$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: dr1Oa6xznZFRGpIdV7bhHg45MvXY9+WvEK8mhcbnKxs= Subject key identifier: 57:B8:06:9E:FF:A0:F0:FF:BE:38:16:66:FE:BF:AE:6D:1A:28:48:E8 Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 0517 Signing time: Fri 30 May 2025 23:48:13 +0000 Manifest this update: Fri 30 May 2025 23:48:12 +0000 Manifest next update: Fri 06 Jun 2025 23:48:12 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: E3VQB9qKqIEaHjm8Ks42HJn2dW4q6/+MGys6itpTp9s=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: May 30 23:48:12 2025 GMT Not After : Jun 6 23:48:12 2025 GMT Subject: CN=683a43bc-67bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:46:37:56:7c:aa:e1:56:dc:97:ac:96:47: f7:b0:1c:a9:57:cc:c3:e0:e3:b9:ab:49:da:02:17: e2:f4:f9:d9:e0:95:5d:99:92:53:6f:1b:17:f1:96: 64:8c:4c:c3:ab:3b:cd:65:fe:74:06:11:a8:e6:cb: 3e:61:f7:13:2a:af:bd:13:33:4b:0b:d8:1b:f0:28: 5a:c6:2c:d5:46:10:36:b5:8d:21:ce:ac:b8:7a:ca: f2:f4:c0:99:0a:4e:58:34:83:4e:75:83:c6:fd:67: b8:c5:fe:2a:7a:92:72:0d:83:27:34:14:72:70:69: 9b:f9:c0:dc:e5:ef:b8:55:10:e4:33:88:29:04:18: 1e:3d:f7:70:d9:66:4f:b3:b8:59:1c:f7:5d:dd:0b: 6e:cd:d1:6b:85:f9:77:30:2b:99:72:3f:3e:33:8f: 0e:cb:c4:ef:f6:19:55:60:7a:ac:31:20:6e:f5:f9: 29:34:0d:6f:ec:d5:77:f5:e1:87:00:c2:5a:39:1f: 27:9f:63:36:12:31:cf:1c:af:ea:a5:09:66:c9:13: 9c:df:cb:40:58:51:96:bd:3b:8b:e1:5c:49:71:56: 1a:e9:e4:a6:46:8c:ee:f4:75:80:e1:4b:8a:7e:1e: 1c:bc:1f:ca:4f:8e:14:45:67:af:0f:2f:0b:2b:f1: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:06:9E:FF:A0:F0:FF:BE:38:16:66:FE:BF:AE:6D:1A:28:48:E8 X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a2:53:a4:0f:9a:9e:3c:ff:cf:05:24:e4:ab:61:ca:26:03: 47:55:af:27:e6:3e:50:a4:7f:1b:6b:90:07:72:1e:35:3d:dd: 58:da:ee:e9:09:6e:f6:83:4c:bf:d7:7b:2c:d0:a6:e9:f3:39: 08:10:99:96:ed:70:be:2a:a6:9b:48:61:77:9b:5c:a7:70:d5: 04:c5:dd:dd:18:f8:b0:3a:68:47:b9:af:f4:8e:bc:cc:6d:39: d4:8b:04:90:c8:89:88:16:a4:59:50:b6:50:13:ea:f8:5e:24: 42:07:6c:ad:8a:60:cb:77:76:93:a1:ec:37:ca:1d:ae:f0:fb: 2e:ec:a1:d2:5d:5a:d7:d6:b5:3d:63:c5:63:81:d0:32:56:73: 4a:11:82:e0:0a:11:0d:b3:16:6e:34:60:0c:36:88:3a:ca:53: 5f:13:94:dc:f9:4e:77:ba:bb:e2:80:41:fc:d7:e9:b9:9e:48: 21:ed:f7:9a:ac:08:d5:38:a8:dc:61:a6:c2:43:66:f6:67:8a: 3f:4d:bf:9a:ff:a2:ab:0c:86:66:97:ca:60:0c:13:fc:43:b8: 95:2f:52:7f:c7:7f:8e:68:94:25:ea:2d:35:64:77:b7:0c:05: 71:24:1e:b3:37:ae:0e:ed:ee:3a:47:63:75:6f:16:5e:44:58: 32:71:4c:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUwNTMwMjM0ODEyWhcNMjUwNjA2MjM0ODEyWjAYMRYwFAYD VQQDEw02ODNhNDNiYy02N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBZGN1Z8quFW3Jeslkf3sBypV8zD4OO5q0naAhfi9PnZ4JVdmZJTbxsX8ZZk jEzDqzvNZf50BhGo5ss+YfcTKq+9EzNLC9gb8ChaxizVRhA2tY0hzqy4esry9MCZ Ck5YNINOdYPG/We4xf4qepJyDYMnNBRycGmb+cDc5e+4VRDkM4gpBBgePfdw2WZP s7hZHPdd3QtuzdFrhfl3MCuZcj8+M48Oy8Tv9hlVYHqsMSBu9fkpNA1v7NV39eGH AMJaOR8nn2M2EjHPHK/qpQlmyROc38tAWFGWvTuL4VxJcVYa6eSmRozu9HWA4UuK fh4cvB/KT44URWevDy8LK/H5swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe4Bp7/ oPD/vjgWZv6/rm0aKEjoMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOolOkD5qePP/PBSTkq2HKJgNHVa8n5j5QpH8ba5AHch41Pd1Y2u7p CW72g0y/13ss0Kbp8zkIEJmW7XC+KqabSGF3m1yncNUExd3dGPiwOmhHua/0jrzM bTnUiwSQyImIFqRZULZQE+r4XiRCB2ytimDLd3aToew3yh2u8Psu7KHSXVrX1rU9 Y8VjgdAyVnNKEYLgChENsxZuNGAMNog6ylNfE5Tc+U53urvigEH81+m5nkgh7fea rAjVOKjcYabCQ2b2Z4o/Tb+a/6KrDIZml8pgDBP8Q7iVL1J/x3+OaJQl6i01ZHe3 DAVxJB6zN64O7e46R2N1bxZeRFgycUzD -----END CERTIFICATE-----Generated at Sat May 31 14:58:06 2025 by rpki-client