$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: MwW3n9s7+JKh9tvwlAY8k1ShOrJVpY9woT3CIAIFY1g= Subject key identifier: 6E:1D:90:A8:CD:6C:4A:11:0A:82:7D:C9:59:14:46:88:D0:CC:AF:FA Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BC5 Signing time: Fri 30 May 2025 19:04:28 +0000 Manifest this update: Fri 30 May 2025 19:04:27 +0000 Manifest next update: Fri 06 Jun 2025 19:04:27 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: W6i/apExV2BS3/dF4574Nhxe2hD+pxIOy98vLeWTuek=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: May 30 19:04:27 2025 GMT Not After : Jun 6 19:04:27 2025 GMT Subject: CN=683a013b-5584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4c:88:56:79:83:d1:3f:60:5c:fc:61:62:0c: b5:2d:d8:a7:d6:43:e7:c2:94:35:4f:9d:f1:b4:32: 33:e2:1f:4a:80:6f:de:81:e9:a8:4d:1b:b3:ca:32: 67:e9:ef:fc:03:4b:de:7e:53:4e:06:48:2a:e4:2b: dd:e1:a1:60:b2:56:0f:14:43:63:4c:d9:9d:36:30: d4:be:16:bb:bb:f6:47:44:70:5b:8e:2c:81:23:eb: 27:6b:3c:d8:4e:ef:b6:91:4c:9e:a7:89:47:dc:24: 2e:1e:4c:ec:eb:fa:43:ec:cc:a1:24:d2:17:85:da: 0d:0e:e2:c7:73:e0:2c:93:84:d3:74:b6:b5:99:6f: b6:c9:89:26:5a:62:d0:71:25:e5:96:5a:a5:2d:a3: e9:73:38:e6:1b:ad:e1:03:dc:5c:03:23:69:ac:b4: 45:e5:63:dc:a1:82:b5:87:3f:64:bf:f3:e2:77:2a: 65:9a:e0:14:72:c2:06:c4:60:e2:38:21:2e:98:f9: 66:31:2f:21:76:8a:94:a6:64:2e:d2:fb:0a:3b:24: 03:0f:68:df:c7:de:d6:df:35:ea:86:56:95:77:0f: f1:91:78:be:21:3e:7e:91:97:21:81:56:87:38:28: fd:0b:2e:56:41:8b:e2:c3:9b:9e:4b:e0:e8:97:c0: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:90:A8:CD:6C:4A:11:0A:82:7D:C9:59:14:46:88:D0:CC:AF:FA X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:64:0e:46:98:e8:61:79:88:e4:cd:22:0b:12:43:3b:4e:5b: c7:e3:23:3d:63:08:02:5e:da:c7:23:82:18:53:74:b6:18:47: 1f:a5:06:72:45:2d:0b:12:ea:a6:c2:3d:c7:45:2d:12:a3:eb: fe:95:47:46:d8:61:d4:f1:05:b3:30:01:0e:65:92:f0:63:5d: 3e:f3:aa:2c:57:2a:d4:10:2d:1b:5b:b9:89:93:80:5e:c4:5f: 3d:8d:d5:fa:61:81:82:2a:1a:62:13:d6:fb:b6:74:7c:de:be: 76:07:c2:dd:db:bf:2d:5f:0c:fb:c4:72:cb:f7:63:83:88:31: d3:33:da:1c:df:8a:b3:e4:34:08:f0:d1:a1:6b:69:81:c1:0e: 1d:f9:e7:e6:1d:76:f5:3e:d8:83:f4:be:cb:d9:fd:d5:69:bd: 27:44:de:17:71:8a:e3:c8:e7:ac:0e:8b:9b:67:48:ba:4f:5b: ba:bf:6e:5a:7f:ca:0a:16:dc:2f:a7:5b:52:70:ef:38:13:14: 24:12:bb:77:38:87:38:aa:68:b4:b6:89:ac:7b:f5:99:f5:fb: f2:ea:41:88:53:c1:6a:82:d5:e3:e8:f4:94:bb:a2:82:92:d6: c2:c2:ee:89:6c:e1:17:b4:19:af:7a:a8:1c:71:28:73:13:27: ca:45:d3:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwNTMwMTkwNDI3WhcNMjUwNjA2MTkwNDI3WjAYMRYwFAYD VQQDEw02ODNhMDEzYi01NTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UyIVnmD0T9gXPxhYgy1Ldin1kPnwpQ1T53xtDIz4h9KgG/egemoTRuzyjJn 6e/8A0veflNOBkgq5Cvd4aFgslYPFENjTNmdNjDUvha7u/ZHRHBbjiyBI+snazzY Tu+2kUyep4lH3CQuHkzs6/pD7MyhJNIXhdoNDuLHc+Ask4TTdLa1mW+2yYkmWmLQ cSXlllqlLaPpczjmG63hA9xcAyNprLRF5WPcoYK1hz9kv/PidyplmuAUcsIGxGDi OCEumPlmMS8hdoqUpmQu0vsKOyQDD2jfx97W3zXqhlaVdw/xkXi+IT5+kZchgVaH OCj9Cy5WQYviw5ueS+Dol8C9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4dkKjN bEoRCoJ9yVkURojQzK/6MB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFZA5GmOhheYjkzSILEkM7TlvH4yM9YwgCXtrHI4IYU3S2GEcfpQZy RS0LEuqmwj3HRS0So+v+lUdG2GHU8QWzMAEOZZLwY10+86osVyrUEC0bW7mJk4Be xF89jdX6YYGCKhpiE9b7tnR83r52B8Ld278tXwz7xHLL92ODiDHTM9oc34qz5DQI 8NGha2mBwQ4d+efmHXb1PtiD9L7L2f3Vab0nRN4XcYrjyOesDoubZ0i6T1u6v25a f8oKFtwvp1tScO84ExQkErt3OIc4qmi0tomse/WZ9fvy6kGIU8FqgtXj6PSUu6KC ktbCwu6JbOEXtBmveqgccShzEyfKRdMZ -----END CERTIFICATE-----Generated at Sat May 31 16:34:01 2025 by rpki-client