$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: OFtxqbKI0hVtJ+/FC08BlcY4xwTRJKhH+eSGYAYQTEY= Subject key identifier: CA:96:29:18:5C:D1:3F:33:BD:A6:2B:1E:45:DC:FF:A1:2C:B1:24:8F Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 0284 Signing time: Sat 31 May 2025 01:48:51 +0000 Manifest this update: Sat 31 May 2025 01:48:50 +0000 Manifest next update: Sat 07 Jun 2025 01:48:50 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: tir/1BoEO6aYplLZBIcrZE9IeQP3SsZtcoMdC6ipPu4=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: May 31 01:48:50 2025 GMT Not After : Jun 7 01:48:50 2025 GMT Subject: CN=683a6003-52b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:2c:71:38:59:95:db:5d:28:d0:4d:60:9d: 93:25:df:77:32:45:ad:07:c2:0a:16:26:ae:04:cf: 81:54:b0:8b:08:24:3a:a1:62:5c:b0:1b:0a:5a:96: 40:b3:35:97:e8:e8:fd:f8:68:fd:2d:90:94:4b:98: f3:f8:1f:01:7a:7c:bf:51:6e:06:c1:3e:65:72:0a: 29:a8:0e:a8:40:fb:3d:fc:a8:e9:0b:4f:d4:4f:57: c5:64:df:2e:6c:c5:ee:8c:ab:f7:83:94:fc:f3:24: e5:6a:0a:39:56:cb:32:6e:86:02:cf:d0:6b:53:82: c1:d0:32:c4:a5:3c:c5:bf:de:b0:28:ce:cc:b6:d4: c5:2d:dd:48:08:25:10:44:e0:de:32:34:30:2c:bd: 4a:94:46:61:53:70:3f:2a:33:22:c3:03:58:85:08: 3d:58:30:71:0c:ce:de:76:0a:15:74:bc:53:78:bb: f6:f5:00:e8:cb:a9:fe:8c:9b:2a:98:4a:bb:12:a5: 94:cf:aa:d1:3f:d7:11:43:f2:b7:e7:85:14:d1:2a: eb:2f:3c:4d:f7:64:a1:f6:16:b9:e4:e5:0a:1a:42: ec:59:74:ef:be:39:e8:0b:4c:3d:3d:dc:32:78:b0: 26:18:c1:15:86:3b:65:8e:fc:0d:cb:d2:af:d3:d1: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:96:29:18:5C:D1:3F:33:BD:A6:2B:1E:45:DC:FF:A1:2C:B1:24:8F X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3f:d7:cb:bb:2b:66:14:e4:24:f1:84:9a:1d:05:60:91:5d: da:30:50:fc:a1:82:97:2b:70:f0:24:4e:ab:8d:96:07:f2:d6: dc:43:7c:e1:f3:96:d1:e6:ed:8b:18:28:27:f9:e8:30:15:4f: 62:77:ec:9b:89:46:70:a8:a5:58:3b:e2:e2:1d:9f:12:57:c9: b4:78:9f:15:19:a5:68:e5:9b:9e:48:5c:c4:e0:a7:e0:88:35: 93:d6:d7:9f:8c:4c:09:52:20:6d:b0:b6:74:2b:1b:63:02:17: 08:07:47:bd:c7:a4:78:db:63:84:ab:46:a1:3c:dc:65:da:69: 3a:2b:af:be:b8:3b:25:2a:e3:cb:68:52:be:02:4f:73:7c:88: 78:03:74:79:1d:35:41:c0:4c:e6:b6:1d:ba:b2:12:e5:36:85: 7c:28:bb:fb:97:0c:9a:d9:93:11:b6:e0:77:6a:29:e1:de:95: c1:23:a0:80:3c:26:7d:0d:19:51:5f:7b:bf:8c:30:2f:76:92: 96:e4:22:63:e3:fe:5e:18:84:60:74:9d:41:65:aa:05:f9:59: 8b:60:d0:05:9d:d1:f9:ef:c2:51:fc:1a:68:b7:fc:99:01:a0: a5:d2:46:ce:00:ac:d6:7d:cd:84:c4:b6:05:ba:df:c3:a2:ad: 18:2f:77:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUwNTMxMDE0ODUwWhcNMjUwNjA3MDE0ODUwWjAYMRYwFAYD VQQDEw02ODNhNjAwMy01MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXwscThZldtdKNBNYJ2TJd93MkWtB8IKFiauBM+BVLCLCCQ6oWJcsBsKWpZA szWX6Oj9+Gj9LZCUS5jz+B8Beny/UW4GwT5lcgopqA6oQPs9/KjpC0/UT1fFZN8u bMXujKv3g5T88yTlago5VssyboYCz9BrU4LB0DLEpTzFv96wKM7MttTFLd1ICCUQ RODeMjQwLL1KlEZhU3A/KjMiwwNYhQg9WDBxDM7edgoVdLxTeLv29QDoy6n+jJsq mEq7EqWUz6rRP9cRQ/K354UU0SrrLzxN92Sh9ha55OUKGkLsWXTvvjnoC0w9Pdwy eLAmGMEVhjtljvwNy9Kv09G/KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqWKRhc 0T8zvaYrHkXc/6EssSSPMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmP9fLuytmFOQk8YSaHQVgkV3aMFD8oYKXK3DwJE6rjZYH8tbcQ3zh 85bR5u2LGCgn+egwFU9id+ybiUZwqKVYO+LiHZ8SV8m0eJ8VGaVo5ZueSFzE4Kfg iDWT1tefjEwJUiBtsLZ0KxtjAhcIB0e9x6R422OEq0ahPNxl2mk6K6++uDslKuPL aFK+Ak9zfIh4A3R5HTVBwEzmth26shLlNoV8KLv7lwya2ZMRtuB3ainh3pXBI6CA PCZ9DRlRX3u/jDAvdpKW5CJj4/5eGIRgdJ1BZaoF+VmLYNAFndH578JR/Bpot/yZ AaCl0kbOAKzWfc2ExLYFut/Doq0YL3c6 -----END CERTIFICATE-----Generated at Sat May 31 16:42:08 2025 by rpki-client