$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: cGxMXeygtp95GpoTe8C9jn9GNe+hNHZ43Cb44jaS/UM= Subject key identifier: F5:A0:0C:F4:64:CA:26:31:1B:94:E2:2A:6E:02:12:E1:C7:27:2D:70 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 1479 Signing time: Fri 30 May 2025 18:44:56 +0000 Manifest this update: Fri 30 May 2025 18:44:56 +0000 Manifest next update: Fri 06 Jun 2025 18:44:56 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: /ClCkoPzkAedsPH1uDz5Z5J2lvdXDX9FcPS5C7nbb0Q=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: May 30 18:44:56 2025 GMT Not After : Jun 6 18:44:56 2025 GMT Subject: CN=6839fca8-64af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:42:41:65:e2:ed:2e:43:70:5c:7f:11:88: 03:9e:9e:b0:94:cf:dd:4b:c1:82:c7:90:5a:a3:88: 71:f4:a3:69:2f:8a:77:8a:8f:1d:05:60:6b:aa:0c: 72:df:c4:dd:85:3e:fc:4a:4e:96:3d:e9:e0:4d:9b: d6:fa:b6:3e:ed:7f:56:43:84:35:a7:28:d8:a4:c1: 7f:0d:53:44:26:a0:6f:0f:55:cd:44:a5:4a:9d:31: 47:61:c4:a8:51:dd:cf:f0:1d:86:83:fd:e0:8e:ce: b2:14:39:95:f9:7d:0e:f2:dd:79:e7:8b:9c:42:6a: 23:58:d9:23:ec:fd:41:13:d9:10:96:7b:45:48:7a: d3:88:c8:c1:23:ba:42:97:ff:d8:f6:49:08:2d:1c: 35:e9:55:df:18:f5:20:c1:87:7f:85:6e:59:8a:ba: a0:c3:76:77:ef:63:a1:dd:36:18:39:90:7f:47:3d: 43:f6:17:5f:b9:c5:85:20:78:da:5b:21:bf:33:40: c6:f4:64:71:c3:1f:3a:84:c6:a3:2d:34:68:e1:d6: 80:c1:0d:e4:2f:19:a9:a0:ce:e2:14:03:fe:98:ef: 4c:4e:16:3b:4f:1c:60:e6:87:61:ec:cc:51:09:fb: ef:67:a3:25:c1:10:55:56:fa:5c:05:69:65:85:d0: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:0C:F4:64:CA:26:31:1B:94:E2:2A:6E:02:12:E1:C7:27:2D:70 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:48:b6:c0:55:5d:8e:a1:11:5b:69:43:15:7b:a7:54:09:3c: 04:48:ad:0d:fb:f8:6f:ac:8f:85:91:b6:f5:93:7e:0c:dc:39: af:c2:40:b7:c9:c8:c0:5b:27:b3:b6:94:22:ed:7d:36:64:69: cb:fd:e3:1d:fe:06:9e:aa:c9:39:cb:c8:80:20:c5:a7:53:1c: 4d:da:db:54:3e:36:c0:22:2a:ab:5c:0d:59:5f:ab:11:67:c6: 13:ee:cf:4c:26:06:62:6e:4b:5c:0b:c8:0c:64:f0:cf:77:e8: e4:f3:dd:04:b7:71:f1:d0:95:f5:d8:66:e6:2f:b9:57:f8:72: a0:d7:90:de:18:96:d8:1f:fb:66:e7:64:4c:4b:8c:c4:8f:49: 12:ed:5b:f7:2c:5d:84:00:ac:a9:0d:9e:89:af:df:aa:0d:89: 21:92:35:9a:eb:b3:9f:c4:c1:76:c6:4c:a7:0c:a6:53:4b:b3: a9:af:df:6b:f8:5f:84:45:ed:53:e8:2a:0a:e4:a6:9d:f2:a5: 95:7e:57:3d:f0:7c:86:1f:cf:a9:ce:96:5f:d1:b5:cb:aa:26: 04:b9:17:8b:65:c9:e0:70:40:6f:cb:6a:d3:45:e2:50:46:4e: 4e:30:36:fa:32:a3:49:7a:00:8b:40:97:33:5a:50:6e:3f:06: da:7f:a3:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUwNTMwMTg0NDU2WhcNMjUwNjA2MTg0NDU2WjAYMRYwFAYD VQQDEw02ODM5ZmNhOC02NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnlCQWXi7S5DcFx/EYgDnp6wlM/dS8GCx5Bao4hx9KNpL4p3io8dBWBrqgxy 38TdhT78Sk6WPengTZvW+rY+7X9WQ4Q1pyjYpMF/DVNEJqBvD1XNRKVKnTFHYcSo Ud3P8B2Gg/3gjs6yFDmV+X0O8t1554ucQmojWNkj7P1BE9kQlntFSHrTiMjBI7pC l//Y9kkILRw16VXfGPUgwYd/hW5Zirqgw3Z372Oh3TYYOZB/Rz1D9hdfucWFIHja WyG/M0DG9GRxwx86hMajLTRo4daAwQ3kLxmpoM7iFAP+mO9MThY7Txxg5odh7MxR CfvvZ6MlwRBVVvpcBWllhdA26QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWgDPRk yiYxG5TiKm4CEuHHJy1wMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSSLbAVV2OoRFbaUMVe6dUCTwESK0N+/hvrI+Fkbb1k34M3DmvwkC3 ycjAWyeztpQi7X02ZGnL/eMd/gaeqsk5y8iAIMWnUxxN2ttUPjbAIiqrXA1ZX6sR Z8YT7s9MJgZibktcC8gMZPDPd+jk890Et3Hx0JX12GbmL7lX+HKg15DeGJbYH/tm 52RMS4zEj0kS7Vv3LF2EAKypDZ6Jr9+qDYkhkjWa67OfxMF2xkynDKZTS7Opr99r +F+ERe1T6CoK5Kad8qWVflc98HyGH8+pzpZf0bXLqiYEuReLZcngcEBvy2rTReJQ Rk5OMDb6MqNJegCLQJczWlBuPwbaf6N9 -----END CERTIFICATE-----Generated at Sat May 31 17:34:19 2025 by rpki-client