$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: Z7WT2qyUF6QAeHn6qLqr3fAg128EmjGTujWLu6WS3nk= Subject key identifier: A2:E5:4F:0D:DC:8D:7B:8D:3A:1E:BF:64:72:A6:BE:E5:97:29:60:3D Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 020D Signing time: Sat 31 May 2025 02:11:37 +0000 Manifest this update: Sat 31 May 2025 02:11:37 +0000 Manifest next update: Sat 07 Jun 2025 02:11:37 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: VqJYU1cjrwueTuC+DHf29U3jlg/9VrWc3icq/Mr5zFM=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: May 31 02:11:37 2025 GMT Not After : Jun 7 02:11:37 2025 GMT Subject: CN=683a6559-2483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:f9:85:da:55:79:a8:df:76:9f:28:ce:af: c1:9a:53:06:06:a7:13:65:13:7d:9e:57:82:79:af: 6a:39:d8:a6:f6:a5:15:a3:e6:a3:9e:c5:f6:6d:ee: ec:8d:4b:e9:b5:32:ab:b7:22:14:42:1f:d1:0d:21: 8b:a0:43:e5:d1:74:d3:c8:e3:7c:1b:13:99:c2:21: ed:bf:33:f8:7f:37:1f:59:55:71:56:3c:ad:80:8c: d9:ce:6a:4c:3a:30:0e:78:cf:3a:a4:38:a5:7c:e9: 30:e1:8b:bd:a3:9e:f2:1a:35:7c:04:10:e6:bc:fb: 68:fb:ca:58:85:12:bc:39:26:5a:3a:94:b4:fd:f6: 2b:5f:55:e9:75:c6:ff:20:c9:83:b2:a9:77:60:47: 07:f3:3a:63:8d:53:e0:51:80:a1:2b:3a:67:f7:d0: 0b:de:b8:ff:90:c5:4a:c3:cf:75:15:65:69:09:e1: 69:78:ed:ab:43:20:4a:7d:4d:39:f5:66:38:38:7d: 62:da:a9:23:4a:20:f6:61:5b:33:8d:d5:40:13:45: 30:a7:e0:4d:0c:55:82:12:6a:7c:05:2d:02:76:27: 5c:24:af:69:06:84:b7:9d:13:f2:45:40:44:39:a1: 9b:b9:85:ab:63:12:e7:9f:89:11:64:c6:29:74:4f: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:4F:0D:DC:8D:7B:8D:3A:1E:BF:64:72:A6:BE:E5:97:29:60:3D X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:61:e8:2e:32:0d:09:87:db:56:87:bb:1b:34:1e:de:fc: bd:fb:0d:96:87:c8:04:4e:9a:b2:09:7d:95:b9:a9:24:63:60: a9:f0:6e:ac:d8:53:e0:fb:7c:3b:db:5e:f5:09:ce:d2:5d:ca: 4f:56:fa:86:cf:21:37:51:80:5e:1e:e1:62:3d:fc:19:44:1e: 26:fe:78:85:12:be:7d:c7:35:66:54:ca:16:d7:90:f3:c5:30: 2d:78:8b:83:e2:a8:1a:c6:c9:a0:5c:8a:f7:64:d7:ab:a5:1d: c8:00:ef:c4:c0:ef:dc:b5:c3:c3:0f:c1:6a:7b:af:ed:e2:9e: 7f:e6:96:35:04:32:69:20:23:5d:21:0f:f5:2e:b1:3a:72:e0: a3:0a:9c:49:7e:a3:83:03:32:c3:2c:20:18:9e:50:d2:43:dd: 22:79:a0:b9:f3:2a:26:01:5d:70:34:04:28:bf:dc:3e:ec:80: e8:b4:36:97:89:cb:75:3a:4d:72:b4:7e:b8:75:88:f5:ec:52: 38:99:59:8d:d5:df:aa:1a:49:17:cd:35:1d:dc:eb:a6:70:26: d2:eb:39:98:41:59:26:f2:45:1a:33:4f:c4:29:31:60:46:3b: a7:cb:73:7c:ec:80:70:9e:a4:87:d1:50:98:1a:0a:59:1c:8e: ce:41:62:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwNTMxMDIxMTM3WhcNMjUwNjA3MDIxMTM3WjAYMRYwFAYD VQQDEw02ODNhNjU1OS0yNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS35hdpVeajfdp8ozq/BmlMGBqcTZRN9nleCea9qOdim9qUVo+ajnsX2be7s jUvptTKrtyIUQh/RDSGLoEPl0XTTyON8GxOZwiHtvzP4fzcfWVVxVjytgIzZzmpM OjAOeM86pDilfOkw4Yu9o57yGjV8BBDmvPto+8pYhRK8OSZaOpS0/fYrX1Xpdcb/ IMmDsql3YEcH8zpjjVPgUYChKzpn99AL3rj/kMVKw891FWVpCeFpeO2rQyBKfU05 9WY4OH1i2qkjSiD2YVszjdVAE0Uwp+BNDFWCEmp8BS0CdidcJK9pBoS3nRPyRUBE OaGbuYWrYxLnn4kRZMYpdE8zxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLlTw3c jXuNOh6/ZHKmvuWXKWA9MB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiq2HoLjINCYfbVoe7GzQe3vy9+w2Wh8gETpqyCX2VuakkY2Cp8G6s 2FPg+3w72171Cc7SXcpPVvqGzyE3UYBeHuFiPfwZRB4m/niFEr59xzVmVMoW15Dz xTAteIuD4qgaxsmgXIr3ZNerpR3IAO/EwO/ctcPDD8Fqe6/t4p5/5pY1BDJpICNd IQ/1LrE6cuCjCpxJfqODAzLDLCAYnlDSQ90ieaC58yomAV1wNAQov9w+7IDotDaX ict1Ok1ytH64dYj17FI4mVmN1d+qGkkXzTUd3OumcCbS6zmYQVkm8kUaM0/EKTFg Rjuny3N87IBwnqSH0VCYGgpZHI7OQWJ0 -----END CERTIFICATE-----Generated at Sat May 31 14:38:09 2025 by rpki-client