$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json) Hash identifier: D9jVigfhQIrJaeL20ZLYNk2S22nLwJSlw3hWH+gB3KA= Subject key identifier: 7D:16:A3:CE:E6:8D:D8:CB:F5:F3:E4:BC:74:13:B1:CC:2E:42:85:4A Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft Manifest number: 32 Signing time: Sat 31 May 2025 07:13:33 +0000 Manifest this update: Sat 31 May 2025 07:13:33 +0000 Manifest next update: Sat 07 Jun 2025 07:13:33 +0000 Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: eKhxfjIq9IGnDYLeXzFVom/5+vll4T7QIwLdyCb0D0g=) 2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: May 31 07:13:33 2025 GMT Not After : Jun 7 07:13:33 2025 GMT Subject: CN=683aac1d-acad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:04:dd:a6:b6:40:79:43:30:f4:f3:55:4a: c6:b0:ff:8b:99:31:98:12:02:d0:f0:68:aa:b1:70: 74:22:0b:bf:47:9e:17:aa:b3:cf:80:33:8c:10:dd: 6b:b4:63:37:27:61:e5:66:b3:a4:39:cd:43:87:aa: 53:23:f9:af:8d:f2:2d:70:65:26:1e:1d:23:76:fa: 55:be:7f:a5:be:63:18:64:ca:bd:9f:d7:43:4b:15: d1:a0:5a:4a:2e:10:7b:c6:9c:46:27:d5:45:b5:4b: 20:f4:d0:e0:d3:74:0d:04:49:99:5a:14:cf:c3:4a: da:7b:c1:a1:9a:76:12:ce:8f:3b:25:c9:b7:38:87: 59:a4:3d:2d:20:5d:a4:9c:b5:8b:a4:49:26:c0:04: 02:be:33:29:c0:79:47:6b:a8:24:82:d7:51:af:8e: 07:23:4f:8e:b6:cb:46:10:a5:a7:ff:4d:59:a1:d0: 51:46:8f:23:0a:fa:ce:27:aa:96:b3:db:84:c0:cc: 10:53:ec:df:84:4a:42:7d:60:0a:ed:33:c0:e1:4d: db:a1:41:32:f8:21:ff:f1:0b:b4:ac:92:2f:91:d3: 9b:4d:09:4e:e9:44:1b:1a:4e:27:a9:eb:e9:58:c2: 06:fa:51:2b:21:7e:d4:e3:d2:33:ea:e8:3f:49:c9: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:16:A3:CE:E6:8D:D8:CB:F5:F3:E4:BC:74:13:B1:CC:2E:42:85:4A X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b3:cb:c3:e8:44:81:4f:c1:eb:54:62:1f:a4:d6:b8:b1:c4: 34:81:a2:e3:1b:8d:fc:5b:f4:d2:b7:9d:e8:bb:1b:65:3a:2b: c4:0a:83:5e:b1:73:9b:10:3f:3f:ab:94:18:51:65:c9:d8:f6: 07:43:68:7f:b4:9c:c0:3e:56:a7:76:55:e5:66:ea:8d:89:ec: 8b:c3:e2:2f:56:e3:53:18:9c:de:8d:ef:38:32:c7:7a:34:b4: ce:c1:a8:2c:5b:23:14:52:7f:b4:b7:82:34:17:f6:c8:4e:e8: 13:03:ba:dc:e1:71:b8:ac:59:9b:22:66:ae:dd:fa:8b:e5:53: b3:2b:6d:af:98:f3:9d:0d:32:ff:82:15:e0:0a:fa:01:2d:d3: 68:bb:ae:94:01:7e:34:3a:a2:28:d3:e0:4e:c5:a2:cd:d1:50: 7b:68:e8:7d:34:1c:79:57:2f:09:24:ff:ce:86:cb:8e:a7:ce: 38:6d:63:3c:15:9a:42:b7:be:ee:5e:e8:88:47:cf:ed:af:9d: 1e:d9:92:d4:68:98:eb:4e:31:ab:9a:7a:12:28:97:29:77:93: 29:e7:b7:d7:7f:1b:06:8d:75:af:df:7c:81:11:ff:d1:1d:5f: 09:82:9a:66:a1:3a:d7:17:ce:5e:30:82:c9:5e:cb:fc:68:ad: db:6d:02:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjAxRTExMC8GA1UEBRMoN0RCRjgzQUU1MjgyQzg0RUIwRUZGNTVENUMxQzY3ODAx Q0I2NDVDNDAeFw0yNTA1MzEwNzEzMzNaFw0yNTA2MDcwNzEzMzNaMBgxFjAUBgNV BAMTDTY4M2FhYzFkLWFjYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSzwTdprZAeUMw9PNVSsaw/4uZMZgSAtDwaKqxcHQiC79Hnheqs8+AM4wQ3Wu0 YzcnYeVms6Q5zUOHqlMj+a+N8i1wZSYeHSN2+lW+f6W+Yxhkyr2f10NLFdGgWkou EHvGnEYn1UW1SyD00ODTdA0ESZlaFM/DStp7waGadhLOjzslybc4h1mkPS0gXaSc tYukSSbABAK+MynAeUdrqCSC11GvjgcjT462y0YQpaf/TVmh0FFGjyMK+s4nqpaz 24TAzBBT7N+ESkJ9YArtM8DhTduhQTL4If/xC7Sski+R05tNCU7pRBsaTiep6+lY wgb6USshftTj0jPq6D9JyXiNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfRajzuaN 2Mv18+S8dBOxzC5ChUowHwYDVR0jBBgwFoAUfb+DrlKCyE6w7/VdXBxngBy2RcQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2MDFFL0ZGNDg3NUJFRjU2 MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmItRHJsS0N5RTZ3N19WZFhCeG5nQnkyUmNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 MDFFL0ZGNDg3NUJFRjU2MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2 dzdfVmRYQnhuZ0J5MlJjUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmzy8PoRIFPwetUYh+k1rixxDSBouMbjfxb9NK3nei7G2U6K8QKg16x c5sQPz+rlBhRZcnY9gdDaH+0nMA+Vqd2VeVm6o2J7IvD4i9W41MYnN6N7zgyx3o0 tM7BqCxbIxRSf7S3gjQX9shO6BMDutzhcbisWZsiZq7d+ovlU7Mrba+Y850NMv+C FeAK+gEt02i7rpQBfjQ6oijT4E7Fos3RUHto6H00HHlXLwkk/86Gy46nzjhtYzwV mkK3vu5e6IhHz+2vnR7ZktRomOtOMauaehIolyl3kynnt9d/GwaNda/ffIER/9Ed XwmCmmahOtcXzl4wgsley/xordttAl0= -----END CERTIFICATE-----Generated at Sat May 31 17:30:22 2025 by rpki-client