$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: lVk9+4WgaxLODpGVpHDRo7atz3Jj4U+umZxPe7hPZ2w= Subject key identifier: B1:4F:BD:8B:65:05:37:A3:CC:24:30:70:18:59:F9:0D:62:B8:42:51 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: D2 Signing time: Sat 05 Apr 2025 04:59:07 +0000 Manifest this update: Sat 05 Apr 2025 04:59:07 +0000 Manifest next update: Sat 12 Apr 2025 04:59:07 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: HfDygHAP4eUFjVP1xCIhd2DPHUzMsvcqMwWFowmBJEM=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C Validity Not Before: Apr 5 04:59:07 2025 GMT Not After : Apr 12 04:59:07 2025 GMT Subject: CN=67f0b89b-1913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:6b:da:03:91:c5:fc:f8:d7:84:b9:b6:f5: f6:db:a4:43:4d:26:c0:0f:0b:0d:aa:dc:08:f7:4b: cc:a1:65:17:fa:13:4f:bc:a1:2e:67:fc:b8:99:9a: a6:ea:97:f3:8f:f9:2e:67:0d:28:d4:07:55:40:c4: b4:66:46:97:03:ca:95:29:20:74:bc:bc:fd:45:ce: fc:1b:29:f4:19:1f:a0:62:57:85:c1:f9:f9:b6:cd: 7f:ba:7c:54:b6:1b:c0:0d:2d:84:23:36:38:70:f0: 40:ac:f5:20:58:3d:1f:b3:76:e6:fb:95:bb:b5:2a: 07:8b:3c:9c:dd:33:e6:5f:e6:ef:c1:6a:2b:67:99: 77:b2:9f:0c:70:6c:18:22:60:15:b3:3b:5e:9d:15: a0:56:0a:c6:ee:18:0d:ea:83:46:9f:91:21:37:8a: f2:fa:15:5b:c4:17:5b:72:f4:1d:78:7a:e0:9e:b6: 91:38:cd:90:2b:6c:52:81:84:2d:a7:f2:fb:96:2c: 2c:9e:60:5a:1b:28:41:2b:4a:8e:22:4e:28:8d:39: 2f:6e:ab:6b:4b:a1:ae:4a:4a:ed:8a:37:b5:22:e6: d5:74:ba:71:8d:b8:f7:da:8e:15:70:8b:ba:96:a6: 0a:4c:e3:df:29:a5:60:bd:c0:1a:4d:04:18:b8:d6: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4F:BD:8B:65:05:37:A3:CC:24:30:70:18:59:F9:0D:62:B8:42:51 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a7:76:fd:52:29:7e:82:ad:61:0d:4a:02:ee:00:9c:00:93: 3f:83:96:72:8c:49:03:a7:f6:8c:95:79:78:6b:5c:ca:f0:95: 41:c6:db:ee:95:09:4e:ea:57:2a:fa:47:4f:bd:b3:80:42:ae: 70:37:71:59:0a:c7:17:a1:9b:40:3d:8e:7e:f0:f0:23:a5:7e: ca:cd:39:1e:1a:3e:1e:f6:6a:7a:16:b2:22:f0:31:38:40:aa: b7:cb:28:18:cb:94:49:89:f3:72:d9:7a:c0:6c:cb:6c:c4:6d: 02:b1:0f:98:a0:1c:58:56:2f:54:f7:9f:82:60:b4:51:bb:ec: 04:ff:de:d8:72:f5:7e:67:8e:93:d5:5c:04:01:cf:91:72:51: 78:21:04:70:26:b5:4b:af:3b:94:f4:9c:1b:2c:75:6d:6e:ee: 65:4b:55:35:83:59:87:7e:37:a9:6a:ba:5d:61:4a:67:cd:dd: bf:1c:66:4c:ca:89:da:a8:7a:e5:2e:66:d9:ba:ae:f3:1c:9c: 2a:e5:5a:ec:35:fa:29:65:48:d3:63:7b:fc:85:d5:77:f3:dc: 8e:43:53:bd:4b:de:2c:be:2a:af:35:7e:0c:78:0f:0f:e8:4e: c0:e6:6c:62:b3:ba:f1:b0:60:8b:39:75:a8:e2:f6:62:cf:03: 4e:a8:84:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwNDA1MDQ1OTA3WhcNMjUwNDEyMDQ1OTA3WjAYMRYwFAYD VQQDEw02N2YwYjg5Yi0xOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPBr2gORxfz414S5tvX226RDTSbADwsNqtwI90vMoWUX+hNPvKEuZ/y4mZqm 6pfzj/kuZw0o1AdVQMS0ZkaXA8qVKSB0vLz9Rc78Gyn0GR+gYleFwfn5ts1/unxU thvADS2EIzY4cPBArPUgWD0fs3bm+5W7tSoHizyc3TPmX+bvwWorZ5l3sp8McGwY ImAVsztenRWgVgrG7hgN6oNGn5EhN4ry+hVbxBdbcvQdeHrgnraROM2QK2xSgYQt p/L7liwsnmBaGyhBK0qOIk4ojTkvbqtrS6GuSkrtije1IubVdLpxjbj32o4VcIu6 lqYKTOPfKaVgvcAaTQQYuNYk1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFPvYtl BTejzCQwcBhZ+Q1iuEJRMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWp3b9Uil+gq1hDUoC7gCcAJM/g5ZyjEkDp/aMlXl4a1zK8JVBxtvu lQlO6lcq+kdPvbOAQq5wN3FZCscXoZtAPY5+8PAjpX7KzTkeGj4e9mp6FrIi8DE4 QKq3yygYy5RJifNy2XrAbMtsxG0CsQ+YoBxYVi9U95+CYLRRu+wE/97YcvV+Z46T 1VwEAc+RclF4IQRwJrVLrzuU9JwbLHVtbu5lS1U1g1mHfjeparpdYUpnzd2/HGZM yonaqHrlLmbZuq7zHJwq5VrsNfopZUjTY3v8hdV389yOQ1O9S94sviqvNX4MeA8P 6E7A5mxis7rxsGCLOXWo4vZizwNOqITs -----END CERTIFICATE-----Generated at Sun Apr 6 02:43:53 2025 by rpki-client