$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json) Hash identifier: 94VYi1eRdmsSSZTGi8zW4jVIN3ThBU1x4biPDxSmil8= Subject key identifier: 74:7D:54:AA:66:F7:D1:FD:DC:1E:E5:F5:0A:B7:34:4C:B3:61:B9:43 Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft Manifest number: 03D8 Signing time: Sat 31 May 2025 00:46:51 +0000 Manifest this update: Sat 31 May 2025 00:46:50 +0000 Manifest next update: Sat 07 Jun 2025 00:46:50 +0000 Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: VyxCb7bW1M6lx8gZHyebaAsCVGUsNkLc6EjfGBpOXY8=) 2: 6F51887283FA11EC9C033067C4F9AE02.roa (hash: XwBfTGBdHYip+l3Cww7cDDqUdig6aiSXjJ7XX34v/4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Validity Not Before: May 31 00:46:50 2025 GMT Not After : Jun 7 00:46:50 2025 GMT Subject: CN=683a517b-bd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:b0:33:e1:65:47:a0:3c:5e:ce:e6:1a:97: 4c:70:f7:66:18:6e:cd:0c:89:3d:47:6e:aa:65:7e: bd:0e:a1:41:eb:34:84:37:81:4a:03:42:cc:d9:bc: c5:a9:5f:4a:9d:86:b8:6e:9c:69:29:df:c4:a6:27: 43:04:ac:32:e0:fe:a2:57:24:f9:7a:2f:f9:20:58: 1a:a3:68:8e:c9:4c:fa:ce:ed:4f:76:e1:17:23:74: 8f:11:b6:22:8c:53:53:c1:78:e3:d8:9e:32:c1:4c: e7:a3:1f:b2:60:e4:1d:f7:27:d3:97:32:3d:75:a0: 7b:a4:13:e5:35:2a:0a:46:c0:46:1b:d7:1b:4f:1c: 4f:8b:55:54:46:fc:79:3c:44:b4:b8:e4:06:ad:bb: 26:24:f4:3d:ff:a5:1b:1e:90:c5:55:85:ab:65:2f: 15:1d:f5:6e:f4:c1:a9:51:df:5e:80:8d:9f:cf:28: 4e:fa:fc:94:5e:11:d5:f2:9f:35:9f:ef:72:e0:7e: a2:e0:5f:f5:6a:12:ee:da:ed:92:ea:2b:50:bb:af: 0e:b6:de:2e:1f:de:43:13:e0:8f:a4:ab:8f:ed:80: 89:68:18:7f:09:fe:c3:98:bd:4c:33:7a:29:97:11: 10:77:a4:fe:18:60:73:eb:15:2e:cf:87:67:bb:c6: 9d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7D:54:AA:66:F7:D1:FD:DC:1E:E5:F5:0A:B7:34:4C:B3:61:B9:43 X509v3 Authority Key Identifier: keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2f:ca:c3:c8:31:a7:2e:47:e7:32:4a:69:83:61:6f:80:02: aa:7b:10:82:c8:77:14:44:f2:a6:5e:74:33:8f:53:c2:07:eb: 49:07:4c:18:22:7c:62:26:cd:82:60:cb:02:ff:46:c7:57:4b: 21:e1:a0:05:ab:5f:7a:4c:9e:09:3d:1d:4c:52:4e:2c:c7:d0: c5:ab:93:b0:dd:ef:40:0f:e8:8d:34:36:67:af:84:bb:64:bb: f5:a6:49:5c:2c:84:9a:5a:c9:0a:20:15:31:b8:87:fe:59:37: 6a:b4:df:4a:91:dd:b4:cc:c7:7f:be:66:cd:e8:bc:33:1a:fb: 79:b9:31:9d:9d:03:97:42:2e:a1:dc:bc:cf:39:ce:f7:6b:6b: 1b:c2:38:d3:1b:7b:1d:d7:7a:02:38:b2:00:fd:28:b4:62:7f: 15:94:1e:fa:17:7d:29:ad:c5:b4:80:06:b8:28:29:07:6f:45: 16:0d:62:4f:0f:81:4a:af:a9:4e:1a:26:d4:43:21:1b:da:98: 88:fa:34:66:a3:52:93:19:eb:86:d4:0b:f2:71:91:d7:f2:3b: 61:e0:79:eb:3b:6e:b6:59:ca:ff:5e:30:f5:12:58:89:ea:82: e3:23:3b:d9:27:32:c3:65:47:3d:12:08:96:82:7e:fd:91:06: f0:56:65:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4 NTREMzZEQzIwHhcNMjUwNTMxMDA0NjUwWhcNMjUwNjA3MDA0NjUwWjAYMRYwFAYD VQQDEw02ODNhNTE3Yi1iZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb6wM+FlR6A8Xs7mGpdMcPdmGG7NDIk9R26qZX69DqFB6zSEN4FKA0LM2bzF qV9KnYa4bpxpKd/EpidDBKwy4P6iVyT5ei/5IFgao2iOyUz6zu1PduEXI3SPEbYi jFNTwXjj2J4ywUznox+yYOQd9yfTlzI9daB7pBPlNSoKRsBGG9cbTxxPi1VURvx5 PES0uOQGrbsmJPQ9/6UbHpDFVYWrZS8VHfVu9MGpUd9egI2fzyhO+vyUXhHV8p81 n+9y4H6i4F/1ahLu2u2S6itQu68Ott4uH95DE+CPpKuP7YCJaBh/Cf7DmL1MM3op lxEQd6T+GGBz6xUuz4dnu8adbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR9VKpm 99H93B7l9Qq3NEyzYblDMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJL8rDyDGnLkfnMkppg2FvgAKqexCCyHcURPKmXnQzj1PCB+tJB0wY InxiJs2CYMsC/0bHV0sh4aAFq196TJ4JPR1MUk4sx9DFq5Ow3e9AD+iNNDZnr4S7 ZLv1pklcLISaWskKIBUxuIf+WTdqtN9Kkd20zMd/vmbN6LwzGvt5uTGdnQOXQi6h 3LzPOc73a2sbwjjTG3sd13oCOLIA/Si0Yn8VlB76F30prcW0gAa4KCkHb0UWDWJP D4FKr6lOGibUQyEb2piI+jRmo1KTGeuG1AvycZHX8jth4HnrO262Wcr/XjD1EliJ 6oLjIzvZJzLDZUc9EgiWgn79kQbwVmV+ -----END CERTIFICATE-----Generated at Sat May 31 17:23:38 2025 by rpki-client