$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: Fhcz0gF+VQPGrRoZ1AXNAIx10etqGAgE5z7Z6js/TCw= Subject key identifier: DA:D6:F2:43:DD:9E:95:F2:1D:E2:F0:10:E3:89:56:A0:5C:25:B8:4A Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 05E0 Signing time: Fri 30 May 2025 23:12:16 +0000 Manifest this update: Fri 30 May 2025 23:12:15 +0000 Manifest next update: Fri 06 Jun 2025 23:12:15 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: nxZ3ppm8pdIKmzd9rr2DdMoRRSniIcwXK71hxqYQN8k=) 2: 62A74238F77711ECB847DF59C4F9AE02.roa (hash: 6NdpyGpyyLoYdKu6Nb7ZVSWNHzCDx7e5IsoyvgK7mq8=) 3: 1EB401948C6511EF881C050EC4F9AE02.roa (hash: 7C+LAYCC66gUOAU+HwT+tfX4EWextGNzWYx6BmysCZA=) 4: F4E815CC699611EE81E3E33CC4F9AE02.roa (hash: plWOD3DLVqnkQtuQl4y0tsk6pTGSRdQR9cDYcE3hB9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: May 30 23:12:15 2025 GMT Not After : Jun 6 23:12:15 2025 GMT Subject: CN=683a3b50-3d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:4c:e5:80:25:d6:58:de:10:b2:cb:35:9d: 4b:96:1e:c6:4e:76:a0:b1:a1:3f:70:1d:40:8c:9d: 81:96:38:cc:e6:40:d0:63:a0:b8:a5:46:e3:3a:26: fc:83:0c:db:15:a8:c1:1a:4a:2c:31:3b:6a:88:89: 91:69:4a:eb:25:17:7b:10:70:c6:1e:d7:0c:34:5e: ec:d5:4b:12:9c:37:eb:97:64:60:b9:1f:05:fc:c6: 5c:c2:18:19:05:ce:ff:ca:bc:fd:c7:fb:20:95:54: 5a:44:5b:e1:91:f9:b0:86:3b:40:a7:06:c7:5a:35: 78:47:52:e9:49:f1:01:94:d4:69:ab:2d:e4:50:a4: ad:88:4a:ff:c7:41:d4:6b:36:06:da:89:b1:09:61: 80:2e:b0:a1:88:39:d6:5d:b5:00:58:1c:80:fc:bb: 29:aa:c7:b6:c6:dd:2e:0c:37:2d:e0:40:60:de:7c: 06:81:7d:f3:c8:05:f0:d7:bb:47:74:de:97:59:64: 2e:b5:85:2d:db:c3:56:31:04:31:7f:b7:e9:69:ef: 0c:7f:91:32:e6:9c:96:ae:ca:0b:59:e0:d0:25:82: 7c:f5:2a:11:a6:48:a5:68:21:33:9d:8a:26:0f:94: 6a:89:b7:76:e1:28:10:50:6e:b6:b7:73:2b:b2:1b: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D6:F2:43:DD:9E:95:F2:1D:E2:F0:10:E3:89:56:A0:5C:25:B8:4A X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:98:5a:d1:2b:96:7a:1b:c3:a6:b1:92:92:ad:56:40:0f: a7:e1:dd:5b:fc:89:6e:43:95:c4:60:73:8c:f8:40:7e:8d:19: ac:ad:71:44:23:45:39:0a:df:d9:c8:f4:b7:28:fa:91:57:a5: ee:02:af:66:49:69:36:20:9e:da:e3:fd:b2:2a:e0:dd:38:7b: b4:b0:3c:a1:85:d6:02:00:23:f3:44:d2:5e:5a:32:05:35:02: b7:da:b4:67:42:f4:c1:54:e8:51:46:54:f9:5a:e4:bc:fe:e6: d7:fd:9b:a0:61:0a:d7:a1:26:02:a6:fb:9a:3d:c4:8c:21:76: dc:a6:ee:12:ea:39:48:a5:30:cf:18:cb:f0:a0:50:05:df:f7: d0:5c:17:80:1b:ad:e9:f2:71:aa:d3:1a:10:c7:2d:34:65:a9: a6:8c:30:9d:3d:c7:cb:55:46:15:71:b9:1c:fb:46:af:16:6c: 41:d4:d5:88:a1:db:8c:28:17:29:51:89:6d:91:74:6b:3b:f6: 5c:b5:11:fa:e4:c3:9d:7b:69:2c:ea:4c:e2:69:9a:34:15:80: 80:36:fc:1b:cd:44:19:fb:32:d9:12:e6:4b:7f:9b:c8:cd:98: 80:10:24:3c:c7:19:cc:8b:02:fc:60:d3:7f:c0:f3:af:58:0e: ef:b0:26:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjUwNTMwMjMxMjE1WhcNMjUwNjA2MjMxMjE1WjAYMRYwFAYD VQQDEw02ODNhM2I1MC0zZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApStM5YAl1ljeELLLNZ1Llh7GTnagsaE/cB1AjJ2BljjM5kDQY6C4pUbjOib8 gwzbFajBGkosMTtqiImRaUrrJRd7EHDGHtcMNF7s1UsSnDfrl2RguR8F/MZcwhgZ Bc7/yrz9x/sglVRaRFvhkfmwhjtApwbHWjV4R1LpSfEBlNRpqy3kUKStiEr/x0HU azYG2omxCWGALrChiDnWXbUAWByA/Lspqse2xt0uDDct4EBg3nwGgX3zyAXw17tH dN6XWWQutYUt28NWMQQxf7fpae8Mf5Ey5pyWrsoLWeDQJYJ89SoRpkilaCEznYom D5Rqibd24SgQUG62t3MrshvPuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrW8kPd npXyHeLwEOOJVqBcJbhKMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlcJha0SuWehvDprGSkq1WQA+n4d1b/IluQ5XEYHOM+EB+jRmsrXFE I0U5Ct/ZyPS3KPqRV6XuAq9mSWk2IJ7a4/2yKuDdOHu0sDyhhdYCACPzRNJeWjIF NQK32rRnQvTBVOhRRlT5WuS8/ubX/ZugYQrXoSYCpvuaPcSMIXbcpu4S6jlIpTDP GMvwoFAF3/fQXBeAG63p8nGq0xoQxy00ZammjDCdPcfLVUYVcbkc+0avFmxB1NWI oduMKBcpUYltkXRrO/ZctRH65MOde2ks6kziaZo0FYCANvwbzUQZ+zLZEuZLf5vI zZiAECQ8xxnMiwL8YNN/wPOvWA7vsCYe -----END CERTIFICATE-----Generated at Sat May 31 16:59:22 2025 by rpki-client