$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: biSjVF2otvpVUengVYcmX0ucHToauByOaBSYUtyFwQg= Subject key identifier: 9E:E4:40:7C:A2:68:9A:56:38:72:53:B0:FC:22:DD:F0:70:31:AF:09 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A4F Signing time: Sun 20 Jul 2025 19:48:36 +0000 Manifest this update: Sun 20 Jul 2025 19:48:35 +0000 Manifest next update: Sun 27 Jul 2025 19:48:35 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: kqkgmV567OchoSjIboFzSos25w3/S9chlaMXWhEnQNA=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Jul 20 19:48:35 2025 GMT Not After : Jul 27 19:48:35 2025 GMT Subject: CN=687d4814-fcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:27:ae:ef:9b:e6:2d:34:fe:ce:a7:6e:29: 03:e6:e3:76:04:d9:db:c0:d9:67:71:80:92:85:0e: 46:90:b6:50:f3:fe:47:b2:27:3a:6d:6b:3d:41:9e: 32:4c:4c:34:7c:c9:a0:07:30:ca:03:e2:b1:3e:1d: 2e:8f:42:de:b0:d8:6f:3c:10:52:c6:f8:7c:c5:e5: 0b:6e:97:fe:8b:bb:b8:da:94:98:e4:5d:fc:e2:52: 35:3b:36:62:70:d6:0d:67:52:20:27:54:a4:62:3b: d5:65:fe:5f:29:a0:52:fa:a4:91:b8:e2:c2:c5:fc: bb:6b:be:4e:b7:e5:de:2a:c4:ce:ce:c1:1b:e3:4e: 37:b3:02:75:90:20:53:c0:37:98:a9:36:30:b1:ac: 14:9e:77:8b:46:02:00:18:4e:cc:4e:95:b1:da:67: 54:52:e4:51:f7:a6:b3:44:5e:3b:a4:b4:2e:1f:cb: 70:83:24:05:eb:41:e6:48:64:0a:b5:52:1f:40:39: a4:e8:c2:3d:a3:49:a0:c8:0c:d8:d1:dd:7c:ff:1f: 53:29:dd:46:6b:62:6d:23:d5:f0:8d:df:92:75:59: 87:b1:aa:22:f8:dd:cf:bb:70:76:14:57:04:49:f4: c5:66:7d:38:37:08:45:51:e4:e2:6b:77:87:89:fd: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E4:40:7C:A2:68:9A:56:38:72:53:B0:FC:22:DD:F0:70:31:AF:09 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c0:4d:1a:87:75:ec:b9:23:55:c6:d9:04:9d:fe:c1:4b:3f: d3:35:18:49:4c:32:95:46:96:8f:4e:ba:37:e5:8f:64:f6:51: 40:e3:75:58:44:99:d8:4e:2c:2e:5f:f8:44:96:65:b6:a9:7a: d4:da:ef:d8:c1:8e:68:70:d9:ef:76:45:2d:9d:5e:a8:1f:79: e7:90:1e:4a:de:54:83:4e:54:5a:3d:37:12:a8:fe:d9:81:b6: 3b:a1:af:ae:5e:29:b9:6b:7d:7f:1f:f3:ca:b6:01:6e:ba:eb: 39:5a:30:11:cb:90:91:a4:e2:f9:1e:03:4f:73:aa:db:de:3b: ca:55:dc:d8:d0:9a:4c:a9:87:07:91:a9:93:64:c4:dd:01:d9: e8:12:df:20:52:c5:5b:19:4c:81:e1:85:2e:e4:30:30:9b:b5: 29:b0:67:ed:05:c1:31:45:74:be:f4:ab:cb:24:4d:e0:32:52: 51:e2:44:11:99:63:7f:e8:4b:1c:e6:74:ab:d3:59:6a:14:fa: 6e:4b:a2:f4:b9:c7:47:3d:9f:89:da:53:89:e8:26:68:de:d5: fc:51:b9:b8:8a:28:33:2a:4e:b1:76:b7:a6:0a:ab:f0:85:05: 21:e3:8e:fe:14:04:fe:eb:3f:8d:f0:9b:67:9a:7b:2c:c7:75: 31:9e:ad:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNzIwMTk0ODM1WhcNMjUwNzI3MTk0ODM1WjAYMRYwFAYD VQQDEw02ODdkNDgxNC1mY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyQnru+b5i00/s6nbikD5uN2BNnbwNlncYCShQ5GkLZQ8/5Hsic6bWs9QZ4y TEw0fMmgBzDKA+KxPh0uj0LesNhvPBBSxvh8xeULbpf+i7u42pSY5F384lI1OzZi cNYNZ1IgJ1SkYjvVZf5fKaBS+qSRuOLCxfy7a75Ot+XeKsTOzsEb4043swJ1kCBT wDeYqTYwsawUnneLRgIAGE7MTpWx2mdUUuRR96azRF47pLQuH8twgyQF60HmSGQK tVIfQDmk6MI9o0mgyAzY0d18/x9TKd1Ga2JtI9Xwjd+SdVmHsaoi+N3Pu3B2FFcE SfTFZn04NwhFUeTia3eHif0CFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7kQHyi aJpWOHJTsPwi3fBwMa8JMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2wE0ah3XsuSNVxtkEnf7BSz/TNRhJTDKVRpaPTro35Y9k9lFA43VY RJnYTiwuX/hElmW2qXrU2u/YwY5ocNnvdkUtnV6oH3nnkB5K3lSDTlRaPTcSqP7Z gbY7oa+uXim5a31/H/PKtgFuuus5WjARy5CRpOL5HgNPc6rb3jvKVdzY0JpMqYcH kamTZMTdAdnoEt8gUsVbGUyB4YUu5DAwm7UpsGftBcExRXS+9KvLJE3gMlJR4kQR mWN/6Esc5nSr01lqFPpuS6L0ucdHPZ+J2lOJ6CZo3tX8Ubm4iigzKk6xdremCqvw hQUh447+FAT+6z+N8Jtnmnssx3Uxnq0q -----END CERTIFICATE-----Generated at Mon Jul 21 07:47:01 2025 by rpki-client