$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: w51C9D5gC2Ah7inw3YCP4D6P2WIRV4ex/Mw/5Kcy0QM= Subject key identifier: CB:97:85:3D:F5:70:53:09:33:0F:4B:01:86:56:38:99:B4:02:BA:43 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 09BB Signing time: Fri 30 May 2025 20:11:19 +0000 Manifest this update: Fri 30 May 2025 20:11:19 +0000 Manifest next update: Fri 06 Jun 2025 20:11:19 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: xe7qG2pyYxnS6ANUMFKCWphTnh6PfR/8h1WkG9MHxAs=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: May 30 20:11:19 2025 GMT Not After : Jun 6 20:11:19 2025 GMT Subject: CN=683a10e7-345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:06:13:ea:e1:8a:3a:83:b5:8a:39:6e:7b: 5d:18:da:96:36:42:f9:f8:3e:fd:2c:6a:f3:b0:0a: 32:dd:54:ef:46:29:7f:69:b4:fa:69:bf:b3:c3:10: 4f:1b:fe:04:f6:5c:1a:a4:b6:71:2a:e2:ec:ee:1b: 31:32:2b:1c:77:37:d3:93:22:7c:55:c5:e6:24:02: 21:c1:03:8d:a0:ab:12:fa:b1:5f:49:de:b0:ab:93: d3:f2:7b:32:bc:12:f9:09:b4:f3:88:2f:0b:70:cd: 52:3b:4b:ee:b6:27:63:28:7b:52:98:a0:a3:b4:22: 51:79:52:46:77:e1:34:4b:e2:ed:fe:64:65:dd:55: 42:c5:90:ff:22:eb:38:63:69:f4:a0:88:d2:77:c1: 28:75:2b:40:1e:49:19:99:12:d5:99:8c:6c:46:bc: 98:2b:73:ae:0f:3a:63:cf:65:a0:70:42:82:fa:10: 3e:cb:df:ae:b2:aa:30:2f:fe:1b:27:57:ad:84:8d: a8:42:c9:85:7c:7f:fc:d2:d9:21:84:9f:04:d2:dd: 91:da:09:15:4d:73:a9:6e:a0:d7:0d:9d:f5:17:f6: 21:22:fc:2e:ff:b8:71:a4:08:04:d6:d1:a6:98:f4: f6:98:f1:15:b2:c6:d0:98:91:8c:e1:34:fa:0c:cd: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:97:85:3D:F5:70:53:09:33:0F:4B:01:86:56:38:99:B4:02:BA:43 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b8:f5:e9:e8:5b:02:84:8f:b5:ca:8b:ab:c7:7a:e3:78:79: 06:8e:46:1e:83:5e:99:d6:a1:c8:9e:52:3b:50:14:10:55:65: 72:0f:73:0b:75:24:a4:cd:fb:ba:95:a8:4d:cd:bb:a7:30:c2: 4c:15:dc:a4:ac:0a:54:2c:11:e9:a5:9e:78:53:e4:dc:59:b1: 7e:33:be:f6:2c:19:52:fa:48:b8:c2:9f:f5:51:76:fc:57:1c: 57:d3:27:56:25:a7:ee:8a:c3:a9:5f:65:49:19:61:63:83:3c: 07:f4:d3:c1:f0:d1:93:d1:89:08:0a:e8:12:b4:36:6a:d8:73: 54:ed:73:f4:61:02:df:95:92:ea:1f:21:63:59:a8:83:01:dd: 16:b3:13:bd:63:a6:17:99:29:df:59:e1:00:18:c4:44:92:ed: 25:61:48:6f:6c:67:67:78:a7:0c:84:3a:59:1b:1a:45:ce:3c: 45:41:03:ea:a6:bb:6b:48:59:02:21:09:b3:ec:a1:81:96:a9: a4:9e:6b:ee:56:26:60:c9:57:05:a7:33:31:c8:7b:86:0f:b3: da:81:8a:b9:1b:77:b5:3a:89:a3:35:b0:9c:7b:0e:02:e2:13: f3:eb:57:54:f8:c7:d1:4f:fa:24:30:3b:09:72:b9:c6:a2:8a: 04:ec:7c:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUwNTMwMjAxMTE5WhcNMjUwNjA2MjAxMTE5WjAYMRYwFAYD VQQDEw02ODNhMTBlNy0zNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXQGE+rhijqDtYo5bntdGNqWNkL5+D79LGrzsAoy3VTvRil/abT6ab+zwxBP G/4E9lwapLZxKuLs7hsxMiscdzfTkyJ8VcXmJAIhwQONoKsS+rFfSd6wq5PT8nsy vBL5CbTziC8LcM1SO0vutidjKHtSmKCjtCJReVJGd+E0S+Lt/mRl3VVCxZD/Ius4 Y2n0oIjSd8EodStAHkkZmRLVmYxsRryYK3OuDzpjz2WgcEKC+hA+y9+usqowL/4b J1ethI2oQsmFfH/80tkhhJ8E0t2R2gkVTXOpbqDXDZ31F/YhIvwu/7hxpAgE1tGm mPT2mPEVssbQmJGM4TT6DM1ScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuXhT31 cFMJMw9LAYZWOJm0ArpDMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEuPXp6FsChI+1yourx3rjeHkGjkYeg16Z1qHInlI7UBQQVWVyD3ML dSSkzfu6lahNzbunMMJMFdykrApULBHppZ54U+TcWbF+M772LBlS+ki4wp/1UXb8 VxxX0ydWJafuisOpX2VJGWFjgzwH9NPB8NGT0YkICugStDZq2HNU7XP0YQLflZLq HyFjWaiDAd0WsxO9Y6YXmSnfWeEAGMREku0lYUhvbGdneKcMhDpZGxpFzjxFQQPq prtrSFkCIQmz7KGBlqmknmvuViZgyVcFpzMxyHuGD7PagYq5G3e1OomjNbCcew4C 4hPz61dU+MfRT/okMDsJcrnGoooE7Hz/ -----END CERTIFICATE-----Generated at Sat May 31 17:14:37 2025 by rpki-client