$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: fzoUX2MPPXtSQpZyBRea1+NfMYTV49ORH/9DrSoq1l0= Subject key identifier: 52:18:52:BF:BA:4D:36:0B:08:4C:AE:87:62:B0:6B:DC:D0:49:A5:D5 Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0ABD Signing time: Fri 30 May 2025 19:39:46 +0000 Manifest this update: Fri 30 May 2025 19:39:45 +0000 Manifest next update: Fri 06 Jun 2025 19:39:45 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: 1z4gicSIkWGovkC/EKOMxpoqA0a0ZwHAVM0lHotJzVs=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2757 (0xac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: May 30 19:39:45 2025 GMT Not After : Jun 6 19:39:45 2025 GMT Subject: CN=683a0981-5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:54:ce:4e:c2:62:26:4e:72:1d:d2:8a:d8: a7:c0:a9:7f:c7:d8:bb:16:e9:d5:34:f3:19:6c:fe: d9:eb:a6:0e:97:44:04:9a:67:f2:84:a1:9f:b2:0a: 67:d8:a6:da:62:34:90:fe:09:c3:97:24:ef:ff:8d: 0e:9c:a7:84:52:69:c1:54:f0:7e:aa:53:3e:3e:98: 81:be:e4:1d:2c:6a:46:34:d0:36:ad:d4:b1:1c:9f: 31:70:d3:6e:b2:7c:b3:fd:d7:1f:3a:b5:fe:9c:93: 2a:55:c1:b8:f7:40:a8:27:98:6a:8e:c3:22:93:3c: d2:cf:f4:eb:d2:86:fe:72:b7:fc:48:56:0c:25:aa: 4b:0c:10:5e:cb:16:1a:4e:2d:b3:ac:80:86:1b:c8: ed:8f:f6:f8:7d:88:ed:7c:b1:28:d5:88:0c:55:7d: 03:9f:56:45:2d:dc:0f:de:6e:21:69:03:cd:1f:c8: ec:8c:d2:ba:49:51:aa:4a:6b:ff:c8:8b:6b:7f:c8: 8e:8a:4c:74:77:09:13:39:ee:6c:bb:53:59:d5:54: 3f:6d:a0:24:ed:99:a5:1f:e3:48:48:70:a6:56:5e: 73:44:9b:49:26:69:2c:6e:e6:78:9f:53:40:60:4e: fb:2b:21:74:61:bd:9c:aa:41:6a:d4:a7:74:7e:7b: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:52:BF:BA:4D:36:0B:08:4C:AE:87:62:B0:6B:DC:D0:49:A5:D5 X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:30:02:51:27:c0:12:95:0f:48:8f:63:3f:2b:89:ff:45: b8:ac:6f:5b:6c:e3:40:d6:e8:cd:df:f7:fb:c3:4b:4e:88:78: 80:10:ef:ec:25:f4:d2:60:d8:50:24:f2:bb:71:6f:9a:d6:9a: ac:34:42:57:54:3d:3b:f2:99:31:8a:ff:9f:33:c0:85:5f:ca: 8c:4d:04:b2:d0:c3:95:39:76:5d:f1:a5:c2:e0:e4:14:2c:65: 71:90:6a:90:0b:13:21:8f:2c:9b:dc:0a:1f:2a:f6:19:6c:13: e3:2a:96:aa:10:09:63:2d:f6:ba:2e:61:88:f3:ac:53:95:12: ae:cb:86:5a:5b:4b:a2:20:b4:0c:e3:83:c3:d8:c3:0b:28:bb: 04:b5:78:a3:bf:18:8e:80:dc:fa:de:39:89:e6:79:45:62:41: 26:7f:f4:f6:35:5e:ca:e9:6a:19:1c:f5:e7:06:1f:0c:a2:bc: 0d:b5:4e:d0:6a:da:22:e1:1a:c9:23:39:f1:a1:2d:e6:df:91: c6:e0:c6:62:37:3e:da:76:7c:ab:2b:b7:20:58:db:79:a1:ad: a5:61:ca:6a:67:c7:f7:ac:36:4a:39:ec:a6:62:10:23:7a:f1: 75:1c:4d:f1:59:13:30:f7:47:0e:a7:9b:5c:aa:e8:f5:ad:20: ff:02:e1:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwNTMwMTkzOTQ1WhcNMjUwNjA2MTkzOTQ1WjAYMRYwFAYD VQQDEw02ODNhMDk4MS01ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnNUzk7CYiZOch3SitinwKl/x9i7FunVNPMZbP7Z66YOl0QEmmfyhKGfsgpn 2KbaYjSQ/gnDlyTv/40OnKeEUmnBVPB+qlM+PpiBvuQdLGpGNNA2rdSxHJ8xcNNu snyz/dcfOrX+nJMqVcG490CoJ5hqjsMikzzSz/Tr0ob+crf8SFYMJapLDBBeyxYa Ti2zrICGG8jtj/b4fYjtfLEo1YgMVX0Dn1ZFLdwP3m4haQPNH8jsjNK6SVGqSmv/ yItrf8iOikx0dwkTOe5su1NZ1VQ/baAk7ZmlH+NISHCmVl5zRJtJJmksbuZ4n1NA YE77KyF0Yb2cqkFq1Kd0fnuSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIYUr+6 TTYLCEyuh2Kwa9zQSaXVMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjSjACUSfAEpUPSI9jPyuJ/0W4rG9bbONA1ujN3/f7w0tOiHiAEO/s JfTSYNhQJPK7cW+a1pqsNEJXVD078pkxiv+fM8CFX8qMTQSy0MOVOXZd8aXC4OQU LGVxkGqQCxMhjyyb3AofKvYZbBPjKpaqEAljLfa6LmGI86xTlRKuy4ZaW0uiILQM 44PD2MMLKLsEtXijvxiOgNz63jmJ5nlFYkEmf/T2NV7K6WoZHPXnBh8MorwNtU7Q atoi4RrJIznxoS3m35HG4MZiNz7adnyrK7cgWNt5oa2lYcpqZ8f3rDZKOeymYhAj evF1HE3xWRMw90cOp5tcquj1rSD/AuGu -----END CERTIFICATE-----Generated at Sat May 31 17:34:24 2025 by rpki-client