$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json) Hash identifier: tOo551DiPw4qywO5X9PaRuPbokNmxQeKFMUcLg4Ef/g= Subject key identifier: 45:68:5F:EC:84:1C:04:E9:6B:99:61:2F:DA:25:D4:E0:8F:C6:BD:6C Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Certificate serial: 0FA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft Manifest number: 0F9D Signing time: Sat 12 Apr 2025 17:27:09 +0000 Manifest this update: Sat 12 Apr 2025 17:27:08 +0000 Manifest next update: Sat 19 Apr 2025 17:27:08 +0000 Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: t4xiTKdyfOdJD8D6qxwPhvUiyRkIYQisyklpQ9mVCkc=) 2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: Zze9TlbBres1fvJuhmxxkKTa+lNOrwdMt9mFrIPRgU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4007 (0xfa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Validity Not Before: Apr 12 17:27:08 2025 GMT Not After : Apr 19 17:27:08 2025 GMT Subject: CN=67faa26c-734b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:e1:7b:37:8d:bb:7a:72:22:8d:e9:0f:db: d8:bf:79:50:f7:4d:8c:7e:25:f1:9d:e3:08:6b:c8: a4:d3:44:4e:94:fb:6c:70:a7:15:91:48:53:06:ce: bd:73:e4:85:5d:55:ed:0a:df:b2:d8:6d:d7:d2:4b: 22:80:23:f4:f3:9a:f4:99:35:7f:b0:67:30:9f:88: 9f:e4:e9:f3:de:11:b6:f3:e1:c7:f1:ea:bb:60:8b: 41:d2:09:34:89:bd:4f:c7:83:14:24:9d:be:be:bf: a9:1c:09:cd:45:b0:3d:b8:b5:cf:e9:c5:6e:06:39: 15:0c:16:1e:6a:35:23:7b:bd:f9:92:52:c9:be:60: 1d:b0:1a:a7:c7:44:15:37:ba:44:8a:17:ca:c9:15: 48:3e:73:b3:f9:4e:ee:44:e8:14:13:9b:81:7b:66: 7d:21:0f:b3:b0:79:0a:e2:fb:53:f5:5f:26:37:67: 1d:b1:96:5d:90:46:fd:ed:4d:97:c9:af:da:8a:a3: fa:40:65:a4:d4:3a:2c:0a:bd:59:a0:67:4e:99:b6: 5b:42:9e:9f:35:59:5f:d6:16:e1:29:1a:fc:f0:4a: 2e:7d:a1:d4:66:35:9e:ba:37:59:a1:77:b9:81:2b: 85:63:5e:40:f2:21:b5:ca:e6:0f:6d:0c:d5:8f:c7: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:5F:EC:84:1C:04:E9:6B:99:61:2F:DA:25:D4:E0:8F:C6:BD:6C X509v3 Authority Key Identifier: keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:88:91:26:58:50:5e:c8:89:2b:1c:c4:35:3f:da:db:d5:cd: b7:09:27:48:9b:12:4c:33:1d:1e:15:6e:e7:3b:73:e4:88:b0: 40:26:74:51:58:0f:e5:6d:3f:4e:8d:32:b1:27:21:4f:f2:c0: 4f:e0:3c:01:a2:38:96:1c:63:35:46:9c:3d:61:2a:4b:6a:92: 32:d4:f5:fc:c9:23:0a:96:d3:a3:15:1d:31:b4:b3:4f:57:5c: df:7c:06:45:c6:c3:58:a9:e0:ba:64:31:76:9b:da:26:b3:aa: fe:22:8a:7b:fa:e0:f6:a8:58:b1:31:73:df:c0:b3:17:db:c0: 65:fb:5e:db:9d:57:23:d3:a9:5f:1b:9f:3c:88:5f:0b:fa:35: 4c:44:be:02:f5:d4:a2:5f:9b:b7:4c:fe:ec:90:fa:df:79:80: 96:8d:d4:b9:cd:e7:23:d5:69:d0:95:56:ca:05:e3:cd:46:a8: a9:46:b0:46:6a:a9:99:14:16:aa:44:1a:06:7f:63:84:af:a0: 11:a1:dc:9e:c1:09:4b:ef:9d:76:fd:83:90:00:f7:73:ef:cb: 20:77:1c:77:9a:bf:e0:14:e7:ad:7b:09:59:24:e0:f3:1a:33: 6b:a4:eb:be:11:47:c7:55:eb:ed:11:b5:13:f7:d1:2d:0a:2d: 18:7f:da:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB MDgyNzI5NDYwHhcNMjUwNDEyMTcyNzA4WhcNMjUwNDE5MTcyNzA4WjAYMRYwFAYD VQQDEw02N2ZhYTI2Yy03MzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxHhezeNu3pyIo3pD9vYv3lQ902MfiXxneMIa8ik00ROlPtscKcVkUhTBs69 c+SFXVXtCt+y2G3X0ksigCP085r0mTV/sGcwn4if5Onz3hG28+HH8eq7YItB0gk0 ib1Px4MUJJ2+vr+pHAnNRbA9uLXP6cVuBjkVDBYeajUje735klLJvmAdsBqnx0QV N7pEihfKyRVIPnOz+U7uROgUE5uBe2Z9IQ+zsHkK4vtT9V8mN2cdsZZdkEb97U2X ya/aiqP6QGWk1DosCr1ZoGdOmbZbQp6fNVlf1hbhKRr88EoufaHUZjWeujdZoXe5 gSuFY15A8iG1yuYPbQzVj8cUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVoX+yE HATpa5lhL9ol1OCPxr1sMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5 MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ2Qi81NkVFQkFFODU5MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBT Sy13X3hoN2tNdjZnZ25LVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0iJEmWFBeyIkrHMQ1P9rb1c23CSdImxJMMx0eFW7nO3PkiLBAJnRR WA/lbT9OjTKxJyFP8sBP4DwBojiWHGM1Rpw9YSpLapIy1PX8ySMKltOjFR0xtLNP V1zffAZFxsNYqeC6ZDF2m9oms6r+Iop7+uD2qFixMXPfwLMX28Bl+17bnVcj06lf G588iF8L+jVMRL4C9dSiX5u3TP7skPrfeYCWjdS5zecj1WnQlVbKBePNRqipRrBG aqmZFBaqRBoGf2OEr6ARodyewQlL7512/YOQAPdz78sgdxx3mr/gFOetewlZJODz GjNrpOu+EUfHVevtEbUT99EtCi0Yf9os -----END CERTIFICATE-----Generated at Sun Apr 13 02:37:35 2025 by rpki-client