$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: 8CHc8UTpSuA+wW/+HEY9z+cI0JKF5/TzSCXLDMg38ro= Subject key identifier: C3:56:28:55:3A:55:24:18:A9:77:D5:70:DB:90:E0:10:00:29:90:3C Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C26 Signing time: Mon 02 Jun 2025 17:46:51 +0000 Manifest this update: Mon 02 Jun 2025 17:46:51 +0000 Manifest next update: Mon 09 Jun 2025 17:46:51 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: vCXz6VcD9oXr4t1nW4W8YEaKsyVh5/zT7ZD8+/7P4ok=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Jun 2 17:46:51 2025 GMT Not After : Jun 9 17:46:51 2025 GMT Subject: CN=683de38b-6525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:1a:4c:13:69:1b:74:5d:db:4f:46:6a:7f: ce:67:5e:c3:64:6e:ec:7f:1b:72:c9:68:fa:a3:5f: 2e:0d:aa:54:04:20:a4:e6:27:aa:82:76:f8:19:d4: 53:23:4f:87:3d:df:36:57:81:03:3f:fd:93:b7:e3: 65:cc:a8:98:69:88:1a:d8:ae:b4:ab:21:e7:73:33: 5e:f9:60:b6:c2:46:c9:70:a0:26:23:fc:ae:67:5f: 2a:ad:91:4f:4e:c5:6f:74:4a:e4:58:3b:72:3c:a3: 8d:d5:cf:09:c8:c7:07:7a:1d:b0:d8:03:2f:84:d7: e5:b7:c5:99:09:f7:e6:8d:c5:9b:5c:64:41:d8:c2: 88:bd:dd:a5:c4:4e:ca:7a:21:95:86:4f:af:51:d5: e3:71:b0:fb:1e:95:93:d4:be:f8:ad:ad:54:25:12: 1d:ea:e4:53:05:59:21:80:9c:6e:bd:04:27:77:12: ff:11:6b:36:09:37:c6:7a:ee:c0:38:24:20:51:b6: c2:3b:e0:36:e2:40:c1:2b:73:51:00:70:df:6f:d3: 15:8c:d7:ec:fe:4c:d3:ab:db:16:2d:97:a4:e4:68: c5:d0:55:0b:ad:3f:14:40:3b:d6:16:90:d8:fe:04: 29:04:4a:ce:08:d1:68:0c:0a:c5:9e:01:20:e7:d5: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:28:55:3A:55:24:18:A9:77:D5:70:DB:90:E0:10:00:29:90:3C X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2f:50:d1:3a:0d:ee:3b:9a:69:91:8e:ae:da:d5:1f:96:a3: e4:e8:b0:b7:85:95:3d:c9:be:a9:fa:44:6d:88:d5:8a:5c:1d: 3e:73:bc:ff:bb:d1:2e:84:0f:34:f9:3b:a6:1c:c4:1f:f3:2e: de:92:96:83:b3:85:08:85:b4:41:5e:0d:d5:28:45:7d:b5:c2: 00:4d:25:ec:bc:c5:b7:8f:60:41:0d:37:f7:16:67:66:3f:9b: ba:51:a1:bb:9c:27:61:af:e9:02:38:35:bb:43:2a:c6:b5:62: 67:00:e6:05:fd:5a:54:11:23:aa:9b:31:68:a5:28:a5:35:f1: 60:42:65:84:66:d8:24:17:87:f6:2a:66:02:d9:3c:59:7c:f3: cc:be:ab:b3:84:bd:14:d5:3c:18:33:5e:ec:fc:52:de:13:83: 85:02:18:c6:49:bd:a1:90:fe:77:c9:d7:29:94:35:74:1f:c4: 2e:03:7c:1f:77:0e:ba:0a:21:d8:c2:3e:23:d9:84:82:d2:31: 3b:e7:89:06:90:bb:3a:a3:a1:a6:69:8f:b2:20:9a:b9:7c:4a: b4:2b:7f:f4:f7:54:76:3a:59:a0:14:d3:2c:8a:0f:c7:ec:44: 20:0c:e6:9f:88:e6:3f:ea:27:30:b2:e3:be:73:01:f0:6a:1c: 97:54:52:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNjAyMTc0NjUxWhcNMjUwNjA5MTc0NjUxWjAYMRYwFAYD VQQDEw02ODNkZTM4Yi02NTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0MaTBNpG3Rd209Gan/OZ17DZG7sfxtyyWj6o18uDapUBCCk5ieqgnb4GdRT I0+HPd82V4EDP/2Tt+NlzKiYaYga2K60qyHnczNe+WC2wkbJcKAmI/yuZ18qrZFP TsVvdErkWDtyPKON1c8JyMcHeh2w2AMvhNflt8WZCffmjcWbXGRB2MKIvd2lxE7K eiGVhk+vUdXjcbD7HpWT1L74ra1UJRId6uRTBVkhgJxuvQQndxL/EWs2CTfGeu7A OCQgUbbCO+A24kDBK3NRAHDfb9MVjNfs/kzTq9sWLZek5GjF0FULrT8UQDvWFpDY /gQpBErOCNFoDArFngEg59XetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNWKFU6 VSQYqXfVcNuQ4BAAKZA8MB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJL1DROg3uO5ppkY6u2tUflqPk6LC3hZU9yb6p+kRtiNWKXB0+c7z/ u9EuhA80+TumHMQf8y7ekpaDs4UIhbRBXg3VKEV9tcIATSXsvMW3j2BBDTf3Fmdm P5u6UaG7nCdhr+kCODW7QyrGtWJnAOYF/VpUESOqmzFopSilNfFgQmWEZtgkF4f2 KmYC2TxZfPPMvquzhL0U1TwYM17s/FLeE4OFAhjGSb2hkP53ydcplDV0H8QuA3wf dw66CiHYwj4j2YSC0jE754kGkLs6o6GmaY+yIJq5fEq0K3/091R2OlmgFNMsig/H 7EQgDOafiOY/6icwsuO+cwHwahyXVFLV -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:57 2025 by rpki-client