$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: NXxhjcK0B2Lyang5Decif3tg8s7PrWfYQE47zkIwQD4= Subject key identifier: F0:4B:83:2B:99:68:6C:44:C0:98:BF:74:97:45:02:10:66:31:62:AC Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B3D Signing time: Fri 30 May 2025 19:20:48 +0000 Manifest this update: Fri 30 May 2025 19:20:47 +0000 Manifest next update: Fri 06 Jun 2025 19:20:47 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: nD2hbOFriIipYJgAlsFccwV272xdJ4Nt+qoKc5J8eo8=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: May 30 19:20:47 2025 GMT Not After : Jun 6 19:20:47 2025 GMT Subject: CN=683a050f-d580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:4b:b4:0c:aa:50:11:09:87:30:96:33:b4: 9b:85:7f:eb:60:d1:2b:ba:dc:3c:8f:a8:5d:1a:5b: df:6a:92:66:93:3b:6f:ce:76:0f:18:e8:bc:8c:fc: 3c:38:36:24:74:71:84:69:8a:ec:d6:f9:ec:7c:0f: f8:86:da:47:92:96:1c:6e:72:4f:44:ca:37:09:2d: 70:c7:cf:0f:16:77:84:41:fd:e7:35:a1:70:f2:45: a7:23:d2:71:49:66:80:1d:25:31:f8:39:2b:d6:49: dd:2e:f2:54:85:0e:f4:ef:fe:8a:be:b7:8d:61:ab: a5:22:b3:f4:50:28:e9:4f:c8:36:86:dc:50:8e:77: 78:9b:d6:aa:cf:c3:85:87:c5:2f:3e:78:0a:62:0a: 8d:4c:98:ff:da:39:fd:4d:34:f6:2e:b1:94:26:ac: 0e:6d:dd:c5:c5:6b:55:8e:e9:01:57:67:91:a9:bc: 1d:c7:8e:61:b4:2e:b8:2e:a7:12:ee:41:2a:54:c5: 79:ff:c9:f8:67:71:d0:69:11:6f:16:3a:92:a0:ff: 81:29:50:aa:fb:29:d4:bb:69:8c:33:65:d7:82:17: 79:40:b2:37:40:ad:b7:e1:28:f6:a8:16:40:b0:b9: 9f:0d:6f:76:42:68:a6:13:50:c3:91:58:94:87:9f: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:83:2B:99:68:6C:44:C0:98:BF:74:97:45:02:10:66:31:62:AC X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3e:b3:35:61:62:91:7b:fd:18:23:30:c1:1f:99:b3:88:da: 48:59:08:04:0c:7f:87:8a:1d:e6:55:20:aa:06:2b:dc:be:a0: e5:0c:be:fe:75:1e:ba:b9:5a:fe:6d:c2:00:a7:b1:c3:8b:70: 89:76:5a:0c:ad:ad:95:6a:9f:c9:d5:3e:8d:df:d5:2a:bd:5d: 08:b5:13:b3:75:f3:9b:81:08:07:53:00:bb:18:f5:76:d2:4b: 47:fa:34:58:22:3a:a4:65:69:ea:c9:18:8b:84:7a:51:3c:fe: a9:2b:33:77:97:04:32:43:a4:bb:94:3e:37:16:db:a5:8f:47: 57:bc:fc:78:f8:28:19:c2:10:64:45:7c:cf:54:77:25:45:fe: c9:70:cf:c5:b0:8f:b6:af:0c:69:a6:5e:28:fb:10:0b:73:e0: 2d:3b:6c:57:81:41:c4:e1:2a:f5:1f:42:08:88:cf:61:d6:a7: b0:21:16:2e:50:88:ea:94:c1:e8:16:7c:f1:9d:5a:b5:2b:71: 15:46:2f:da:05:b6:03:f3:07:96:80:64:ca:8c:0a:45:c2:ce: fa:0e:0e:b6:70:9a:fb:30:33:c7:a6:9e:3f:08:8d:6a:ae:9e: a6:78:55:ed:ea:4f:ba:8a:78:42:fe:d3:56:ca:27:25:68:6d: 6d:92:0d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUwNTMwMTkyMDQ3WhcNMjUwNjA2MTkyMDQ3WjAYMRYwFAYD VQQDEw02ODNhMDUwZi1kNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyxLtAyqUBEJhzCWM7SbhX/rYNErutw8j6hdGlvfapJmkztvznYPGOi8jPw8 ODYkdHGEaYrs1vnsfA/4htpHkpYcbnJPRMo3CS1wx88PFneEQf3nNaFw8kWnI9Jx SWaAHSUx+Dkr1kndLvJUhQ707/6KvreNYaulIrP0UCjpT8g2htxQjnd4m9aqz8OF h8UvPngKYgqNTJj/2jn9TTT2LrGUJqwObd3FxWtVjukBV2eRqbwdx45htC64LqcS 7kEqVMV5/8n4Z3HQaRFvFjqSoP+BKVCq+ynUu2mMM2XXghd5QLI3QK234Sj2qBZA sLmfDW92QmimE1DDkViUh58oIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBLgyuZ aGxEwJi/dJdFAhBmMWKsMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9PrM1YWKRe/0YIzDBH5mziNpIWQgEDH+Hih3mVSCqBivcvqDlDL7+ dR66uVr+bcIAp7HDi3CJdloMra2Vap/J1T6N39UqvV0ItROzdfObgQgHUwC7GPV2 0ktH+jRYIjqkZWnqyRiLhHpRPP6pKzN3lwQyQ6S7lD43Ftulj0dXvPx4+CgZwhBk RXzPVHclRf7JcM/FsI+2rwxppl4o+xALc+AtO2xXgUHE4Sr1H0IIiM9h1qewIRYu UIjqlMHoFnzxnVq1K3EVRi/aBbYD8weWgGTKjApFws76Dg62cJr7MDPHpp4/CI1q rp6meFXt6k+6inhC/tNWyiclaG1tkg3d -----END CERTIFICATE-----Generated at Sat May 31 16:40:42 2025 by rpki-client