$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: Tglj3e0N07FP0qGYWloieBDt5ve73PyWN8WqZ8Sgjpg= Subject key identifier: 90:CD:FA:B5:63:05:20:E7:82:F5:14:D9:F3:4A:CE:EB:B5:7A:01:71 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: ED Signing time: Sat 31 May 2025 04:58:14 +0000 Manifest this update: Sat 31 May 2025 04:58:14 +0000 Manifest next update: Sat 07 Jun 2025 04:58:14 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: fyDKuQazsdkQ++YH4fo5yYYesKd72iD18P5H1qAxDK4=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: May 31 04:58:14 2025 GMT Not After : Jun 7 04:58:14 2025 GMT Subject: CN=683a8c66-01ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:b3:34:4b:9d:72:1d:e2:4b:b3:9c:eb:33: f5:03:75:0d:6f:5e:21:32:3d:be:71:52:92:fc:23: 39:2e:28:ea:90:b6:45:a4:48:c4:eb:2e:ea:5e:51: be:15:af:26:35:e4:39:31:77:05:08:5c:52:a7:e9: 2c:de:8b:31:d8:5a:bb:9d:5f:f5:8b:a2:44:b3:ba: 0a:29:a7:df:a5:8c:eb:d8:a8:d0:06:78:59:87:25: 3b:e7:39:59:c9:6d:59:e4:73:e0:21:b5:18:79:58: c5:1e:81:a2:06:7b:6d:6d:f6:43:5f:e0:d3:c0:62: 6d:c3:d6:40:75:e4:fc:4a:51:e7:f5:0b:ec:05:ad: b0:9c:73:05:27:11:75:50:9a:1a:09:33:bd:71:3d: 92:ea:0e:d7:94:e2:e4:08:e9:0b:70:06:cb:d5:d3: c7:7d:a5:b5:02:67:22:5e:a5:eb:2e:c0:a3:59:8e: e0:3a:a7:d8:a2:91:d1:22:b7:e6:fb:62:41:02:e0: 93:87:26:67:f4:54:4f:e2:b9:86:da:86:7e:46:3d: 01:82:68:5c:53:6a:60:c1:c9:de:b8:b0:56:23:19: e7:62:26:13:81:50:45:b2:79:4f:05:6e:f1:4d:2c: ed:b0:54:4e:a7:db:11:77:5f:e6:9f:51:4a:71:dc: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:FA:B5:63:05:20:E7:82:F5:14:D9:F3:4A:CE:EB:B5:7A:01:71 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e5:f4:a9:b3:62:6f:7f:f2:14:5a:0c:29:18:99:e4:6d:ce: fc:44:b0:27:ed:24:b3:04:ff:20:4b:2c:a1:7d:fb:56:df:08: 65:db:ef:9f:fc:ba:16:ef:b2:2f:1a:31:ea:00:f0:a5:e0:2c: 08:53:9a:d7:34:fa:ab:c6:83:b2:bb:3d:a2:1c:62:8f:4d:66: 0f:9d:50:79:db:b6:64:8f:e0:ef:ae:2d:ac:4e:99:78:16:42: a1:7c:6c:61:c1:5b:d0:f0:94:fe:b2:ca:ab:39:f9:0d:81:fe: b8:0f:11:bf:08:bd:7a:75:39:21:24:26:68:7b:97:a1:5c:b8: db:ab:15:0c:a3:d0:5e:30:13:1e:f5:f3:b5:1d:70:4e:bf:5c: 09:65:c4:6b:1e:9a:a0:e4:da:a2:38:41:bd:65:ad:4a:7b:cd: c0:28:62:bc:04:cc:c6:db:d5:d4:e2:64:e4:11:9a:10:5b:a8: 83:db:a5:10:e9:f8:97:9a:9a:54:31:2c:ab:c6:9f:33:c4:39: 9b:59:47:6e:81:61:2e:9d:49:8c:db:56:4e:d3:b8:0e:34:90: e2:cb:e6:d9:47:f8:5c:97:a6:7f:d9:ad:c3:fe:3d:5b:35:f2: 04:ef:5a:24:9b:ec:cb:20:c2:cc:ba:29:b7:90:a4:94:5a:46: 75:7d:95:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwNTMxMDQ1ODE0WhcNMjUwNjA3MDQ1ODE0WjAYMRYwFAYD VQQDEw02ODNhOGM2Ni0wMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd+zNEudch3iS7Oc6zP1A3UNb14hMj2+cVKS/CM5LijqkLZFpEjE6y7qXlG+ Fa8mNeQ5MXcFCFxSp+ks3osx2Fq7nV/1i6JEs7oKKaffpYzr2KjQBnhZhyU75zlZ yW1Z5HPgIbUYeVjFHoGiBnttbfZDX+DTwGJtw9ZAdeT8SlHn9QvsBa2wnHMFJxF1 UJoaCTO9cT2S6g7XlOLkCOkLcAbL1dPHfaW1AmciXqXrLsCjWY7gOqfYopHRIrfm +2JBAuCThyZn9FRP4rmG2oZ+Rj0BgmhcU2pgwcneuLBWIxnnYiYTgVBFsnlPBW7x TSztsFROp9sRd1/mn1FKcdyWQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDN+rVj BSDngvUU2fNKzuu1egFxMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF5fSps2Jvf/IUWgwpGJnkbc78RLAn7SSzBP8gSyyhfftW3whl2++f /LoW77IvGjHqAPCl4CwIU5rXNPqrxoOyuz2iHGKPTWYPnVB527Zkj+Dvri2sTpl4 FkKhfGxhwVvQ8JT+ssqrOfkNgf64DxG/CL16dTkhJCZoe5ehXLjbqxUMo9BeMBMe 9fO1HXBOv1wJZcRrHpqg5NqiOEG9Za1Ke83AKGK8BMzG29XU4mTkEZoQW6iD26UQ 6fiXmppUMSyrxp8zxDmbWUdugWEunUmM21ZO07gONJDiy+bZR/hcl6Z/2a3D/j1b NfIE71okm+zLIMLMuim3kKSUWkZ1fZVp -----END CERTIFICATE-----Generated at Sat May 31 15:40:37 2025 by rpki-client