$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: VKkkVKTubFGUPH7VgprFEmGNF4BsQjaTjGJrJwufkrY= Subject key identifier: 3A:EA:A8:22:26:3D:D0:80:FA:B8:76:E3:FB:90:98:1B:C1:3A:79:55 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 0134 Signing time: Sat 31 May 2025 04:09:51 +0000 Manifest this update: Sat 31 May 2025 04:09:50 +0000 Manifest next update: Sat 07 Jun 2025 04:09:50 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: 5J3okBqpRngcn/cMOkIzKaB7vA9mNdFUviMb8Lxg+N0=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: May 31 04:09:50 2025 GMT Not After : Jun 7 04:09:50 2025 GMT Subject: CN=683a810f-d0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8d:0f:8f:89:43:04:ff:6e:41:e0:e1:52:21: 8a:7f:b5:22:29:4e:04:cf:40:ed:27:1f:ca:e5:44: b0:06:1c:a7:1d:47:87:35:e5:86:8a:ac:25:88:ec: 88:45:80:58:ab:61:1a:87:e0:62:ff:0a:ef:9f:9b: d8:24:10:db:8b:0d:c4:04:4c:aa:9a:e4:56:f1:96: 9b:ce:63:89:bd:ab:d9:8f:86:f2:db:85:13:12:2f: 78:32:97:83:10:b8:8d:11:97:f9:2f:53:d5:72:08: 90:8a:d1:3e:3d:28:0a:46:6d:b2:f4:26:0a:30:f0: 26:4e:f9:0a:68:30:1a:00:8a:2e:53:fa:fe:c0:ea: dd:e8:a5:33:da:71:46:72:36:a5:55:6e:70:28:19: e6:34:c2:28:2f:a9:36:b5:f1:46:12:f3:64:e5:91: fc:b5:a5:a4:12:c0:77:fd:1f:c1:0d:71:0f:ac:20: bf:16:b0:f3:22:8a:6e:fd:9c:2d:5f:4e:de:80:3f: 15:28:06:ec:4b:2c:ff:63:74:43:77:31:44:bc:80: d3:24:63:1d:19:3e:e1:b9:72:9a:e7:fa:a5:98:75: b9:10:d2:da:83:e6:d5:61:55:ab:4b:39:68:bc:f9: f6:01:d9:14:5b:2b:3a:7f:78:81:af:67:cc:06:32: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:A8:22:26:3D:D0:80:FA:B8:76:E3:FB:90:98:1B:C1:3A:79:55 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:d6:d0:85:c3:e0:c2:02:cc:81:4e:a5:6d:79:a0:ec:f5: c6:3c:01:1e:66:b0:78:ee:d3:4b:d1:e4:ef:6e:e6:78:50:10: 9f:64:2a:df:65:b4:42:c9:cf:e9:1a:b1:82:cc:dd:6f:05:3a: a7:94:f5:78:f1:b1:90:cf:f9:3f:1e:84:5f:78:4d:a7:8c:a0: 91:d3:33:13:c9:32:66:f6:6c:c4:46:0f:4e:43:b4:52:df:b1: 40:0b:ea:df:fa:eb:fc:db:84:48:e1:23:cf:11:6b:b8:d1:af: 93:89:21:39:55:d1:1c:34:29:9b:bc:bd:db:d2:98:cb:e2:c0: 3c:d9:5e:85:b7:a7:50:28:09:b1:65:c7:cb:57:b6:04:22:61: ec:ab:2e:05:4f:f5:94:60:b7:3b:73:5a:28:d7:1d:8b:05:09: 2b:26:fe:14:87:08:28:d0:5b:83:86:09:b3:c1:c5:11:bc:d8: be:45:da:aa:a8:e6:f2:ed:e0:37:3a:a3:ab:ce:57:b5:4f:e1: 9a:a3:6b:3a:dc:29:5f:64:09:56:e3:03:9e:87:e9:5b:a8:42: 97:5c:82:37:56:03:fc:ea:e2:ff:d4:de:cb:c3:08:3e:b7:86: be:ad:91:54:32:f2:27:2d:c7:01:ae:2c:5d:d0:9c:85:e5:a5: 39:8b:fb:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjUwNTMxMDQwOTUwWhcNMjUwNjA3MDQwOTUwWjAYMRYwFAYD VQQDEw02ODNhODEwZi1kMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4o0Pj4lDBP9uQeDhUiGKf7UiKU4Ez0DtJx/K5USwBhynHUeHNeWGiqwliOyI RYBYq2Eah+Bi/wrvn5vYJBDbiw3EBEyqmuRW8ZabzmOJvavZj4by24UTEi94MpeD ELiNEZf5L1PVcgiQitE+PSgKRm2y9CYKMPAmTvkKaDAaAIouU/r+wOrd6KUz2nFG cjalVW5wKBnmNMIoL6k2tfFGEvNk5ZH8taWkEsB3/R/BDXEPrCC/FrDzIopu/Zwt X07egD8VKAbsSyz/Y3RDdzFEvIDTJGMdGT7huXKa5/qlmHW5ENLag+bVYVWrSzlo vPn2AdkUWys6f3iBr2fMBjJF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrqqCIm PdCA+rh24/uQmBvBOnlVMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedNbQhcPgwgLMgU6lbXmg7PXGPAEeZrB47tNL0eTvbuZ4UBCfZCrf ZbRCyc/pGrGCzN1vBTqnlPV48bGQz/k/HoRfeE2njKCR0zMTyTJm9mzERg9OQ7RS 37FAC+rf+uv824RI4SPPEWu40a+TiSE5VdEcNCmbvL3b0pjL4sA82V6Ft6dQKAmx ZcfLV7YEImHsqy4FT/WUYLc7c1oo1x2LBQkrJv4Uhwgo0FuDhgmzwcURvNi+Rdqq qOby7eA3OqOrzle1T+Gao2s63ClfZAlW4wOeh+lbqEKXXII3VgP86uL/1N7Lwwg+ t4a+rZFUMvInLccBrixd0JyF5aU5i/tN -----END CERTIFICATE-----Generated at Sat May 31 16:46:58 2025 by rpki-client