May 30 20:49:41 2025 GMT Not After : Jun 6 20:49:41 2025 GMT Subject: CN=683a19e5-de19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:01:15:3b:56:20:01:74:d3:1b:29:f8:17: 12:eb:69:11:c6:f2:ce:58:61:69:11:2f:d4:04:2b: 91:99:05:a1:00:2d:d5:53:78:2c:99:0d:73:b9:f9: 9b:93:50:4b:b8:b6:eb:f5:a3:cf:44:5d:7a:2e:a8: c4:c4:c3:e6:9c:ec:1f:c9:9c:d2:48:64:d6:52:32: 98:27:e7:91:ee:6d:71:21:b4:60:a4:9b:c4:18:10: c8:2a:38:bc:a9:7d:51:c2:8a:53:32:b8:b3:0d:fe: e8:87:5b:60:f8:be:11:3c:77:22:21:c5:89:2d:2c: 3c:ec:41:79:cb:9e:d4:1c:6a:c0:a7:1b:77:a0:4c: 83:3f:b3:63:46:eb:5e:1f:0a:08:73:98:d1:d1:30: a9:e2:12:cf:2d:89:cc:e1:74:46:ea:4e:3d:c6:5c: ef:46:be:38:f5:2d:5d:f2:1c:a7:ed:c7:f9:22:92: 4e:9f:43:a0:14:ff:03:4f:a2:07:d3:6b:3e:7a:9c: 32:f2:2f:73:54:5d:86:b6:ca:be:f4:6f:83:7c:b2: 61:6f:95:d5:86:c0:08:1b:74:a9:fc:86:eb:91:80: cb:86:6f:2d:52:a6:84:5f:15:8d:cd:ee:f1:36:70: de:2f:9d:c8:e4:55:30:4f:85:19:e7:1e:53:78:ae: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5C:FB:4E:23:6C:AF:01:93:04:45:DA:CF:AC:1D:93:88:7D:65:C4 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0c:fb:41:64:57:63:e4:c5:93:3f:10:b8:a9:9d:d8:7c:12: 83:96:45:b3:c3:70:0d:3f:60:01:e1:00:df:4e:fd:4d:6b:34: 49:42:9d:57:1c:63:62:b5:57:4d:30:68:63:18:62:38:93:95: 9c:09:a5:24:69:5e:5b:c9:5d:1b:f9:10:e5:96:f1:6b:26:af: a6:30:60:ad:cb:09:78:35:39:f3:22:4d:24:54:0c:ae:70:22: d6:5a:11:52:1b:52:17:c9:15:3f:ba:ca:ce:44:01:c8:39:0b: 00:91:6e:d8:a7:3e:83:65:45:c4:1e:eb:d9:79:f9:56:4f:3e: 48:d2:8f:be:d5:01:30:fc:95:2e:8b:f1:17:11:9e:0c:13:c4: 62:c2:46:c5:a8:4f:c0:a1:25:0c:bf:01:15:e5:35:af:0e:b5: 8e:4f:dc:26:5b:7b:d6:d8:4c:98:02:7c:29:0c:d5:ec:4d:5f: 36:ab:82:27:fa:27:a0:43:5a:83:ec:b6:ac:c8:e9:e6:1b:02: dd:34:ac:bc:46:b6:fb:76:29:23:d1:89:01:3c:7c:81:f2:27: 9c:6e:dc:ea:f8:57:fb:5d:d9:9c:56:9e:51:56:af:65:e7:25: 3f:b5:c4:d0:5d:a1:cd:13:7e:d6:21:b7:0e:ab:a2:f4:bd:19: df:d0:dd:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwNTMwMjA0OTQxWhcNMjUwNjA2MjA0OTQxWjAYMRYwFAYD VQQDEw02ODNhMTllNS1kZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYIBFTtWIAF00xsp+BcS62kRxvLOWGFpES/UBCuRmQWhAC3VU3gsmQ1zufmb k1BLuLbr9aPPRF16LqjExMPmnOwfyZzSSGTWUjKYJ+eR7m1xIbRgpJvEGBDIKji8 qX1RwopTMrizDf7oh1tg+L4RPHciIcWJLSw87EF5y57UHGrApxt3oEyDP7NjRute HwoIc5jR0TCp4hLPLYnM4XRG6k49xlzvRr449S1d8hyn7cf5IpJOn0OgFP8DT6IH 02s+epwy8i9zVF2Gtsq+9G+DfLJhb5XVhsAIG3Sp/IbrkYDLhm8tUqaEXxWNze7x NnDeL53I5FUwT4UZ5x5TeK60xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5c+04j bK8BkwRF2s+sHZOIfWXEMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2DPtBZFdj5MWTPxC4qZ3YfBKDlkWzw3ANP2AB4QDfTv1NazRJQp1X HGNitVdNMGhjGGI4k5WcCaUkaV5byV0b+RDllvFrJq+mMGCtywl4NTnzIk0kVAyu cCLWWhFSG1IXyRU/usrORAHIOQsAkW7Ypz6DZUXEHuvZeflWTz5I0o++1QEw/JUu i/EXEZ4ME8RiwkbFqE/AoSUMvwEV5TWvDrWOT9wmW3vW2EyYAnwpDNXsTV82q4In +iegQ1qD7LasyOnmGwLdNKy8Rrb7dikj0YkBPHyB8iecbtzq+Ff7XdmcVp5RVq9l 5yU/tcTQXaHNE37WIbcOq6L0vRnf0N1T -----END CERTIFICATE-----Generated at Sat May 31 17:03:29 2025 by rpki-client