$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: T3iApNq94c4ARL0C6rKuAg7Wx193YdPhOfaGdtgh3BA= Subject key identifier: 66:0D:56:5B:AE:12:E1:8C:8D:2F:BD:81:A6:7D:98:FB:F2:D6:67:8D Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 2E Signing time: Sat 31 May 2025 07:14:33 +0000 Manifest this update: Sat 31 May 2025 07:14:32 +0000 Manifest next update: Sat 07 Jun 2025 07:14:32 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: ZXDONEUmipxx3WIduj66bZ9X3FgrPf3zf2m3uQrHGdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: May 31 07:14:32 2025 GMT Not After : Jun 7 07:14:32 2025 GMT Subject: CN=683aac58-4c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:46:4a:af:91:82:b8:22:4e:ba:b8:89:0f: 5f:0d:09:92:9e:6f:ee:b2:b1:3e:ce:7b:bf:08:4b: 5e:56:cf:35:9a:95:37:4a:fc:86:78:81:94:22:74: 56:73:4e:f8:d3:2b:77:ea:1d:b7:32:27:f8:4e:fe: 30:72:13:27:35:43:c2:25:8e:c3:c6:d9:52:c9:b7: 0f:4b:e8:cc:98:e1:89:74:c9:d8:ff:7a:06:e8:3d: 04:cb:78:37:32:6c:e8:42:02:00:98:01:95:5c:35: 98:27:17:58:d7:e4:4d:b5:45:f9:59:b4:7e:12:45: 22:54:49:59:d4:f6:54:2a:f4:26:b4:f7:28:1d:b5: 59:2d:2a:e6:1a:ba:32:d6:3f:08:e9:a7:cc:0e:1d: cc:82:90:0a:7c:95:ff:e4:f6:1f:18:6c:e7:90:d4: eb:f4:f5:38:3a:16:a0:c5:ce:73:50:b3:5e:c1:e0: f2:b1:21:06:d1:b5:d8:f0:41:c7:80:f7:41:7a:8d: 4d:a4:a9:ce:e6:9f:31:e4:95:76:f3:d3:89:fb:e6: 7d:b2:5f:c8:36:01:21:ef:12:2c:1a:01:61:b2:d5: c9:97:ac:95:fc:a7:6f:5f:5a:10:90:b9:45:ca:ad: f2:be:c9:69:c6:1b:9b:49:70:7d:f2:41:7f:0a:a5: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0D:56:5B:AE:12:E1:8C:8D:2F:BD:81:A6:7D:98:FB:F2:D6:67:8D X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:8d:84:ac:45:21:95:3c:e6:79:93:33:77:62:86:f6:03: d6:0a:48:0c:4a:28:47:50:e0:f6:0e:c7:11:14:60:fb:04:89: 9f:9c:c4:40:cc:e0:9a:a3:e1:b9:d3:4b:d7:49:b5:fa:40:e9: 56:61:59:f1:24:a2:2d:91:d1:02:65:67:14:d1:0b:23:48:cf: e1:34:86:db:db:b3:73:fa:4c:ab:d6:a6:d4:38:5a:48:48:62: 34:08:47:b2:b2:7c:ce:f8:f1:09:31:ee:a0:01:8e:d0:5d:6b: c4:c4:06:95:f0:92:e3:c4:3c:33:ff:1a:66:91:cb:8b:88:b5: 06:d0:42:fb:e7:7d:f5:cf:89:89:94:80:09:c9:e6:e5:bc:75: 47:21:d1:b0:ba:12:f9:5f:a3:97:b3:61:21:b3:a0:71:54:f2: fc:a5:27:0c:95:76:86:12:81:cb:90:07:55:f4:64:fa:2b:bd: 23:3a:cf:19:c1:af:4e:c0:d0:1b:68:ee:a4:94:98:d5:17:da: ca:ee:7e:e2:1a:ab:1c:cd:28:af:73:cc:b3:f4:cd:b9:ef:87: dd:34:ba:b3:66:cc:00:83:ba:73:9c:9f:f1:44:e7:6f:b1:6a: fb:ea:28:e0:98:91:95:ae:d9:90:77:25:71:dd:35:be:5c:e1: ac:d5:e3:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEI4NjExMC8GA1UEBRMoMTRENUFEMjcyMkFDQTg2QUQzNEYwRjlBMzQ0NzI2Q0I2 Njk4MDgzMTAeFw0yNTA1MzEwNzE0MzJaFw0yNTA2MDcwNzE0MzJaMBgxFjAUBgNV BAMTDTY4M2FhYzU4LTRjNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfIUZKr5GCuCJOuriJD18NCZKeb+6ysT7Oe78IS15WzzWalTdK/IZ4gZQidFZz TvjTK3fqHbcyJ/hO/jByEyc1Q8IljsPG2VLJtw9L6MyY4Yl0ydj/egboPQTLeDcy bOhCAgCYAZVcNZgnF1jX5E21RflZtH4SRSJUSVnU9lQq9Ca09ygdtVktKuYaujLW Pwjpp8wOHcyCkAp8lf/k9h8YbOeQ1Ov09Tg6FqDFznNQs17B4PKxIQbRtdjwQceA 90F6jU2kqc7mnzHklXbz04n75n2yX8g2ASHvEiwaAWGy1cmXrJX8p29fWhCQuUXK rfK+yWnGG5tJcH3yQX8KpTadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZg1WW64S 4YyNL72Bpn2Y+/LWZ40wHwYDVR0jBBgwFoAUFNWtJyKsqGrTTw+aNEcmy2aYCDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2LzkzMDZBMkM0RjdF MzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNE RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk5XdEp5S3NxR3JUVHctYU5FY215MmFZQ0RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 Qjg2LzkzMDZBMkM0RjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL0ZOV3RKeUtzcUdy VFR3LWFORWNteTJhWUNERS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXyjYSsRSGVPOZ5kzN3Yob2A9YKSAxKKEdQ4PYOxxEUYPsEiZ+cxEDM 4Jqj4bnTS9dJtfpA6VZhWfEkoi2R0QJlZxTRCyNIz+E0htvbs3P6TKvWptQ4WkhI YjQIR7KyfM748Qkx7qABjtBda8TEBpXwkuPEPDP/GmaRy4uItQbQQvvnffXPiYmU gAnJ5uW8dUch0bC6Evlfo5ezYSGzoHFU8vylJwyVdoYSgcuQB1X0ZPorvSM6zxnB r07A0Bto7qSUmNUX2srufuIaqxzNKK9zzLP0zbnvh900urNmzACDunOcn/FE52+x avvqKOCYkZWu2ZB3JXHdNb5c4azV43Q= -----END CERTIFICATE-----Generated at Sat May 31 17:30:22 2025 by rpki-client