$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: 3WaaRg/89hY5zLtmU01M8xfxTi8DcgKu03+B/UnqZX0= Subject key identifier: 88:87:8D:C6:D0:FF:A8:62:48:96:EF:AA:79:21:D1:5B:F1:DD:EA:77 Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: B3 Signing time: Sat 31 May 2025 05:33:53 +0000 Manifest this update: Sat 31 May 2025 05:33:52 +0000 Manifest next update: Sat 07 Jun 2025 05:33:52 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: n3PYCFbNtoLlzX0gzDi5NCoFNgLkYgslhb5Lc7YLYTU=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: May 31 05:33:52 2025 GMT Not After : Jun 7 05:33:52 2025 GMT Subject: CN=683a94c1-c874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:a0:89:cc:7e:57:90:69:84:b3:45:f8:cb: cf:f2:b7:37:89:3f:12:92:46:47:90:af:e5:d6:c2: 9c:c8:ae:da:a7:e3:35:b1:70:0f:7f:dc:48:fa:5d: 41:de:0e:83:26:0d:22:73:63:fc:c3:64:7d:96:95: e8:8a:dc:62:70:06:33:2b:1d:a8:fd:93:32:2b:d4: 60:97:7f:5b:9c:20:a2:01:40:fb:71:01:38:34:5a: 58:67:e7:a6:ba:81:09:ae:a5:ac:a4:e4:7b:02:c8: f9:4e:8b:60:78:90:95:db:91:37:f1:80:6d:f7:ee: 9f:c2:f0:08:00:c5:6f:c0:ea:92:8c:ad:16:e3:67: 66:5e:91:2e:a5:77:e8:4a:23:e2:57:25:3d:fa:fd: a8:62:6c:0c:e5:a8:58:db:8a:92:bb:bc:06:e5:0a: 02:a7:9f:f5:7d:1f:ed:81:71:d3:94:ac:90:3c:bd: 4f:85:8a:43:7b:97:20:8a:a1:fb:ce:d7:65:ac:b1: 70:49:4c:7f:b8:8b:d2:aa:e1:94:30:8f:2f:63:cf: 13:b5:89:97:e3:56:48:70:b4:e7:6f:ec:08:f5:5f: cd:f9:94:96:28:a7:e9:c4:eb:fc:13:a0:a0:ed:75: 9d:25:af:07:86:ef:44:2f:25:30:a6:f2:49:1a:be: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:87:8D:C6:D0:FF:A8:62:48:96:EF:AA:79:21:D1:5B:F1:DD:EA:77 X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:43:18:0f:de:98:09:a4:54:76:a0:d4:db:1e:66:8a:05:d2: 3a:e3:ed:6a:a8:75:0b:44:80:4b:c2:98:d4:79:e5:e0:fb:88: ce:25:59:30:78:fa:65:41:1b:5f:ff:64:df:c2:a2:f9:32:93: 8f:8f:5c:b9:f1:a9:8c:0b:7e:38:01:45:90:24:2f:ad:ab:89: 36:e2:21:82:70:ca:95:01:84:84:43:0e:e9:3c:36:33:14:6b: 15:96:2c:cf:1e:ab:2d:ef:c2:0b:84:24:0b:25:f2:e1:46:58: 58:f3:8b:be:f4:85:ea:17:d9:9c:5f:85:35:85:f2:2c:ae:39: da:aa:06:ad:c4:06:1b:3f:bc:e0:7a:47:1a:07:ba:1d:fb:8c: d5:d8:77:9c:d4:02:b5:f3:ea:01:7d:dd:de:9e:56:f7:9d:01: 2b:06:c4:44:c2:a5:bd:5c:33:cc:ea:05:0b:ce:68:f0:ab:27: b3:df:5d:d6:93:dd:39:6e:f2:5a:4d:e2:e4:79:19:38:44:35: 63:d5:f0:ed:75:e3:78:86:c2:8b:d3:ec:0e:c1:7d:e9:c9:ce: 34:c7:a6:38:03:82:1e:c9:e0:18:93:89:d1:a8:51:52:48:6b: 27:7c:be:20:21:17:e5:f9:ec:98:77:b3:d1:b5:40:56:87:a0: 80:f9:37:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUwNTMxMDUzMzUyWhcNMjUwNjA3MDUzMzUyWjAYMRYwFAYD VQQDEw02ODNhOTRjMS1jODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2Cgicx+V5BphLNF+MvP8rc3iT8SkkZHkK/l1sKcyK7ap+M1sXAPf9xI+l1B 3g6DJg0ic2P8w2R9lpXoitxicAYzKx2o/ZMyK9Rgl39bnCCiAUD7cQE4NFpYZ+em uoEJrqWspOR7Asj5TotgeJCV25E38YBt9+6fwvAIAMVvwOqSjK0W42dmXpEupXfo SiPiVyU9+v2oYmwM5ahY24qSu7wG5QoCp5/1fR/tgXHTlKyQPL1PhYpDe5cgiqH7 ztdlrLFwSUx/uIvSquGUMI8vY88TtYmX41ZIcLTnb+wI9V/N+ZSWKKfpxOv8E6Cg 7XWdJa8Hhu9ELyUwpvJJGr4gbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiHjcbQ /6hiSJbvqnkh0Vvx3ep3MB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAQxgP3pgJpFR2oNTbHmaKBdI64+1qqHULRIBLwpjUeeXg+4jOJVkw ePplQRtf/2TfwqL5MpOPj1y58amMC344AUWQJC+tq4k24iGCcMqVAYSEQw7pPDYz FGsVlizPHqst78ILhCQLJfLhRlhY84u+9IXqF9mcX4U1hfIsrjnaqgatxAYbP7zg ekcaB7od+4zV2Hec1AK18+oBfd3enlb3nQErBsREwqW9XDPM6gULzmjwqyez313W k905bvJaTeLkeRk4RDVj1fDtdeN4hsKL0+wOwX3pyc40x6Y4A4IeyeAYk4nRqFFS SGsnfL4gIRfl+eyYd7PRtUBWh6CA+Tcs -----END CERTIFICATE-----Generated at Sat May 31 17:29:01 2025 by rpki-client