$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: MXP37SR89+KyecGcRKtggCnXKUpHbmqFV0nlc2dEA6w= Subject key identifier: 8C:52:2E:4F:9C:D0:BA:C3:E5:93:D3:D7:BB:38:33:79:D9:99:74:AE Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1347 Signing time: Mon 02 Jun 2025 19:47:58 +0000 Manifest this update: Mon 02 Jun 2025 19:47:58 +0000 Manifest next update: Mon 09 Jun 2025 19:47:58 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: QAfmILH/FaTbQlNbNYk79hayXXbzLXJBWOw9yKa0T+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Jun 2 19:47:58 2025 GMT Not After : Jun 9 19:47:58 2025 GMT Subject: CN=683dffee-0c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:ec:4d:07:d4:c0:82:e9:d2:de:ba:25:be: 8c:80:08:83:5b:d5:34:c8:5d:21:1d:3d:fa:9f:cd: 5f:f2:05:0d:66:80:d5:cc:bd:be:b8:8a:5b:34:cd: ee:b5:c2:18:35:1e:e5:a7:56:41:e3:c8:d5:9c:82: e6:2d:9c:10:6d:2c:73:78:9a:f2:29:13:3f:29:b0: 21:09:13:89:e5:08:0b:69:b2:38:62:9a:a9:19:54: 6a:65:5e:b3:99:66:af:8c:17:9c:a4:d0:66:21:07: 5d:a1:ac:0a:04:23:8b:57:09:4f:08:c7:59:c1:c8: f3:0e:2a:c1:86:52:1f:62:68:10:83:5c:a5:52:cb: 68:11:53:6c:8a:4e:76:4a:2b:3a:e6:ed:7b:57:61: a2:3c:48:55:4c:ae:65:94:11:ab:f3:fa:08:cd:12: 20:13:93:e3:18:e6:b5:84:dd:b4:bf:92:a8:4e:d1: c1:c8:44:1d:84:80:03:cb:53:95:81:02:a1:36:dd: c6:d6:d9:d2:0b:cf:48:1d:ba:eb:59:78:c3:c7:08: 60:bd:ef:a1:be:ff:81:1e:bf:e3:6f:8e:20:34:37: d2:64:db:21:e7:68:eb:7c:85:61:92:19:21:24:32: 45:a5:ed:59:a8:f4:77:c3:82:b6:21:9a:07:d8:08: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:2E:4F:9C:D0:BA:C3:E5:93:D3:D7:BB:38:33:79:D9:99:74:AE X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:98:13:e5:b8:32:96:d1:c9:45:03:ba:3a:5d:8d:a4:7c:a7: f9:9e:ae:c3:71:5a:6a:41:38:68:96:a9:8c:29:11:01:56:99: a4:73:dd:c1:17:a3:96:ee:d0:f5:e2:07:22:c0:ce:11:3f:b2: e2:c3:33:cf:ff:98:b3:c9:a7:4d:51:b6:53:85:9b:fd:18:59: 2d:11:1c:19:d1:dc:0a:ca:0c:11:82:c7:fb:7e:b7:aa:32:90: c8:dd:21:8d:a9:8a:d5:1e:13:79:0a:76:27:23:69:5e:ab:07: ce:e8:0a:06:07:e3:cc:49:de:c3:f3:d6:4a:35:fe:74:ce:3b: 45:96:c5:57:c7:10:0b:53:f7:2a:25:b8:6e:4b:21:73:b6:9f: f9:e4:d7:57:92:7e:b4:58:eb:f3:0c:34:91:6c:6b:05:05:f5: 18:cd:5c:bb:f2:39:dd:e7:54:22:2a:09:75:93:d4:06:b0:15: d7:23:4e:d7:8a:61:f5:e6:0e:6c:da:61:85:d2:a9:5f:81:a6: 1e:53:3e:ee:07:69:ed:08:a5:2f:e9:3f:2d:a7:31:8c:45:19: 85:17:a4:19:03:ad:33:1b:fb:45:d8:14:39:db:be:83:01:7d: 42:27:26:af:32:7c:57:fe:56:98:ac:d3:23:20:b8:da:03:32: 56:71:3c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjUwNjAyMTk0NzU4WhcNMjUwNjA5MTk0NzU4WjAYMRYwFAYD VQQDEw02ODNkZmZlZS0wYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OfsTQfUwILp0t66Jb6MgAiDW9U0yF0hHT36n81f8gUNZoDVzL2+uIpbNM3u tcIYNR7lp1ZB48jVnILmLZwQbSxzeJryKRM/KbAhCROJ5QgLabI4YpqpGVRqZV6z mWavjBecpNBmIQddoawKBCOLVwlPCMdZwcjzDirBhlIfYmgQg1ylUstoEVNsik52 Sis65u17V2GiPEhVTK5llBGr8/oIzRIgE5PjGOa1hN20v5KoTtHByEQdhIADy1OV gQKhNt3G1tnSC89IHbrrWXjDxwhgve+hvv+BHr/jb44gNDfSZNsh52jrfIVhkhkh JDJFpe1ZqPR3w4K2IZoH2AhoLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxSLk+c 0LrD5ZPT17s4M3nZmXSuMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBmBPluDKW0clFA7o6XY2kfKf5nq7DcVpqQTholqmMKREBVpmkc93B F6OW7tD14gciwM4RP7LiwzPP/5izyadNUbZThZv9GFktERwZ0dwKygwRgsf7freq MpDI3SGNqYrVHhN5CnYnI2leqwfO6AoGB+PMSd7D89ZKNf50zjtFlsVXxxALU/cq JbhuSyFztp/55NdXkn60WOvzDDSRbGsFBfUYzVy78jnd51QiKgl1k9QGsBXXI07X imH15g5s2mGF0qlfgaYeUz7uB2ntCKUv6T8tpzGMRRmFF6QZA60zG/tF2BQ5276D AX1CJyavMnxX/laYrNMjILjaAzJWcTxM -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:44 2025 by rpki-client