$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json) Hash identifier: 2X31SChgi2Fjwj4JjMv87t5zPqLG83FzOXd4ma7g4GU= Subject key identifier: 49:4F:78:F9:64:D8:15:D2:27:FF:67:3B:8B:3A:B6:24:E8:E4:4F:B5 Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft Manifest number: 0BB1 Signing time: Fri 30 May 2025 19:08:14 +0000 Manifest this update: Fri 30 May 2025 19:08:13 +0000 Manifest next update: Fri 06 Jun 2025 19:08:13 +0000 Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: neiortkQlOFWqenCXY4Si0AfiXTh/yFzE5mkZvTkBTI=) 2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: May 30 19:08:13 2025 GMT Not After : Jun 6 19:08:13 2025 GMT Subject: CN=683a021d-b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:cc:2e:8c:89:ad:30:30:29:41:5c:f1:dc: 73:0f:e8:c4:11:90:e5:ff:a0:e7:10:da:11:cc:10: 7d:3c:73:e2:93:c2:1a:da:93:d2:f3:24:d2:8b:ab: b2:a9:2c:61:5e:e9:2b:38:a2:17:c1:8e:13:b4:d2: a7:b6:de:7a:d1:91:15:3b:9e:ee:80:bd:bc:59:f2: 94:9d:b5:ea:6d:5f:a2:6b:dc:77:c6:85:63:a1:0d: ea:6c:bf:0c:04:e1:81:d4:02:ae:9f:e8:40:f1:f6: 4b:4c:a7:83:5b:ff:72:be:ec:51:3d:f8:d7:1d:a0: 25:a3:37:33:94:f4:55:12:f8:a9:b3:d9:a8:e0:aa: fc:7c:31:fa:3d:2d:22:65:b6:41:98:85:0d:90:c2: 5a:35:7b:01:8d:16:c3:9d:dc:5d:e4:c0:5b:13:86: 44:bb:60:0a:5b:5b:5c:0c:df:1a:b4:57:93:4b:6c: b5:ab:55:af:0a:22:9c:f6:5f:a8:6c:9c:9c:6b:87: ba:50:ed:fe:5b:c0:f0:6c:b0:ca:e2:8e:ea:85:93: 98:8b:9e:52:50:1a:49:f3:5b:d7:8f:c9:9f:54:24: 40:a1:5d:2e:f1:88:4b:40:41:2a:63:bb:7e:16:b7: ee:94:d1:a6:cf:f3:88:6e:29:36:88:50:9c:9b:24: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:78:F9:64:D8:15:D2:27:FF:67:3B:8B:3A:B6:24:E8:E4:4F:B5 X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:68:a3:3f:11:35:cb:d7:43:0f:2d:69:50:6b:d4:fd:a3:db: dd:4e:bb:c7:bb:77:cb:c6:d2:5a:7f:3c:3e:ab:ac:55:1f:b3: af:ad:c3:8d:e9:b5:6c:b0:8c:9c:6c:73:4e:64:93:2d:c3:d4: 2e:73:e9:36:99:f7:71:91:1c:40:42:54:40:56:21:9f:d8:46: ab:35:dc:26:3f:de:ae:2d:2c:00:34:10:74:36:8b:a2:73:f4: 47:c6:92:ba:fa:80:c3:e2:93:49:38:85:21:00:86:e4:ee:c1: 0f:e5:3d:4c:cb:8d:e0:bd:6d:b1:bf:45:7d:11:f9:09:86:53: 93:a5:e0:7d:ba:26:72:a9:73:1b:29:a1:21:da:af:9e:de:f9: 7a:c7:cf:3d:0a:82:85:6e:d7:02:62:5c:31:e2:05:55:7c:f0: 82:78:04:e9:16:28:0a:c3:d0:1e:d5:39:1d:52:d3:7c:10:c5: 9e:3a:cc:b0:a5:ca:89:e8:28:14:8e:76:40:43:46:41:87:9a: d4:92:fb:ed:c1:fa:09:5c:b7:e3:93:c8:38:ad:ed:7c:91:c4: a8:8f:0f:8a:90:82:a7:e7:db:13:bb:ab:9b:a1:69:d4:83:5e: ba:19:68:08:bc:df:43:73:d3:9f:a1:58:c0:ea:42:12:ca:41: ac:8c:e3:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUwNTMwMTkwODEzWhcNMjUwNjA2MTkwODEzWjAYMRYwFAYD VQQDEw02ODNhMDIxZC1iMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjrMLoyJrTAwKUFc8dxzD+jEEZDl/6DnENoRzBB9PHPik8Ia2pPS8yTSi6uy qSxhXukrOKIXwY4TtNKntt560ZEVO57ugL28WfKUnbXqbV+ia9x3xoVjoQ3qbL8M BOGB1AKun+hA8fZLTKeDW/9yvuxRPfjXHaAlozczlPRVEvips9mo4Kr8fDH6PS0i ZbZBmIUNkMJaNXsBjRbDndxd5MBbE4ZEu2AKW1tcDN8atFeTS2y1q1WvCiKc9l+o bJyca4e6UO3+W8DwbLDK4o7qhZOYi55SUBpJ81vXj8mfVCRAoV0u8YhLQEEqY7t+ FrfulNGmz/OIbik2iFCcmyQ0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElPePlk 2BXSJ/9nO4s6tiTo5E+1MB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOaKM/ETXL10MPLWlQa9T9o9vdTrvHu3fLxtJafzw+q6xVH7OvrcON 6bVssIycbHNOZJMtw9Quc+k2mfdxkRxAQlRAViGf2EarNdwmP96uLSwANBB0Noui c/RHxpK6+oDD4pNJOIUhAIbk7sEP5T1My43gvW2xv0V9EfkJhlOTpeB9uiZyqXMb KaEh2q+e3vl6x889CoKFbtcCYlwx4gVVfPCCeATpFigKw9Ae1TkdUtN8EMWeOsyw pcqJ6CgUjnZAQ0ZBh5rUkvvtwfoJXLfjk8g4re18kcSojw+KkIKn59sTu6uboWnU g166GWgIvN9Dc9OfoVjA6kISykGsjOP2 -----END CERTIFICATE-----Generated at Sat May 31 16:05:22 2025 by rpki-client