$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: pZ5mcpjokt8S23Ye1kjG/AUpveBbj0/4tlqdR73nW8o= Subject key identifier: 8E:C4:CD:37:9E:CF:15:91:C3:A2:FD:94:B1:98:F6:08:73:E4:BD:CE Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01BE Signing time: Sat 31 May 2025 02:47:17 +0000 Manifest this update: Sat 31 May 2025 02:47:17 +0000 Manifest next update: Sat 07 Jun 2025 02:47:17 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: O+YUe/Sbrd09r/HrxRqRGGEDMfrm8WSQIkbow2ExxA4=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: May 31 02:47:17 2025 GMT Not After : Jun 7 02:47:17 2025 GMT Subject: CN=683a6db5-8bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:60:7c:a9:64:78:fd:40:4a:d1:b8:ec:b6: 14:d3:a3:d3:de:fa:f1:e9:34:68:02:a8:ea:63:7a: a0:9b:de:76:22:33:5a:31:64:d8:36:3a:78:eb:01: ef:8e:93:34:ee:20:2a:de:ed:0e:5f:33:fb:06:61: 3e:65:57:4e:59:be:1f:15:36:05:b5:88:f4:f4:34: b7:c1:17:eb:d9:67:ca:59:f6:ca:8d:c0:c0:9e:9b: 70:91:ee:25:a7:37:61:76:07:51:de:53:31:ce:f3: 93:4a:c5:7f:f0:ce:c5:27:0a:43:1a:c8:e9:c3:86: 08:d0:b2:86:ea:76:49:02:0e:68:d1:ba:89:08:4a: 75:38:70:b5:fa:bf:6e:ad:ee:c0:05:d7:14:8a:83: 4a:fe:72:fd:57:63:32:2c:13:a2:52:e4:2d:3e:9e: c0:77:a4:19:0c:8a:b6:01:fd:e2:c7:5e:ba:31:0a: 12:d1:33:93:cc:e4:fc:86:15:5f:e6:af:0c:52:07: fd:f3:de:9e:92:bf:ef:b8:34:f2:0f:1f:45:6d:46: 22:c9:48:e9:c0:bf:0d:41:da:a4:bd:9a:b9:07:1f: 28:a4:91:e7:5a:19:37:94:72:73:a1:06:7a:17:47: c6:9d:f1:c3:f7:ba:ce:98:d2:ca:d0:17:ea:cf:14: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:CD:37:9E:CF:15:91:C3:A2:FD:94:B1:98:F6:08:73:E4:BD:CE X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:40:f0:e9:9d:94:52:fa:1a:35:54:4b:6d:e5:cc:87:d6:5f: f2:82:5c:22:e1:d0:b4:12:58:b2:28:f1:4e:b4:1f:f1:a5:cc: 83:f6:d6:6d:32:a0:c6:b2:9b:89:eb:c7:3e:b9:16:35:da:cf: b3:1b:e0:79:35:ed:5f:03:7d:43:96:7b:4b:bf:17:3c:10:d0: 83:bc:a4:06:d8:de:f4:a2:3e:2a:ac:62:6d:2f:96:8b:38:2f: 52:46:99:bb:98:8c:15:7c:ca:bc:97:b7:dc:a8:be:e1:4e:29: 58:6b:db:bd:a5:14:81:73:ee:17:4c:92:52:4a:cb:a6:cc:d6: 05:1c:49:b9:dd:61:77:75:c9:c7:fd:c0:b6:ca:73:fb:12:f7: 92:58:c7:55:88:25:7e:0a:ba:8b:ea:05:e8:e1:8d:d0:ec:b1: 45:30:bb:0a:6d:74:de:dd:68:a9:a6:b1:f7:a8:1f:97:17:e9: d4:47:3e:9f:2e:bb:99:16:3c:cf:72:fe:51:cc:3f:79:bb:d8: e0:0b:44:87:2e:e0:1f:ad:2c:03:39:36:e9:df:78:64:0f:7f: 5b:9d:02:da:a0:90:33:b5:20:1f:1b:ea:5d:e0:c8:33:7b:13: d2:b7:ae:bb:17:99:5c:44:30:d7:ba:ac:9e:35:4a:c6:eb:1b: 96:f0:09:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwNTMxMDI0NzE3WhcNMjUwNjA3MDI0NzE3WjAYMRYwFAYD VQQDEw02ODNhNmRiNS04YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DBgfKlkeP1AStG47LYU06PT3vrx6TRoAqjqY3qgm952IjNaMWTYNjp46wHv jpM07iAq3u0OXzP7BmE+ZVdOWb4fFTYFtYj09DS3wRfr2WfKWfbKjcDAnptwke4l pzdhdgdR3lMxzvOTSsV/8M7FJwpDGsjpw4YI0LKG6nZJAg5o0bqJCEp1OHC1+r9u re7ABdcUioNK/nL9V2MyLBOiUuQtPp7Ad6QZDIq2Af3ix166MQoS0TOTzOT8hhVf 5q8MUgf9896ekr/vuDTyDx9FbUYiyUjpwL8NQdqkvZq5Bx8opJHnWhk3lHJzoQZ6 F0fGnfHD97rOmNLK0BfqzxS/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7EzTee zxWRw6L9lLGY9ghz5L3OMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQPDpnZRS+ho1VEtt5cyH1l/yglwi4dC0EliyKPFOtB/xpcyD9tZt MqDGspuJ68c+uRY12s+zG+B5Ne1fA31DlntLvxc8ENCDvKQG2N70oj4qrGJtL5aL OC9SRpm7mIwVfMq8l7fcqL7hTilYa9u9pRSBc+4XTJJSSsumzNYFHEm53WF3dcnH /cC2ynP7EveSWMdViCV+CrqL6gXo4Y3Q7LFFMLsKbXTe3WipprH3qB+XF+nURz6f LruZFjzPcv5RzD95u9jgC0SHLuAfrSwDOTbp33hkD39bnQLaoJAztSAfG+pd4Mgz exPSt667F5lcRDDXuqyeNUrG6xuW8Amq -----END CERTIFICATE-----Generated at Sat May 31 17:01:18 2025 by rpki-client