$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: UUE4aEREvCiC0EMfoQHuq9QyoaZePKtjb0Du/LOP/9k= Subject key identifier: 3E:8D:DD:86:22:50:FB:47:0F:A4:BF:E6:8E:E7:4B:67:95:6B:61:D0 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 24 Signing time: Sun 01 Jun 2025 07:34:16 +0000 Manifest this update: Sun 01 Jun 2025 07:34:15 +0000 Manifest next update: Sun 08 Jun 2025 07:34:15 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: hMaU+Hl6RI3jGWCG/3TSXz/AD7cJBv7Q3mjtOO39VqI=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: 1E9Uj0G9r4nxcyscWv579FgIwgT3cljTL2z6/KS3cW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Jun 1 07:34:15 2025 GMT Not After : Jun 8 07:34:15 2025 GMT Subject: CN=683c0278-da9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:05:16:0b:ae:dc:64:e1:06:4b:cc:a2:0c: 29:b0:af:c7:10:2d:ff:f5:f1:a9:fb:60:a7:1a:e2: 52:96:2d:bc:54:a7:ff:8a:8f:e8:64:4d:2a:d9:c9: f7:58:16:35:40:3b:8c:3d:67:8a:49:ea:9f:a0:67: 11:35:94:fc:08:bc:9a:16:77:12:cf:0d:82:bf:e5: 57:04:3b:80:1c:ee:2e:63:34:0e:23:c3:2e:3c:dc: 30:70:a1:6b:73:b5:3a:c0:00:04:92:2d:b9:f7:69: 4a:60:fc:0e:e3:e2:3b:32:12:a5:ea:af:51:46:48: bb:58:9b:54:c8:f2:3b:dc:0e:0a:4e:c6:34:44:f0: 45:82:51:ee:e4:f1:cd:09:3c:6e:a6:0e:cd:80:ae: 8f:87:e9:c9:95:22:54:7d:f5:52:77:b2:4e:64:be: e4:9f:be:49:c1:ac:4c:4a:86:38:ae:58:fe:90:cf: 89:59:c1:fa:e4:48:bc:c7:78:81:5c:57:42:30:e8: 22:c6:98:61:41:51:53:9f:72:d0:b6:92:64:84:dc: 43:1e:b2:ab:bb:62:db:fc:51:12:a1:89:2e:c8:25: 14:27:5f:00:98:eb:c9:44:6d:56:99:48:4b:5d:3e: 53:13:d5:57:9b:93:e9:2b:db:99:fe:1c:8e:5d:f5: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:DD:86:22:50:FB:47:0F:A4:BF:E6:8E:E7:4B:67:95:6B:61:D0 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:15:35:9d:62:c4:6a:75:78:b5:7d:3a:7e:00:1a:db:c3:d4: 55:16:c8:e2:e4:49:db:28:d1:37:64:47:03:d4:f4:06:f7:ab: 70:f6:99:43:d8:a7:4e:d3:76:13:af:66:03:d4:87:4a:08:9c: 7d:5e:d7:49:72:e0:21:d6:e3:6d:ac:65:63:d5:f2:b1:8c:da: 73:5c:7b:3d:1e:2b:72:f6:66:9b:40:82:30:4b:f7:72:ac:3b: 1f:02:e8:3b:06:13:b5:3a:c6:d2:92:70:bc:0b:64:f1:b9:46: 63:3e:e2:82:30:f2:c5:f4:96:84:d5:04:ef:6d:c3:75:e8:fa: e1:be:1a:fe:0b:67:2d:6c:73:56:42:f5:8c:d1:c7:26:f7:ff: f2:49:11:3a:69:60:b9:d1:88:ff:ab:c4:b0:b0:d6:a5:21:31: bc:43:f4:77:31:d2:47:ae:2c:54:f7:c1:cf:16:d1:02:b2:49: 78:6f:61:27:82:f7:e9:d0:2f:ea:3e:75:2b:c8:66:d2:62:ed: ad:5a:49:2e:cf:07:6c:ba:b7:3b:05:96:1e:bd:0b:96:2f:3f: d2:35:f0:aa:79:1e:b0:e0:0c:45:22:4b:82:4e:1e:88:4b:46: d7:6e:94:dd:d8:50:f6:e5:1b:91:c4:f3:e7:14:6d:d8:e7:e5: 45:a9:b6:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA2MDEwNzM0MTVaFw0yNTA2MDgwNzM0MTVaMBgxFjAUBgNV BAMTDTY4M2MwMjc4LWRhOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaXAUWC67cZOEGS8yiDCmwr8cQLf/18an7YKca4lKWLbxUp/+Kj+hkTSrZyfdY FjVAO4w9Z4pJ6p+gZxE1lPwIvJoWdxLPDYK/5VcEO4Ac7i5jNA4jwy483DBwoWtz tTrAAASSLbn3aUpg/A7j4jsyEqXqr1FGSLtYm1TI8jvcDgpOxjRE8EWCUe7k8c0J PG6mDs2Aro+H6cmVIlR99VJ3sk5kvuSfvknBrExKhjiuWP6Qz4lZwfrkSLzHeIFc V0Iw6CLGmGFBUVOfctC2kmSE3EMesqu7Ytv8URKhiS7IJRQnXwCY68lEbVaZSEtd PlMT1Vebk+kr25n+HI5d9X2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPo3dhiJQ +0cPpL/mjudLZ5VrYdAwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8VNZ1ixGp1eLV9On4AGtvD1FUWyOLkSdso0TdkRwPU9Ab3q3D2mUPY p07TdhOvZgPUh0oInH1e10ly4CHW422sZWPV8rGM2nNcez0eK3L2ZptAgjBL93Ks Ox8C6DsGE7U6xtKScLwLZPG5RmM+4oIw8sX0loTVBO9tw3Xo+uG+Gv4LZy1sc1ZC 9YzRxyb3//JJETppYLnRiP+rxLCw1qUhMbxD9Hcx0keuLFT3wc8W0QKySXhvYSeC 9+nQL+o+dSvIZtJi7a1aSS7PB2y6tzsFlh69C5YvP9I18Kp5HrDgDEUiS4JOHohL RtdulN3YUPblG5HE8+cUbdjn5UWptug= -----END CERTIFICATE-----Generated at Mon Jun 2 21:51:04 2025 by rpki-client