$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: fYk6kd2oYjC1Widi6xAaKclXvIytCHOwqOWo9+LD4mE= Subject key identifier: 44:FC:A7:C0:8F:01:0C:1D:C2:B5:D3:18:BB:15:C6:6B:1F:38:9D:22 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01BE Signing time: Sat 31 May 2025 02:46:12 +0000 Manifest this update: Sat 31 May 2025 02:46:11 +0000 Manifest next update: Sat 07 Jun 2025 02:46:11 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: k6mxj8uQB+YC52aGhdZVYPQeK4gE7WTaS6N1IvXaGF4=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: May 31 02:46:11 2025 GMT Not After : Jun 7 02:46:11 2025 GMT Subject: CN=683a6d73-e673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:fe:80:5c:14:76:b7:4b:91:1d:fa:1f:a1: a3:b6:76:ae:7e:fe:a8:ee:9f:58:ff:d6:d7:c8:63: 16:5e:17:6e:d2:dd:d2:ac:09:d0:d6:02:37:64:2a: 63:c7:9f:37:09:b4:21:b1:b7:11:ae:a0:03:08:e2: 52:b7:b3:ea:e0:b4:47:1f:95:72:e4:12:ea:49:a7: 8c:3d:32:d5:88:42:8a:6a:f2:ba:ab:2b:c9:0a:56: 88:15:0a:47:94:52:c0:42:8a:e0:52:bd:c6:a6:4d: 63:44:37:d9:4b:50:7b:96:cb:33:85:9a:af:59:8b: e8:94:32:39:ce:d2:34:8b:9f:a6:d7:6c:06:0e:31: 29:54:c4:fe:71:5a:e6:76:8d:3d:09:23:28:51:1f: ea:77:db:2d:60:6b:b3:c1:91:62:1f:0d:83:eb:22: d3:d4:8f:3d:63:84:f6:3c:16:4d:41:9d:05:60:06: a0:e8:a4:6a:58:7b:7e:50:0b:6d:68:de:36:fc:7b: 06:50:b0:c3:66:55:6c:fb:5e:2a:c5:55:7b:41:11: 83:0f:0c:70:15:9b:01:54:57:6b:f7:88:8c:13:02: cb:9f:92:23:98:01:64:40:9f:cc:3b:83:18:c6:60: 63:7a:bf:05:2e:ae:bc:01:da:cb:d3:6f:22:bb:bc: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FC:A7:C0:8F:01:0C:1D:C2:B5:D3:18:BB:15:C6:6B:1F:38:9D:22 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:16:d8:0a:2d:59:ba:d4:c3:a5:a5:10:be:c4:94:65:dc:bc: 7a:16:43:12:91:75:53:3d:04:db:2c:22:50:1a:70:99:df:72: 46:4b:2e:ee:37:26:e3:67:f8:67:21:9c:42:34:0f:82:52:06: 67:a2:37:b9:20:5f:6b:66:b0:0c:be:af:4e:42:bb:32:97:9a: 53:f3:2c:45:2c:97:fe:68:5c:4d:3f:1f:20:8a:4c:eb:cb:81: a0:fc:f3:75:df:65:e0:1d:1b:57:cc:6c:23:f8:c1:36:d5:cd: 3a:4f:f0:cb:fe:14:97:78:83:16:fb:98:e7:69:b3:38:fa:6c: 57:1f:81:63:6f:1f:39:90:d9:c6:dc:e9:76:f9:e6:e7:50:4e: 88:9b:83:7a:31:52:ac:9e:d3:49:05:da:7e:e0:99:fb:5e:95: 12:e5:ee:f7:73:a0:19:b2:5d:7e:44:8d:1c:69:7a:83:bd:8e: 86:38:e0:84:2e:6d:24:94:30:22:31:45:6f:f0:0d:74:e2:8a: eb:4a:d6:07:21:e9:86:ee:f8:57:ab:e1:a6:3f:18:54:68:31: ef:fa:9f:cb:05:f3:aa:00:76:c6:f1:30:b5:02:f6:86:4e:d8: 4d:f9:b2:20:e1:ba:ee:8a:43:ae:83:f5:fb:9c:c0:be:9c:c8: 03:c5:25:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwNTMxMDI0NjExWhcNMjUwNjA3MDI0NjExWjAYMRYwFAYD VQQDEw02ODNhNmQ3My1lNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jX+gFwUdrdLkR36H6Gjtnaufv6o7p9Y/9bXyGMWXhdu0t3SrAnQ1gI3ZCpj x583CbQhsbcRrqADCOJSt7Pq4LRHH5Vy5BLqSaeMPTLViEKKavK6qyvJClaIFQpH lFLAQorgUr3Gpk1jRDfZS1B7lsszhZqvWYvolDI5ztI0i5+m12wGDjEpVMT+cVrm do09CSMoUR/qd9stYGuzwZFiHw2D6yLT1I89Y4T2PBZNQZ0FYAag6KRqWHt+UAtt aN42/HsGULDDZlVs+14qxVV7QRGDDwxwFZsBVFdr94iMEwLLn5IjmAFkQJ/MO4MY xmBjer8FLq68AdrL028iu7wJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET8p8CP AQwdwrXTGLsVxmsfOJ0iMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKFtgKLVm61MOlpRC+xJRl3Lx6FkMSkXVTPQTbLCJQGnCZ33JGSy7u NybjZ/hnIZxCNA+CUgZnoje5IF9rZrAMvq9OQrsyl5pT8yxFLJf+aFxNPx8gikzr y4Gg/PN132XgHRtXzGwj+ME21c06T/DL/hSXeIMW+5jnabM4+mxXH4Fjbx85kNnG 3Ol2+ebnUE6Im4N6MVKsntNJBdp+4Jn7XpUS5e73c6AZsl1+RI0caXqDvY6GOOCE Lm0klDAiMUVv8A104orrStYHIemG7vhXq+GmPxhUaDHv+p/LBfOqAHbG8TC1AvaG TthN+bIg4bruikOug/X7nMC+nMgDxSUa -----END CERTIFICATE-----Generated at Sat May 31 16:32:12 2025 by rpki-client