$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: AkJ9/pbCsBxz5j+ay2SQ2aahkiVBL9LqnnjwwTEK8fw= Subject key identifier: A8:F3:4B:C3:56:34:9E:95:53:CF:2C:2C:06:E3:FC:8A:75:8F:9E:2A Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A35 Signing time: Fri 30 May 2025 19:56:50 +0000 Manifest this update: Fri 30 May 2025 19:56:50 +0000 Manifest next update: Fri 06 Jun 2025 19:56:50 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: Fe7suRKRjCbnGCkL8FguAxBNqq9it3Fx6bJAUyw/+k4=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: May 30 19:56:50 2025 GMT Not After : Jun 6 19:56:50 2025 GMT Subject: CN=683a0d82-059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:f2:c6:ab:57:71:6f:65:aa:63:b3:4a:48: 12:d9:72:c1:23:4a:0d:fa:f8:1f:77:13:e1:57:bb: 17:b0:44:aa:28:a6:97:d7:ee:2c:f4:30:93:61:08: a6:58:f7:b1:68:5b:49:c9:dc:c9:57:c8:12:e6:31: 89:24:26:79:ea:60:d9:9e:99:42:4b:a9:c5:9e:95: 29:9f:41:12:53:ec:af:4b:cd:dc:a9:f4:c8:42:f9: 0d:ce:b7:14:26:d3:f5:36:af:28:1e:0d:45:06:f8: 97:38:eb:39:db:2f:0d:d0:a2:db:1c:a6:9d:66:91: af:30:94:11:b0:df:d8:f9:05:dc:61:05:39:91:81: fb:47:89:90:47:be:bc:9a:d6:cb:96:e9:91:b8:74: f9:62:74:d0:26:ce:cc:dc:da:02:fa:a1:db:6b:c2: 3c:25:d8:03:c1:70:c3:e3:37:b3:12:0a:29:5c:e1: 80:c9:cf:88:8b:e7:7b:48:c4:da:03:32:fc:d2:40: be:2c:c1:82:2e:95:8e:d1:3c:67:62:9c:99:f2:1e: 40:43:2b:2c:ca:c8:28:15:82:97:6a:24:64:6c:95: 5c:db:5c:46:f8:bf:e8:4c:1c:f5:3b:e3:8b:30:d2: 93:c8:89:c8:69:cb:dc:ee:76:0c:88:f5:22:dd:5b: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F3:4B:C3:56:34:9E:95:53:CF:2C:2C:06:E3:FC:8A:75:8F:9E:2A X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f5:3a:31:7b:0d:de:35:b4:1a:59:e5:7c:63:75:a7:9f:24: 0a:69:d2:78:38:cd:73:6f:88:c0:52:0c:86:75:6b:3e:42:e9: 9c:06:5f:f0:2b:20:a1:c8:9a:35:f4:00:7b:b0:df:21:a7:ea: bf:a8:d1:54:46:0d:4f:24:24:b1:df:74:94:13:df:e1:97:11: 30:57:51:d7:8a:84:ef:14:ba:eb:64:39:c8:51:3b:5d:8d:d6: ec:a7:a9:88:96:8f:54:b8:f4:4b:cd:5d:19:17:9b:fd:a1:00: f1:a3:00:aa:56:6b:66:41:b8:20:44:bf:ce:1e:cd:77:bc:b4: b5:eb:0c:48:df:8a:dc:a5:ec:ca:b3:be:53:aa:5f:a9:ab:42: a9:28:d7:a6:8e:34:ae:1b:00:23:bd:84:3f:57:4f:1b:9a:63: 9a:82:75:0b:04:d9:c3:7e:4e:63:19:14:15:22:a0:b1:bd:69: 70:2d:2b:e8:a0:f8:b6:9e:85:41:72:00:31:55:24:d5:fd:16: c6:30:b3:db:b6:31:16:15:d4:2a:83:7c:3a:2f:e7:c5:2e:ad: b4:9d:c3:3d:19:e2:0c:59:7f:b8:20:79:1a:32:00:50:d2:1b: 93:5d:48:2a:dc:ec:f8:5e:05:8d:67:78:5f:35:f6:1f:70:67: 50:3b:05:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNTMwMTk1NjUwWhcNMjUwNjA2MTk1NjUwWjAYMRYwFAYD VQQDEw02ODNhMGQ4Mi0wNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubTyxqtXcW9lqmOzSkgS2XLBI0oN+vgfdxPhV7sXsESqKKaX1+4s9DCTYQim WPexaFtJydzJV8gS5jGJJCZ56mDZnplCS6nFnpUpn0ESU+yvS83cqfTIQvkNzrcU JtP1Nq8oHg1FBviXOOs52y8N0KLbHKadZpGvMJQRsN/Y+QXcYQU5kYH7R4mQR768 mtbLlumRuHT5YnTQJs7M3NoC+qHba8I8JdgDwXDD4zezEgopXOGAyc+Ii+d7SMTa AzL80kC+LMGCLpWO0TxnYpyZ8h5AQyssysgoFYKXaiRkbJVc21xG+L/oTBz1O+OL MNKTyInIacvc7nYMiPUi3Vs9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjzS8NW NJ6VU88sLAbj/Ip1j54qMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu9Toxew3eNbQaWeV8Y3WnnyQKadJ4OM1zb4jAUgyGdWs+QumcBl/w KyChyJo19AB7sN8hp+q/qNFURg1PJCSx33SUE9/hlxEwV1HXioTvFLrrZDnIUTtd jdbsp6mIlo9UuPRLzV0ZF5v9oQDxowCqVmtmQbggRL/OHs13vLS16wxI34rcpezK s75Tql+pq0KpKNemjjSuGwAjvYQ/V08bmmOagnULBNnDfk5jGRQVIqCxvWlwLSvo oPi2noVBcgAxVSTV/RbGMLPbtjEWFdQqg3w6L+fFLq20ncM9GeIMWX+4IHkaMgBQ 0huTXUgq3Oz4XgWNZ3hfNfYfcGdQOwWe -----END CERTIFICATE-----Generated at Sat May 31 16:34:00 2025 by rpki-client