$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: rqrl40YhUWl66uPBECxuKi2wBY2H6rRmVVxDvY2m16k= Subject key identifier: 1F:27:85:09:F3:B3:BE:FC:B2:8C:C5:67:F9:57:55:FC:79:53:B6:75 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 0640 Signing time: Fri 28 Mar 2025 23:00:23 +0000 Manifest this update: Fri 28 Mar 2025 23:00:23 +0000 Manifest next update: Fri 04 Apr 2025 23:00:23 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: LoE2Z400nszu9o9j5KrJadnh0NLwoRakV8lMmfQb1GE=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: GHQh5SwHOMcXY1DsAhaLHUPHu9zL3ZFCXoLdxoLJfeA=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: rALO/Lu7rOVuXfsNKsgW9obWV+R382rqfNHaGZDPjYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A Validity Not Before: Mar 28 23:00:23 2025 GMT Not After : Apr 4 23:00:23 2025 GMT Subject: CN=67e72a07-8646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:07:a5:f5:13:b3:b0:ef:b8:d3:66:81:98: 81:40:c7:12:05:e4:63:66:e7:a6:8f:29:bd:4b:5c: 64:ac:e0:e9:b6:f0:6a:dd:00:98:55:a6:4a:00:8a: ab:00:da:24:e8:24:e6:c9:4e:45:ba:74:83:af:95: 73:e9:b1:cf:8d:65:7e:85:e8:0a:ba:6f:45:41:e5: c3:b7:38:bf:85:40:df:c1:5a:e5:26:81:91:02:3a: 1a:61:17:44:9a:7e:60:0e:06:67:38:e8:1e:53:94: 68:41:54:4d:60:fa:fb:76:8b:6f:f0:de:4a:80:2f: 79:96:22:00:15:cf:d2:dc:0a:4a:ed:2b:aa:c7:3a: 54:29:c5:e7:bb:4c:18:24:5c:26:08:bc:d9:da:c7: f6:82:06:71:de:74:99:3b:1d:ff:76:40:13:24:93: 5d:6f:35:4b:35:a4:9d:8f:93:9f:d7:eb:57:56:16: 6b:d2:aa:8a:ff:29:cc:89:3c:c2:7c:40:b6:84:d0: 5d:d2:a3:53:3a:f7:c2:37:0e:59:3d:bb:d6:c0:01: 95:3f:14:83:de:86:1e:c8:5b:2f:fb:b5:50:dd:a0: 6b:5f:6c:49:31:c9:b6:de:4e:89:d1:8e:b7:82:70: a4:be:eb:63:ab:47:24:b2:58:b5:db:ac:91:e0:40: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:85:09:F3:B3:BE:FC:B2:8C:C5:67:F9:57:55:FC:79:53:B6:75 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c6:0b:dc:9f:84:16:30:be:04:35:05:e5:2c:69:b1:a7:e5: 8f:75:ba:28:8b:3a:1c:c9:0d:91:48:c5:2b:e6:5e:c4:52:d4: 98:d4:c2:cf:05:1f:fa:a8:70:1a:1b:f6:3a:95:29:ce:bf:9b: 15:97:3e:75:1f:88:32:e3:41:82:8e:ee:f3:5a:c9:17:be:bb: 51:6c:d7:db:34:f6:e0:96:a4:90:f8:44:ae:f0:b3:4a:7b:41: 53:86:6d:01:26:f1:f3:f5:6a:f3:5b:3b:72:31:99:71:55:85: 52:7a:5b:d0:78:b0:54:0a:33:73:b7:e9:bc:e0:e3:ef:8f:da: 6e:3a:7f:ee:4a:04:5b:c4:86:68:97:0a:28:c3:f8:0a:e0:66: 8c:d0:81:ae:38:00:59:4c:9a:3c:9b:4d:5a:56:1e:50:25:29: 15:1e:eb:64:a4:4b:21:bc:a4:b6:4c:ce:74:3f:53:04:29:45: 21:87:e9:5f:10:eb:c1:c3:ba:87:8d:84:60:b2:62:66:8d:08: 58:e4:70:9e:2e:71:9c:63:af:0c:5e:16:c2:f9:66:09:78:73: 05:cb:d2:f0:45:19:4d:7c:68:a6:3d:63:ec:ad:a0:43:df:d9: 37:fe:a4:51:7a:75:d9:f8:d7:05:d7:ba:5e:a6:15:03:43:9c: 90:65:d8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwMzI4MjMwMDIzWhcNMjUwNDA0MjMwMDIzWjAYMRYwFAYD VQQDEw02N2U3MmEwNy04NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi8HpfUTs7DvuNNmgZiBQMcSBeRjZuemjym9S1xkrODptvBq3QCYVaZKAIqr ANok6CTmyU5FunSDr5Vz6bHPjWV+hegKum9FQeXDtzi/hUDfwVrlJoGRAjoaYRdE mn5gDgZnOOgeU5RoQVRNYPr7dotv8N5KgC95liIAFc/S3ApK7SuqxzpUKcXnu0wY JFwmCLzZ2sf2ggZx3nSZOx3/dkATJJNdbzVLNaSdj5Of1+tXVhZr0qqK/ynMiTzC fEC2hNBd0qNTOvfCNw5ZPbvWwAGVPxSD3oYeyFsv+7VQ3aBrX2xJMcm23k6J0Y63 gnCkvutjq0cksli126yR4EBFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8nhQnz s778sozFZ/lXVfx5U7Z1MB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZxgvcn4QWML4ENQXlLGmxp+WPdbooizocyQ2RSMUr5l7EUtSY1MLP BR/6qHAaG/Y6lSnOv5sVlz51H4gy40GCju7zWskXvrtRbNfbNPbglqSQ+ESu8LNK e0FThm0BJvHz9WrzWztyMZlxVYVSelvQeLBUCjNzt+m84OPvj9puOn/uSgRbxIZo lwoow/gK4GaM0IGuOABZTJo8m01aVh5QJSkVHutkpEshvKS2TM50P1MEKUUhh+lf EOvBw7qHjYRgsmJmjQhY5HCeLnGcY68MXhbC+WYJeHMFy9LwRRlNfGimPWPsraBD 39k3/qRRenXZ+NcF17pephUDQ5yQZdgk -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:09 2025 by rpki-client