$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft File: FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft (raw, json) Hash identifier: BcZ7QVS60op+L/eROG/7NnOhJFxJKsav/suLS/WErMk= Subject key identifier: 79:A9:8B:BB:3D:0F:ED:A1:48:AD:BE:E6:5E:09:6B:73:18:DE:E9:A2 Authority key identifier: 14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A Certificate issuer: /CN=A91DEC3C/serialNumber=147A0E048711B62506B09F088A05992A3A31020A Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft Manifest number: 01A0 Signing time: Sat 31 May 2025 03:01:35 +0000 Manifest this update: Sat 31 May 2025 03:01:35 +0000 Manifest next update: Sat 07 Jun 2025 03:01:35 +0000 Files and hashes: 1: FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl (hash: YNt0UVEGmiK+LsH0pstPWI6oRIdZYtN0TzhmtMlV7dE=) 2: 5153E9DAC0B911ED99A12312C4F9AE02.roa (hash: pRhFi90u5iaLYPX6g3PP+55Ior11n+chfHkyJHcRUKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC3C, serialNumber=147A0E048711B62506B09F088A05992A3A31020A Validity Not Before: May 31 03:01:35 2025 GMT Not After : Jun 7 03:01:35 2025 GMT Subject: CN=683a710f-ab15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:74:4b:b4:a0:b2:a0:f7:33:c0:2a:cf:8e: c0:8d:c9:a9:65:0b:61:f3:a5:74:07:3d:55:73:74: a9:2f:36:c4:fe:31:fd:15:4e:d7:4b:9c:29:ca:16: 0b:ab:7a:35:c0:2b:88:d2:5b:85:9a:a9:9a:9b:72: 49:20:7b:b3:5e:b1:07:eb:71:1e:bc:6a:7c:5e:18: 2a:42:7b:28:28:67:22:3d:3d:6e:19:fa:2f:1a:7e: 9d:a7:30:2a:41:b7:67:f2:9c:f3:32:7f:c8:bb:bb: 6c:99:e9:69:7d:4e:39:bb:72:27:54:6b:7f:a6:40: 11:5e:1e:ad:a1:6d:79:df:38:42:a2:f8:f9:cb:6c: 9b:66:fb:e6:b0:be:df:b2:3b:3d:a6:ff:1a:6a:d8: f1:94:a5:f6:40:13:86:db:76:39:0e:56:03:8b:f0: 6e:36:fa:5a:12:54:de:a8:89:9c:a1:47:ed:44:a8: cf:dd:3b:02:0a:cf:b7:b1:33:8a:bc:aa:cd:eb:9d: c9:48:f0:ad:16:eb:37:68:7d:23:5b:9c:22:69:ca: c1:03:5f:fa:18:32:27:90:9e:14:0a:ce:0c:fb:b2: 99:7b:9a:63:f2:53:95:ea:b3:c0:95:bc:6e:ee:5e: 75:0f:92:b9:48:df:2f:32:c6:61:ad:40:69:cc:a6: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:8B:BB:3D:0F:ED:A1:48:AD:BE:E6:5E:09:6B:73:18:DE:E9:A2 X509v3 Authority Key Identifier: keyid:14:7A:0E:04:87:11:B6:25:06:B0:9F:08:8A:05:99:2A:3A:31:02:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FHoOBIcRtiUGsJ8IigWZKjoxAgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC3C/F6308094C0B411EDA77F700EC4F9AE02/FHoOBIcRtiUGsJ8IigWZKjoxAgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:37:dd:cf:85:af:8b:4c:9a:ed:4f:af:49:ef:f9:27:a4:9f: c0:8b:d3:b0:fc:e0:ed:b9:b8:d6:7e:19:6b:a0:c0:01:06:d6: f3:e8:4b:59:bf:22:77:50:a7:88:d9:94:86:c7:c9:9a:22:24: 8b:98:c5:63:cc:9f:e7:d5:dd:32:c7:7f:3e:82:b3:13:98:cb: fe:1d:6d:79:55:c0:18:a1:1b:66:8f:a4:03:e7:06:1b:45:9b: 2c:23:0f:dc:66:03:e9:da:be:99:30:e2:83:43:f4:f0:1b:e3: f8:fa:aa:8a:6d:5b:18:1c:fb:31:a3:e6:7f:c9:b9:3b:e2:03: be:47:1c:d6:1f:04:8a:48:ea:64:ad:93:6a:45:e4:91:6f:a3: 05:e6:56:34:4c:64:d2:14:1c:58:3d:c1:3c:45:93:41:a2:ef: 04:29:80:99:fb:c7:d5:e7:75:2b:47:79:bc:9f:7d:03:c9:f9: a3:b9:66:d6:7a:4a:97:04:a2:46:62:a0:4d:6f:06:e4:d0:1c: dc:da:c9:62:20:26:a7:1c:bd:1b:09:26:8e:a6:5c:f0:b5:08: 2e:f9:42:3b:b7:23:59:ad:ea:4b:a9:ab:17:79:92:a5:38:35: 3d:76:bd:66:40:5e:f8:25:b0:cb:31:6f:44:ff:a6:6d:49:08: 2f:2a:be:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDM0MxMTAvBgNVBAUTKDE0N0EwRTA0ODcxMUI2MjUwNkIwOUYwODhBMDU5OTJB M0EzMTAyMEEwHhcNMjUwNTMxMDMwMTM1WhcNMjUwNjA3MDMwMTM1WjAYMRYwFAYD VQQDEw02ODNhNzEwZi1hYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jN0S7SgsqD3M8Aqz47AjcmpZQth86V0Bz1Vc3SpLzbE/jH9FU7XS5wpyhYL q3o1wCuI0luFmqmam3JJIHuzXrEH63EevGp8XhgqQnsoKGciPT1uGfovGn6dpzAq Qbdn8pzzMn/Iu7tsmelpfU45u3InVGt/pkARXh6toW153zhCovj5y2ybZvvmsL7f sjs9pv8aatjxlKX2QBOG23Y5DlYDi/BuNvpaElTeqImcoUftRKjP3TsCCs+3sTOK vKrN653JSPCtFus3aH0jW5wiacrBA1/6GDInkJ4UCs4M+7KZe5pj8lOV6rPAlbxu 7l51D5K5SN8vMsZhrUBpzKbafwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmpi7s9 D+2hSK2+5l4Ja3MY3umiMB8GA1UdIwQYMBaAFBR6DgSHEbYlBrCfCIoFmSo6MQIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMzQy9GNjMwODA5NEMw QjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRpVUdzSjhJaWdXWktqb3hB Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZIb09CSWNSdGlVR3NKOElpZ1daS2pveEFnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMzQy9GNjMwODA5NEMwQjQxMUVEQTc3RjcwMEVDNEY5QUUwMi9GSG9PQkljUnRp VUdzSjhJaWdXWktqb3hBZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLN93Pha+LTJrtT69J7/knpJ/Ai9Ow/ODtubjWfhlroMABBtbz6EtZ vyJ3UKeI2ZSGx8maIiSLmMVjzJ/n1d0yx38+grMTmMv+HW15VcAYoRtmj6QD5wYb RZssIw/cZgPp2r6ZMOKDQ/TwG+P4+qqKbVsYHPsxo+Z/ybk74gO+RxzWHwSKSOpk rZNqReSRb6MF5lY0TGTSFBxYPcE8RZNBou8EKYCZ+8fV53UrR3m8n30DyfmjuWbW ekqXBKJGYqBNbwbk0Bzc2sliICanHL0bCSaOplzwtQgu+UI7tyNZrepLqasXeZKl ODU9dr1mQF74JbDLMW9E/6ZtSQgvKr7m -----END CERTIFICATE-----Generated at Sat May 31 16:34:00 2025 by rpki-client