$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: OnGmvvsd2iLFSaDYVwXwui9fD0jipahftnveC/H+H9k= Subject key identifier: 4B:2A:5E:66:CB:41:E5:1B:36:99:AB:D4:56:C4:8C:51:EC:55:7A:BD Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0427 Signing time: Sat 31 May 2025 00:43:11 +0000 Manifest this update: Sat 31 May 2025 00:43:11 +0000 Manifest next update: Sat 07 Jun 2025 00:43:11 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: UyqA96JjuyWsHdp/6ffVnDFP+k/qyfCOEWgRR4HQLkA=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: May 31 00:43:11 2025 GMT Not After : Jun 7 00:43:11 2025 GMT Subject: CN=683a509f-9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:38:f0:1e:da:a7:bd:79:b5:cc:72:07:26: 32:d3:59:4e:80:b4:b3:8b:fd:e8:c6:63:71:a0:2d: 9d:e8:2d:6f:a4:d0:ad:07:6b:c8:ca:95:98:76:0e: ea:6e:02:57:22:34:15:65:14:07:ae:aa:80:24:aa: 89:5a:37:25:02:74:85:cc:88:85:7c:5c:72:fa:c3: 0d:ce:56:70:1b:ef:7d:8e:38:1f:92:46:a0:a6:24: 05:85:52:e1:5d:3b:f0:7f:49:a7:e1:25:fe:de:f6: de:78:76:89:25:d6:d8:88:98:20:5f:73:89:3e:c5: 70:f5:f3:8f:95:12:16:69:aa:c1:11:58:5b:08:1a: ae:56:e9:66:2d:03:3e:b7:bf:96:55:ad:dc:98:d0: 5d:ce:a7:50:cd:79:c7:e0:c4:41:2b:b2:c7:67:88: 82:4b:96:0e:25:34:a3:9f:74:89:51:49:10:54:b2: 14:00:33:aa:73:51:d2:3c:84:f3:e8:f5:00:fd:be: ef:e6:a3:e5:41:c9:2b:93:39:25:f3:71:2b:ad:32: 3b:85:f9:f3:29:99:8e:48:8a:59:de:96:7f:d5:0e: c1:f3:91:9b:15:f8:63:be:9a:83:86:2f:14:2a:1d: 8e:e4:d0:5e:cc:a9:56:95:0c:26:33:4b:9e:5e:db: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:5E:66:CB:41:E5:1B:36:99:AB:D4:56:C4:8C:51:EC:55:7A:BD X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:cd:f0:2a:0a:a7:f7:31:4f:42:f1:e1:0b:ad:32:f3:7e:4c: da:26:e1:30:dc:fd:dd:c4:10:b8:2d:ad:2e:b8:1a:b4:45:84: 5a:89:eb:1b:ed:78:08:c0:e6:d4:9a:34:9b:90:71:76:2d:d2: d7:c5:a3:40:60:9c:68:64:d2:9a:7c:53:74:df:0a:1a:a9:f6: 2c:29:dc:89:d7:f4:59:9b:7f:36:93:a7:4a:26:52:dc:f4:07: cd:14:fd:7c:c9:28:aa:cc:46:0a:16:81:de:87:e3:c5:d3:a9: b1:40:1c:75:f3:74:65:2b:ce:15:97:76:37:e7:ca:0f:13:4d: a8:ab:63:4c:7f:d3:7d:6a:9e:9f:af:af:96:9b:45:4a:c6:47: 0b:99:bd:5f:ce:1b:4d:97:fc:fc:31:4e:5c:10:5d:9d:0b:aa: 7a:70:69:24:3d:5d:5f:50:5d:34:ce:fd:9b:45:f4:d0:be:3c: 11:98:d8:e9:c5:da:4e:8c:32:f2:44:4f:a1:b5:0d:5a:da:ff: af:ca:cd:8b:22:6a:87:47:63:3c:3a:94:6b:f2:20:11:6e:50: 5a:fc:dd:15:dc:dd:7b:06:dd:56:c3:36:df:5c:77:0c:b3:ab: 40:bc:9d:af:ef:76:ce:b1:49:c1:6f:89:89:e1:90:10:32:f1: cd:0f:0a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUwNTMxMDA0MzExWhcNMjUwNjA3MDA0MzExWjAYMRYwFAYD VQQDEw02ODNhNTA5Zi05YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKQ48B7ap715tcxyByYy01lOgLSzi/3oxmNxoC2d6C1vpNCtB2vIypWYdg7q bgJXIjQVZRQHrqqAJKqJWjclAnSFzIiFfFxy+sMNzlZwG+99jjgfkkagpiQFhVLh XTvwf0mn4SX+3vbeeHaJJdbYiJggX3OJPsVw9fOPlRIWaarBEVhbCBquVulmLQM+ t7+WVa3cmNBdzqdQzXnH4MRBK7LHZ4iCS5YOJTSjn3SJUUkQVLIUADOqc1HSPITz 6PUA/b7v5qPlQckrkzkl83ErrTI7hfnzKZmOSIpZ3pZ/1Q7B85GbFfhjvpqDhi8U Kh2O5NBezKlWlQwmM0ueXtvuuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsqXmbL QeUbNpmr1FbEjFHsVXq9MB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIzfAqCqf3MU9C8eELrTLzfkzaJuEw3P3dxBC4La0uuBq0RYRaiesb 7XgIwObUmjSbkHF2LdLXxaNAYJxoZNKafFN03woaqfYsKdyJ1/RZm382k6dKJlLc 9AfNFP18ySiqzEYKFoHeh+PF06mxQBx183RlK84Vl3Y358oPE02oq2NMf9N9ap6f r6+Wm0VKxkcLmb1fzhtNl/z8MU5cEF2dC6p6cGkkPV1fUF00zv2bRfTQvjwRmNjp xdpOjDLyRE+htQ1a2v+vys2LImqHR2M8OpRr8iARblBa/N0V3N17Bt1WwzbfXHcM s6tAvJ2v73bOsUnBb4mJ4ZAQMvHNDwqQ -----END CERTIFICATE-----Generated at Sat May 31 16:42:04 2025 by rpki-client