$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: jgYsX1DyLWllmyBqPNuo/I/lhqla690kQ9zPzCfG3/c= Subject key identifier: CC:C6:FA:EC:C4:14:1A:F0:F5:0D:DC:99:07:DD:97:9E:8B:0B:F3:49 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: A2 Signing time: Sat 31 May 2025 05:48:30 +0000 Manifest this update: Sat 31 May 2025 05:48:29 +0000 Manifest next update: Sat 07 Jun 2025 05:48:29 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: FhkHw/tclz4gDlfUBmENkx28FalIv416RVjjPBBKEZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: May 31 05:48:29 2025 GMT Not After : Jun 7 05:48:29 2025 GMT Subject: CN=683a982e-fa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:39:39:78:ff:c4:dc:5d:a4:19:fc:36:c3: 58:e0:bf:5c:ec:10:be:06:9c:a2:44:c1:b8:a8:6e: 50:00:e2:6e:6d:5a:0f:b0:24:f4:1b:ef:04:a6:5e: 3d:72:25:1f:1e:80:8c:5b:ec:e7:c3:7d:2d:f2:14: 43:69:50:1f:91:6d:38:b9:30:ea:1e:61:e1:14:f4: 20:d8:b0:72:11:0b:35:d8:74:91:d4:d3:b6:0c:62: 6e:7c:37:c1:59:be:c1:ee:25:24:53:14:d2:f8:cd: 2c:2a:9d:57:77:7b:76:ae:e1:ad:85:49:39:d1:d1: 4f:5d:57:cc:f5:5e:f7:46:c7:04:57:d0:78:fc:51: 91:04:e0:c3:e3:38:99:b1:33:f7:46:ad:56:10:23: 4c:93:3a:34:a6:d8:cd:ce:54:c1:94:cf:e0:fd:c2: 55:df:05:06:56:0a:aa:a2:87:84:f6:ae:9f:e4:6a: 94:fd:89:aa:62:f2:44:32:70:49:e2:5b:06:85:cc: 7d:bd:d4:13:fa:6e:02:14:0a:05:ff:29:b9:c3:5a: 8f:d2:fd:53:0c:7f:dd:ab:f8:3b:e0:90:59:f2:5a: 88:d2:e0:00:77:ad:1e:35:e9:6b:b7:28:f7:d3:5b: 23:40:35:c0:ee:57:3d:eb:5c:d6:e4:b7:9d:fc:9e: 53:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C6:FA:EC:C4:14:1A:F0:F5:0D:DC:99:07:DD:97:9E:8B:0B:F3:49 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:15:af:ef:5e:29:fe:bb:53:60:0e:09:cb:a7:33:f3:2c:8b: 12:4b:35:19:22:c4:20:e3:33:28:5a:f2:ec:a2:6e:74:c2:bf: 57:71:ff:bc:f2:62:06:e4:1d:f1:2f:23:6f:47:fd:79:5f:44: 1f:7b:7e:16:b5:bf:cd:7b:53:25:e7:6a:24:ec:fd:bd:fe:8e: f0:0b:be:ef:df:06:9b:f8:e5:33:83:c8:80:1c:a6:97:b3:6d: dc:b7:9b:26:ed:3a:ab:7a:4a:59:a1:14:e1:2e:1f:b7:a2:1c: dc:e2:ed:9f:9b:d1:11:d3:4e:d6:28:42:7b:9c:e6:9b:f0:eb: 17:62:a6:fc:50:11:1f:91:9c:fb:fb:b8:59:75:94:89:89:ab: 32:5f:d2:fb:9b:39:c6:1a:65:a5:d9:9c:c6:57:3b:32:b7:73: c6:95:31:e4:be:d3:4b:5b:60:43:af:66:7a:bc:69:25:45:a8: a6:7e:b4:84:45:27:28:70:c6:5e:19:22:41:07:44:94:2e:b3: f3:af:74:58:53:02:11:87:c0:1d:7a:c3:94:b0:4b:05:83:ce: d2:ad:89:65:ff:86:7d:9c:98:79:f4:45:98:e9:49:b0:6c:11: d4:0f:8a:fd:61:3a:9c:a8:2d:7a:b0:ad:0e:f4:1b:65:46:b3: 54:13:53:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUwNTMxMDU0ODI5WhcNMjUwNjA3MDU0ODI5WjAYMRYwFAYD VQQDEw02ODNhOTgyZS1mYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uk5OXj/xNxdpBn8NsNY4L9c7BC+BpyiRMG4qG5QAOJubVoPsCT0G+8Epl49 ciUfHoCMW+znw30t8hRDaVAfkW04uTDqHmHhFPQg2LByEQs12HSR1NO2DGJufDfB Wb7B7iUkUxTS+M0sKp1Xd3t2ruGthUk50dFPXVfM9V73RscEV9B4/FGRBODD4ziZ sTP3Rq1WECNMkzo0ptjNzlTBlM/g/cJV3wUGVgqqooeE9q6f5GqU/YmqYvJEMnBJ 4lsGhcx9vdQT+m4CFAoF/ym5w1qP0v1TDH/dq/g74JBZ8lqI0uAAd60eNelrtyj3 01sjQDXA7lc961zW5Led/J5THwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzG+uzE FBrw9Q3cmQfdl56LC/NJMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Fa/vXin+u1NgDgnLpzPzLIsSSzUZIsQg4zMoWvLsom50wr9Xcf+8 8mIG5B3xLyNvR/15X0Qfe34Wtb/Ne1Ml52ok7P29/o7wC77v3wab+OUzg8iAHKaX s23ct5sm7TqrekpZoRThLh+3ohzc4u2fm9ER007WKEJ7nOab8OsXYqb8UBEfkZz7 +7hZdZSJiasyX9L7mznGGmWl2ZzGVzsyt3PGlTHkvtNLW2BDr2Z6vGklRaimfrSE RScocMZeGSJBB0SULrPzr3RYUwIRh8AdesOUsEsFg87SrYll/4Z9nJh59EWY6Umw bBHUD4r9YTqcqC16sK0O9BtlRrNUE1M4 -----END CERTIFICATE-----Generated at Sat May 31 16:44:55 2025 by rpki-client