$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json) Hash identifier: PvbliD/f3kECJBdmvOIqNMtq5G8QA5NRePLe2gQb25Y= Subject key identifier: 52:EA:D6:03:43:45:B1:4A:AA:EE:C0:96:A2:D2:6C:06:02:35:84:41 Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft Manifest number: 01D5 Signing time: Sat 31 May 2025 02:31:48 +0000 Manifest this update: Sat 31 May 2025 02:31:48 +0000 Manifest next update: Sat 07 Jun 2025 02:31:48 +0000 Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: VqMwLknQ1qFAReLwdAdzeblTTKtdcpqNCvRlRXKeClU=) 2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Validity Not Before: May 31 02:31:48 2025 GMT Not After : Jun 7 02:31:48 2025 GMT Subject: CN=683a6a14-1341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:54:db:55:a4:9c:56:a2:37:20:18:7a:74: a8:69:1b:e3:27:62:c6:8c:60:e2:47:69:53:d8:5b: c3:91:90:31:63:f6:34:d0:b5:9d:49:fb:51:48:2d: bb:d1:27:4c:9d:ce:bd:cb:ef:ca:c8:1f:44:21:09: 14:e5:f6:4c:44:b1:1a:69:85:9f:5a:bf:95:9b:80: 72:cd:29:16:1b:12:e5:3f:f1:4c:41:6e:f6:7b:5e: bd:2a:da:8f:a7:f4:2b:4b:f6:7e:67:03:d6:b1:8c: a9:0b:b0:cc:17:5d:17:da:a1:69:41:b7:14:8c:0c: d5:94:bc:62:fb:e1:82:0a:85:48:55:39:e6:cf:9b: 5d:df:cd:a8:53:64:03:01:e1:4d:63:e5:8d:11:61: e1:31:26:37:56:ee:45:71:d7:45:e1:bf:c3:e4:91: 67:74:44:85:d2:36:b1:ee:73:56:b6:37:3c:d3:a2: 13:2b:3a:d0:be:9d:f9:41:71:0b:2b:8a:5e:ed:9f: 8d:48:3a:62:6a:02:5d:9f:f9:1f:35:aa:49:54:0c: 84:0d:36:10:2c:2b:52:89:49:fe:66:75:9f:10:09: 2d:4f:f5:c9:69:b4:99:9b:93:53:f0:83:91:5b:65: 3e:56:38:ea:cc:f9:04:2e:54:95:ad:4b:d4:c3:36: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EA:D6:03:43:45:B1:4A:AA:EE:C0:96:A2:D2:6C:06:02:35:84:41 X509v3 Authority Key Identifier: keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ed:86:bc:dc:96:f6:34:c4:da:79:d4:03:c8:e2:98:7b:a0: f4:6d:b9:b1:8f:f2:75:27:44:c5:8c:4d:d3:36:19:8c:ee:7c: e7:01:86:73:73:c7:0b:72:13:e9:a0:2d:a9:de:ff:3a:32:42: d8:7e:ef:7e:10:68:59:da:a8:d4:ba:ca:a0:fe:c0:db:cd:cf: c4:8d:cb:a0:22:e5:8a:da:07:6b:c7:ed:f9:eb:23:e3:49:13: f2:0c:10:7f:00:60:11:f4:df:b2:0f:46:70:98:70:05:49:81: 20:07:d2:9a:89:dc:4b:0d:cf:52:fb:f4:24:22:33:c6:af:76: 2d:a7:a9:9f:49:15:2b:20:05:1c:36:aa:f0:b4:1a:25:71:54: 19:f6:31:99:68:0b:55:cf:31:29:a3:e0:df:b9:e5:86:9b:c6: 3c:cb:19:db:16:7a:d7:23:e9:11:e6:ab:15:31:2d:2a:f9:d3: 0a:76:b0:9f:ff:be:f9:5b:c7:33:c8:60:78:29:55:19:1f:f9: 4c:15:74:d2:46:60:39:db:0d:61:d0:a9:83:ff:e1:02:1b:2a: d7:47:9d:50:e6:86:92:6a:80:54:d2:4f:21:7b:73:a6:f6:5f: 75:39:1e:65:c6:80:42:41:61:a9:49:fc:8a:f7:d9:ec:ff:62: 76:0a:b1:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC OTNBNTk1MjEwHhcNMjUwNTMxMDIzMTQ4WhcNMjUwNjA3MDIzMTQ4WjAYMRYwFAYD VQQDEw02ODNhNmExNC0xMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcpU21WknFaiNyAYenSoaRvjJ2LGjGDiR2lT2FvDkZAxY/Y00LWdSftRSC27 0SdMnc69y+/KyB9EIQkU5fZMRLEaaYWfWr+Vm4ByzSkWGxLlP/FMQW72e169KtqP p/QrS/Z+ZwPWsYypC7DMF10X2qFpQbcUjAzVlLxi++GCCoVIVTnmz5td382oU2QD AeFNY+WNEWHhMSY3Vu5FcddF4b/D5JFndESF0jax7nNWtjc806ITKzrQvp35QXEL K4pe7Z+NSDpiagJdn/kfNapJVAyEDTYQLCtSiUn+ZnWfEAktT/XJabSZm5NT8IOR W2U+VjjqzPkELlSVrUvUwzbaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLq1gND RbFKqu7AlqLSbAYCNYRBMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB87Ya83Jb2NMTaedQDyOKYe6D0bbmxj/J1J0TFjE3TNhmM7nznAYZz c8cLchPpoC2p3v86MkLYfu9+EGhZ2qjUusqg/sDbzc/EjcugIuWK2gdrx+356yPj SRPyDBB/AGAR9N+yD0ZwmHAFSYEgB9KaidxLDc9S+/QkIjPGr3Ytp6mfSRUrIAUc NqrwtBolcVQZ9jGZaAtVzzEpo+DfueWGm8Y8yxnbFnrXI+kR5qsVMS0q+dMKdrCf /775W8czyGB4KVUZH/lMFXTSRmA52w1h0KmD/+ECGyrXR51Q5oaSaoBU0k8he3Om 9l91OR5lxoBCQWGpSfyK99ns/2J2CrEi -----END CERTIFICATE-----Generated at Sat May 31 14:53:18 2025 by rpki-client