$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft File: FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json) Hash identifier: WKgWn3W9+uZOTiNgrsMNWTWBLy3GP5L4TCZfQ3HOtAA= Subject key identifier: 03:57:0F:E2:D7:6A:28:1F:BF:FB:E8:13:2C:2F:DD:F9:C4:2C:88:99 Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27 Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft Manifest number: 0520 Signing time: Sun 08 Jun 2025 23:12:29 +0000 Manifest this update: Sun 08 Jun 2025 23:12:29 +0000 Manifest next update: Sun 15 Jun 2025 23:12:29 +0000 Files and hashes: 1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: ix1ki6JthI5ljLVjGpCyDAwgbkhhg5OVAX8W8T0jKL0=) 2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: QVvq8n67O4BwvE2m1nf05uYuzsM/8nQ/hW6OWK20q7A=) 3: C8900982059611ECB2896C55C4F9AE02.roa (hash: hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727 Validity Not Before: Jun 8 23:12:29 2025 GMT Not After : Jun 15 23:12:29 2025 GMT Subject: CN=684618dd-9fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:06:42:97:6b:4b:f7:f2:07:d8:ab:27:92: e2:0a:40:e0:3a:fc:b8:0f:50:5a:c8:96:22:b0:e6: af:8d:69:e0:99:df:16:64:c4:c0:50:4a:0f:86:ef: f4:8a:9a:6f:71:40:7a:37:88:51:0c:0f:8a:8f:11: 91:18:67:0f:ce:44:be:1d:e2:44:58:41:ef:fd:21: 22:79:89:3f:7c:b2:70:37:83:66:67:d5:c7:d2:03: 66:17:b8:0c:a6:1f:c6:26:43:2f:dd:7f:30:65:98: 06:22:6d:a8:57:e3:3a:3c:eb:01:4c:b7:e0:98:fe: d9:68:0a:08:58:7a:da:48:c9:bb:7a:11:1d:b2:fb: ea:8b:cf:cf:fe:2c:16:d9:7a:06:8d:25:d9:cf:e1: 00:f6:43:8d:e5:a2:f0:ab:92:f5:82:88:be:2d:78: 25:60:26:ae:b8:99:89:c5:70:e4:8c:c0:75:b8:ce: b1:24:6f:72:b3:dc:a5:ad:b2:aa:2b:3e:9d:9f:94: 1a:d8:07:8f:34:33:9b:1c:9d:28:c3:fe:ff:95:de: 23:12:d9:f5:1a:e8:97:c6:86:f6:c3:de:d0:b3:d2: 4c:72:c7:3b:4a:07:c3:71:bf:fc:b8:7f:13:21:96: 84:bb:7e:2d:28:a1:c2:47:06:19:96:60:bf:ec:65: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:57:0F:E2:D7:6A:28:1F:BF:FB:E8:13:2C:2F:DD:F9:C4:2C:88:99 X509v3 Authority Key Identifier: keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:32:85:0b:14:39:a0:8d:6d:27:22:ca:e3:63:89:b2:96: 45:5f:20:f5:57:cc:66:3c:98:85:b9:9d:8b:dd:8e:a0:90:b0: ba:62:e3:3d:d4:9f:6b:db:8d:7f:a3:3a:3b:94:88:45:c9:67: ab:f9:5a:31:13:4c:d3:79:37:24:d0:17:da:d3:06:ad:34:28: 71:c6:85:1c:2e:df:15:ec:09:9c:33:4f:ff:17:1d:77:03:9e: e5:26:c1:1c:6b:21:b6:19:ef:63:68:82:62:95:ee:e8:99:cc: 10:f2:42:f4:fa:08:e0:93:19:80:a9:f0:52:45:42:20:8f:7f: 78:ef:9c:e9:be:9a:a5:1b:cb:ae:10:7b:f3:c6:80:7d:0e:f8: a5:b9:39:e4:46:58:1e:19:36:fe:a2:a7:1f:ff:8a:80:19:72: 96:af:cb:4c:c5:c9:54:3b:71:d1:fe:c0:fa:dc:5b:f1:d3:cf: 70:0b:a1:ba:fc:08:a8:7a:cd:37:d0:11:e9:f8:c0:23:98:b7: 1e:a7:24:25:67:43:58:a4:82:87:98:84:99:36:4f:2d:fd:c5: ad:ff:91:33:40:2f:5c:89:09:fc:aa:39:de:d2:a0:c4:8b:1a: e7:ce:8e:b2:1b:9b:19:d0:b7:56:8f:91:24:e6:cb:49:5f:58: 51:86:52:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzQzExMTAvBgNVBAUTKDE0NTQ4RTcwOTQ5RTUwNUY4QkE4QTUzOTFFNDY2RTFF OTlEM0I3MjcwHhcNMjUwNjA4MjMxMjI5WhcNMjUwNjE1MjMxMjI5WjAYMRYwFAYD VQQDEw02ODQ2MThkZC05ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AwGQpdrS/fyB9irJ5LiCkDgOvy4D1BayJYisOavjWngmd8WZMTAUEoPhu/0 ippvcUB6N4hRDA+KjxGRGGcPzkS+HeJEWEHv/SEieYk/fLJwN4NmZ9XH0gNmF7gM ph/GJkMv3X8wZZgGIm2oV+M6POsBTLfgmP7ZaAoIWHraSMm7ehEdsvvqi8/P/iwW 2XoGjSXZz+EA9kON5aLwq5L1goi+LXglYCauuJmJxXDkjMB1uM6xJG9ys9ylrbKq Kz6dn5Qa2AePNDObHJ0ow/7/ld4jEtn1GuiXxob2w97Qs9JMcsc7SgfDcb/8uH8T IZaEu34tKKHCRwYZlmC/7GW5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANXD+LX aigfv/voEywv3fnELIiZMB8GA1UdIwQYMBaAFBRUjnCUnlBfi6ilOR5Gbh6Z07cn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTNDMS83MzZFM0I0ODA1 OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVGLUxxS1U1SGtadUhwblR0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGU09jSlNlVUYtTHFLVTVIa1p1SHBuVHR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTNDMS83MzZFM0I0ODA1OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVG LUxxS1U1SGtadUhwblR0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUBzKFCxQ5oI1tJyLK42OJspZFXyD1V8xmPJiFuZ2L3Y6gkLC6YuM9 1J9r241/ozo7lIhFyWer+VoxE0zTeTck0Bfa0watNChxxoUcLt8V7AmcM0//Fx13 A57lJsEcayG2Ge9jaIJile7omcwQ8kL0+gjgkxmAqfBSRUIgj39475zpvpqlG8uu EHvzxoB9DviluTnkRlgeGTb+oqcf/4qAGXKWr8tMxclUO3HR/sD63Fvx089wC6G6 /Aioes030BHp+MAjmLcepyQlZ0NYpIKHmISZNk8t/cWt/5EzQC9ciQn8qjne0qDE ixrnzo6yG5sZ0LdWj5Ek5stJX1hRhlLP -----END CERTIFICATE-----Generated at Tue Jun 10 03:51:48 2025 by rpki-client