$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: NtfPulcFwC1TBNCMZFGvn12p1qEJqPM4rOKXHdl8pbc= Subject key identifier: DA:C1:61:4A:69:10:26:22:A5:C2:03:6B:B0:21:DE:08:D4:2A:FA:7F Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 0442 Signing time: Sat 31 May 2025 00:31:24 +0000 Manifest this update: Sat 31 May 2025 00:31:23 +0000 Manifest next update: Sat 07 Jun 2025 00:31:23 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: JdcQMyrPiAfKb77q9mU6J/rlRm0qKD72Ewsj2LCpJPs=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: N/Z1A4qeNZSHVNwv9cte5LA7OvaaTxHRAR2tgd6keJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: May 31 00:31:23 2025 GMT Not After : Jun 7 00:31:23 2025 GMT Subject: CN=683a4ddc-7352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:1b:38:77:cf:7f:ce:74:c2:b0:05:fe:9b: b2:e9:db:48:8f:e0:87:f3:b1:54:95:ca:5c:96:8f: c0:3f:b7:2d:42:61:59:88:1d:91:eb:f1:14:df:36: a4:d3:d7:37:48:53:8a:1b:35:da:d6:6c:74:e1:52: c2:c1:59:0d:4a:2e:de:40:7c:03:de:1e:93:f1:c4: 24:09:bc:a7:91:ba:30:f1:0c:f3:b7:1d:ae:cb:37: 17:42:fe:01:cc:df:4e:9a:df:87:3c:b5:90:cd:19: aa:e2:fd:0a:78:d7:87:0a:34:23:eb:eb:c2:0f:d0: 4b:14:52:5d:14:39:18:3c:7f:3e:69:12:c6:28:13: 21:89:71:3f:0b:87:aa:1b:9b:13:59:4b:42:1c:08: 70:c9:4a:c7:84:ee:1b:a8:85:6a:bc:a5:65:ea:93: 80:57:2e:0b:48:08:00:7d:74:a1:72:cc:45:8f:05: 7c:60:35:37:95:42:bb:23:53:c0:63:33:8b:a6:dd: a8:e5:bf:67:bc:54:d1:77:79:6d:92:7e:da:2a:5b: 24:4e:9c:1d:57:11:6a:57:5b:13:bb:2a:ad:5d:bc: 47:de:d6:15:93:9c:a0:be:f4:59:61:b2:d2:c3:8f: 83:fa:33:fa:38:1f:6d:e3:96:1c:53:2e:3d:2d:bc: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:61:4A:69:10:26:22:A5:C2:03:6B:B0:21:DE:08:D4:2A:FA:7F X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2a:a2:8c:27:98:25:c0:ed:f5:de:5a:2c:ac:b1:81:6e:49: cd:3f:f7:e3:ec:54:0c:1e:c4:dc:e9:a2:15:52:70:ba:73:b1: f6:44:5c:86:44:02:e6:41:88:89:22:c2:0c:fb:8d:72:ea:38: a7:67:52:ea:70:ac:a6:78:ae:89:17:12:de:f9:2a:8b:4e:25: 26:fc:ec:30:1a:27:94:1b:07:55:ef:02:8b:c6:cd:f5:df:04: 38:d3:14:5c:de:50:df:51:89:73:84:05:67:b5:95:f1:7b:eb: 70:9a:6d:35:fc:c0:fd:00:99:be:ec:ce:6e:85:2a:79:8d:cb: f2:14:e7:e0:db:de:c1:65:73:a4:28:cd:99:a1:ae:b7:2f:75: b1:22:8a:9d:1b:69:c8:f2:04:cf:5a:a8:8e:e2:83:6f:c8:7a: 54:2c:d1:34:49:13:94:9d:cd:c9:75:c1:8c:fb:00:8a:b5:57: b4:f7:07:7f:1e:d6:71:cd:75:34:21:fb:4b:49:d0:cb:0f:ba: 00:e4:15:40:90:af:12:20:41:e6:81:db:01:6a:68:b1:85:1b: f0:f5:65:ff:51:8f:26:32:f8:3c:67:a7:bb:f9:1a:5b:4f:88: 30:c4:26:81:9e:88:ac:75:db:b7:4e:39:f0:e0:e7:ae:f0:e5: 9e:d9:95:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjUwNTMxMDAzMTIzWhcNMjUwNjA3MDAzMTIzWjAYMRYwFAYD VQQDEw02ODNhNGRkYy03MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1gbOHfPf850wrAF/puy6dtIj+CH87FUlcpclo/AP7ctQmFZiB2R6/EU3zak 09c3SFOKGzXa1mx04VLCwVkNSi7eQHwD3h6T8cQkCbynkbow8Qzztx2uyzcXQv4B zN9Omt+HPLWQzRmq4v0KeNeHCjQj6+vCD9BLFFJdFDkYPH8+aRLGKBMhiXE/C4eq G5sTWUtCHAhwyUrHhO4bqIVqvKVl6pOAVy4LSAgAfXShcsxFjwV8YDU3lUK7I1PA YzOLpt2o5b9nvFTRd3ltkn7aKlskTpwdVxFqV1sTuyqtXbxH3tYVk5ygvvRZYbLS w4+D+jP6OB9t45YcUy49LbwuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrBYUpp ECYipcIDa7Ah3gjUKvp/MB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJKqKMJ5glwO313losrLGBbknNP/fj7FQMHsTc6aIVUnC6c7H2RFyG RALmQYiJIsIM+41y6jinZ1LqcKymeK6JFxLe+SqLTiUm/OwwGieUGwdV7wKLxs31 3wQ40xRc3lDfUYlzhAVntZXxe+twmm01/MD9AJm+7M5uhSp5jcvyFOfg297BZXOk KM2Zoa63L3WxIoqdG2nI8gTPWqiO4oNvyHpULNE0SROUnc3JdcGM+wCKtVe09wd/ HtZxzXU0IftLSdDLD7oA5BVAkK8SIEHmgdsBamixhRvw9WX/UY8mMvg8Z6e7+Rpb T4gwxCaBnoisddu3Tjnw4Oeu8OWe2ZVQ -----END CERTIFICATE-----Generated at Sat May 31 17:34:25 2025 by rpki-client