$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json) Hash identifier: KToRDK0GxxtydCF/AWNTnRsyY9hicE8Ym+1dAQEyylc= Subject key identifier: 9C:FB:53:CA:DF:C1:13:CA:3A:86:DF:D2:B6:A8:FC:A7:A8:B8:93:46 Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Certificate serial: 3486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft Manifest number: 3484 Signing time: Fri 30 May 2025 15:11:27 +0000 Manifest this update: Fri 30 May 2025 15:11:26 +0000 Manifest next update: Fri 06 Jun 2025 15:11:26 +0000 Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: NuyvAg7i/F/iqTwx1CfGF//gltcXDXIj9H1QISmQSTE=) 2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: QO9VCVg4JBZYD4qSn+hc8302M9oNt2/POhltCbyhtbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13446 (0x3486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Validity Not Before: May 30 15:11:26 2025 GMT Not After : Jun 6 15:11:26 2025 GMT Subject: CN=6839ca9f-b0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:9d:8f:6b:dc:06:f3:ce:09:1f:a1:b1:69: 22:77:e0:05:13:25:37:e8:94:17:bb:01:23:ca:e2: 8d:fd:ed:b5:d0:25:d4:8c:e7:c3:12:4b:f8:e8:44: f7:ab:2f:d0:d6:8a:e6:42:b4:36:a0:cb:ce:9a:ed: 4f:b3:29:bd:be:1e:5b:fd:7c:82:55:c5:97:83:49: 3d:41:61:0c:56:b1:d9:67:f7:fa:b0:de:60:31:39: 1f:13:ab:93:14:b5:89:8d:88:84:fb:7b:9e:b0:0a: 39:c6:53:b0:8d:d3:6c:ed:d0:e5:f1:95:98:7d:f9: 4d:76:e4:50:10:e6:c0:6c:c8:e9:16:e3:d5:4b:ca: 55:63:d9:d4:c3:b9:49:ba:ae:5e:b9:db:8f:a6:19: fe:58:b3:15:ae:b1:60:1a:85:fd:2f:70:6e:05:f1: 74:68:93:b2:6b:3b:1a:cb:6e:96:2b:55:01:38:ea: c7:e2:94:ec:8c:67:11:ea:31:c2:f6:48:85:2f:62: 19:f3:45:02:d5:4c:ae:0b:31:a0:08:fa:6a:ec:99: 8f:4e:e8:12:bb:ff:3b:9a:a1:f5:87:d3:19:e9:3b: 0d:03:c7:29:76:71:fa:fa:5e:2c:9b:00:a2:85:38: 2f:e9:9e:33:e1:5a:c6:63:16:f3:ec:90:9a:c6:68: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FB:53:CA:DF:C1:13:CA:3A:86:DF:D2:B6:A8:FC:A7:A8:B8:93:46 X509v3 Authority Key Identifier: keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:25:9e:1f:9c:8e:65:65:c3:eb:11:a6:d2:a1:7a:fc:6c:fe: 5a:ab:5c:5a:70:a5:50:56:62:90:cc:ed:21:a2:43:45:e6:98: 0e:fe:1a:e9:53:70:1d:31:99:26:36:76:bf:a4:ef:9b:e1:45: 29:09:68:2e:e6:8a:3b:46:ef:10:fd:a7:c6:60:19:40:08:10: 71:72:d2:ca:1b:ce:17:c5:9a:c2:51:6b:cd:b0:b1:62:a6:95: 2f:9d:b3:cb:ea:3d:34:dc:1a:bd:f7:73:78:ac:d0:2d:2d:8d: a9:0c:fc:22:c6:f0:71:01:0a:fb:88:0f:7d:d2:c7:e9:96:2a: e4:8a:32:3b:91:cf:19:78:59:82:e6:02:36:84:9c:a0:41:36: cb:7b:f1:53:3c:17:54:42:d2:20:85:cc:8d:51:86:f2:32:7c: 2d:de:c8:47:e3:6c:8b:48:2a:b6:a6:d8:4a:9d:4c:3d:b8:55: 9d:18:24:cf:e9:67:22:17:d6:8f:5c:07:24:f4:66:a0:72:9e: 5f:2e:01:66:bb:8e:ba:be:6b:2c:a2:1d:46:dc:3c:7b:2e:e8: 2c:a1:a3:f5:b9:95:9d:61:df:30:6a:12:01:75:d1:4f:28:35: 43:f9:48:66:de:7b:33:23:d6:db:17:b3:12:75:32:e2:bd:d2: 53:a8:da:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0 Mzg2Mjk3QkYwHhcNMjUwNTMwMTUxMTI2WhcNMjUwNjA2MTUxMTI2WjAYMRYwFAYD VQQDEw02ODM5Y2E5Zi1iMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWudj2vcBvPOCR+hsWkid+AFEyU36JQXuwEjyuKN/e210CXUjOfDEkv46ET3 qy/Q1ormQrQ2oMvOmu1Psym9vh5b/XyCVcWXg0k9QWEMVrHZZ/f6sN5gMTkfE6uT FLWJjYiE+3uesAo5xlOwjdNs7dDl8ZWYfflNduRQEObAbMjpFuPVS8pVY9nUw7lJ uq5euduPphn+WLMVrrFgGoX9L3BuBfF0aJOyazsay26WK1UBOOrH4pTsjGcR6jHC 9kiFL2IZ80UC1UyuCzGgCPpq7JmPTugSu/87mqH1h9MZ6TsNA8cpdnH6+l4smwCi hTgv6Z4z4VrGYxbz7JCaxmg/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz7U8rf wRPKOobf0rao/KeouJNGMB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3 ck00aWdSblAtQU5EaGlsNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTJZ4fnI5lZcPrEabSoXr8bP5aq1xacKVQVmKQzO0hokNF5pgO/hrp U3AdMZkmNna/pO+b4UUpCWgu5oo7Ru8Q/afGYBlACBBxctLKG84XxZrCUWvNsLFi ppUvnbPL6j003Bq993N4rNAtLY2pDPwixvBxAQr7iA990sfplirkijI7kc8ZeFmC 5gI2hJygQTbLe/FTPBdUQtIghcyNUYbyMnwt3shH42yLSCq2pthKnUw9uFWdGCTP 6WciF9aPXAck9Gagcp5fLgFmu466vmssoh1G3Dx7LugsoaP1uZWdYd8wahIBddFP KDVD+Uhm3nszI9bbF7MSdTLivdJTqNqD -----END CERTIFICATE-----Generated at Sat May 31 16:46:48 2025 by rpki-client