$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft File: FnVwIM-0mowfe-H3xI1FR9_JZu8.mft (raw, json) Hash identifier: grrUy7SBfXLmCoVdcmhwhMshhVve5MNaDKhEh7xmgrQ= Subject key identifier: 5F:04:B4:F4:E7:A4:3A:D5:DF:30:88:93:37:3B:41:66:70:E2:F3:FD Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF Certificate issuer: /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft Manifest number: 11C8 Signing time: Fri 30 May 2025 19:32:25 +0000 Manifest this update: Fri 30 May 2025 19:32:25 +0000 Manifest next update: Fri 06 Jun 2025 19:32:25 +0000 Files and hashes: 1: FnVwIM-0mowfe-H3xI1FR9_JZu8.crl (hash: rLH3ZugRc1bsqQ24TYVmcvQxk3w91rkFa6MHHYE/C2g=) 2: A6E61B8A5A0811EB817D2420C4F9AE02.roa (hash: Sgs7DcEq+j0wnDyUx8P1vrAXIvVvC0UqJgxrSkK3xTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF Validity Not Before: May 30 19:32:25 2025 GMT Not After : Jun 6 19:32:25 2025 GMT Subject: CN=683a07c9-8a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:7b:5e:f7:e3:91:19:17:ad:0e:0b:c3:a9: aa:36:0b:5b:0d:2f:d0:74:64:d4:6f:e4:5a:82:8b: 91:85:3f:fa:ad:67:29:1c:76:ed:07:b9:2a:25:be: c8:ab:0d:03:6b:12:5f:1a:6d:b8:c9:0a:43:ff:15: 9a:d1:45:1f:d5:c4:79:ea:0b:f2:d0:9e:de:df:60: d2:ac:e0:a6:00:2f:96:93:1d:03:c3:32:02:4c:57: 4e:8c:f7:29:97:fb:dc:85:1e:b1:0b:f8:24:a0:a1: 85:f6:74:9c:d1:08:1d:75:25:23:21:5b:f4:83:04: e7:08:9b:7d:f6:ee:36:eb:b3:f4:f0:d9:88:27:ea: b9:b9:56:90:f5:b4:b2:5f:bf:1b:1a:3a:a3:9b:dd: 67:8d:8d:2f:dc:1f:76:5d:0f:c1:7a:0d:59:e1:1e: f2:0b:6f:81:62:17:fe:0b:22:0a:18:2c:af:7f:c6: 69:8e:fb:2d:fc:90:cc:3e:76:df:d9:cb:4a:7e:16: 74:82:4e:e1:61:7c:0e:bb:a0:ca:c9:b9:b8:36:e6: 32:ae:8c:a2:ef:47:f1:db:03:0b:a0:7b:1f:13:74: b3:33:1f:0c:22:a7:f0:a6:12:49:b1:cb:20:3a:c7: a1:c5:72:d3:f9:f6:0e:e4:0c:22:be:fa:96:29:9e: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:04:B4:F4:E7:A4:3A:D5:DF:30:88:93:37:3B:41:66:70:E2:F3:FD X509v3 Authority Key Identifier: keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:2b:04:32:62:6b:91:ae:c8:da:97:9f:7f:4b:9b:20:f6: 08:a2:ee:e0:f4:19:37:b8:08:fe:c9:24:88:25:86:71:fe:13: 38:e2:fd:96:99:aa:14:dd:d7:de:cb:af:4f:e6:4b:14:a2:18: 15:7e:81:45:4e:a0:dc:17:7f:00:8a:6d:55:bb:21:7c:71:bf: 74:78:08:8c:2b:09:28:fd:68:e7:27:90:64:53:47:77:d1:a1: b4:03:ee:a7:92:0c:bb:48:b3:f7:63:d6:cf:c3:6c:00:b1:2c: 5e:b3:0a:9e:58:2e:ec:55:1b:7e:63:8c:f1:b4:ae:98:a1:50: e7:a7:5c:e2:05:c1:cf:a8:10:a2:94:74:0e:80:13:05:d9:8b: e8:9d:75:cd:e1:b2:92:7e:bd:39:d6:09:c5:42:c0:f0:d3:c1: ad:54:98:a4:10:06:00:7b:c6:53:a1:2f:58:76:c2:5c:e5:59: 82:ae:6f:46:2f:f5:82:b0:2f:49:02:e9:7c:31:93:14:99:47: 2e:43:18:53:bc:0f:20:c7:73:6d:fc:a4:c3:ae:1c:07:b8:18: e3:00:b3:2a:89:60:98:e5:fc:aa:37:ac:6a:a5:40:b7:06:6f: 69:91:bd:12:3a:a8:4b:c3:a1:b1:79:19:89:fe:ea:4e:4d:e1: 14:fc:76:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDE2NzU3MDIwQ0ZCNDlBOEMxRjdCRTFGN0M0OEQ0NTQ3 REZDOTY2RUYwHhcNMjUwNTMwMTkzMjI1WhcNMjUwNjA2MTkzMjI1WjAYMRYwFAYD VQQDEw02ODNhMDdjOS04YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSZ7XvfjkRkXrQ4Lw6mqNgtbDS/QdGTUb+RagouRhT/6rWcpHHbtB7kqJb7I qw0DaxJfGm24yQpD/xWa0UUf1cR56gvy0J7e32DSrOCmAC+Wkx0DwzICTFdOjPcp l/vchR6xC/gkoKGF9nSc0QgddSUjIVv0gwTnCJt99u4267P08NmIJ+q5uVaQ9bSy X78bGjqjm91njY0v3B92XQ/Beg1Z4R7yC2+BYhf+CyIKGCyvf8Zpjvst/JDMPnbf 2ctKfhZ0gk7hYXwOu6DKybm4NuYyroyi70fx2wMLoHsfE3SzMx8MIqfwphJJscsg OsehxXLT+fYO5AwivvqWKZ7+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8EtPTn pDrV3zCIkzc7QWZw4vP9MB8GA1UdIwQYMBaAFBZ1cCDPtJqMH3vh98SNRUffyWbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1vd2ZlLUgzeEkxRlI5X0pa dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuVndJTS0wbW93ZmUtSDN4STFGUjlfSlp1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9GblZ3SU0tMG1v d2ZlLUgzeEkxRlI5X0padTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASoisEMmJrka7I2peff0ubIPYIou7g9Bk3uAj+ySSIJYZx/hM44v2W maoU3dfey69P5ksUohgVfoFFTqDcF38Aim1VuyF8cb90eAiMKwko/WjnJ5BkU0d3 0aG0A+6nkgy7SLP3Y9bPw2wAsSxeswqeWC7sVRt+Y4zxtK6YoVDnp1ziBcHPqBCi lHQOgBMF2YvonXXN4bKSfr051gnFQsDw08GtVJikEAYAe8ZToS9YdsJc5VmCrm9G L/WCsC9JAul8MZMUmUcuQxhTvA8gx3Nt/KTDrhwHuBjjALMqiWCY5fyqN6xqpUC3 Bm9pkb0SOqhLw6GxeRmJ/upOTeEU/Hb2 -----END CERTIFICATE-----Generated at Sat May 31 17:47:17 2025 by rpki-client