$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft File: FTXKeQmuekjAuzjAgnrtdm4w-Co.mft (raw, json) Hash identifier: CgUgrDI25cTc2z9iVoHzs1DuL214vC1wA5AgJltn4kI= Subject key identifier: C8:4A:F5:82:88:A5:44:89:5A:52:54:C0:B7:FB:21:93:3E:B1:84:83 Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A Certificate issuer: /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft Manifest number: 52 Signing time: Sun 01 Jun 2025 06:58:07 +0000 Manifest this update: Sun 01 Jun 2025 06:58:07 +0000 Manifest next update: Sun 08 Jun 2025 06:58:07 +0000 Files and hashes: 1: FTXKeQmuekjAuzjAgnrtdm4w-Co.crl (hash: dnnjfaXCbdhX/JGnYtAJ0Ae2fpnwgR0wceDHCnbyZxA=) 2: A90D181AC36C11EFAF838D35C4F9AE02.roa (hash: qIXjoMWJqdmpLdtv27bH3BBsHVxShzn3gjUvaayskJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Validity Not Before: Jun 1 06:58:07 2025 GMT Not After : Jun 8 06:58:07 2025 GMT Subject: CN=683bf9ff-219f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:83:95:8a:09:e4:19:72:73:7d:21:d7:0b: c1:ea:1a:26:e5:9d:e0:9c:fc:1f:d3:89:14:58:5e: 6f:62:2c:23:8f:99:ec:c9:c9:52:ae:c8:53:41:3e: e5:0a:dc:5e:96:4d:d2:05:03:2a:ec:b0:54:08:b8: 63:0e:24:b2:81:cc:00:81:a2:9f:47:c2:1c:33:d9: bb:1d:3e:a2:68:ed:17:23:fc:cb:a9:be:c7:2d:0d: d7:d1:b7:d2:9a:3c:74:ae:10:59:96:5c:f3:3b:a3: e8:c5:e6:91:27:e2:e1:58:65:41:58:4a:a0:2f:c5: ed:50:4f:27:4c:ca:5c:bf:0d:ff:25:0d:54:09:eb: 53:30:2e:76:4f:23:fc:eb:98:a7:4d:04:78:9e:2b: 94:ee:9e:f8:e3:2d:67:65:39:53:c2:a6:87:68:6a: 29:ed:a0:68:59:ab:52:54:e7:7d:22:01:0a:ce:9b: 40:f8:0f:af:61:91:5c:62:93:13:87:78:76:5b:2a: 97:fe:70:9d:fa:cd:df:9e:77:3b:13:38:d5:b5:20: be:d0:91:ca:92:af:88:35:b1:8d:af:6f:d8:4e:6e: 69:2c:27:02:74:00:67:09:bd:f6:ca:f8:02:4b:ad: 2f:4f:29:a5:ae:06:76:5d:0e:0f:55:31:92:88:1d: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4A:F5:82:88:A5:44:89:5A:52:54:C0:B7:FB:21:93:3E:B1:84:83 X509v3 Authority Key Identifier: keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:88:dc:0d:21:97:38:19:86:e9:2b:95:86:bf:2a:96:52:46: 6e:da:a3:2d:55:96:c0:6a:e0:0e:18:9f:9a:0b:3c:10:61:a2: 1a:8b:51:e7:31:ce:49:37:f6:f1:85:04:20:36:91:b8:fa:21: 0c:52:6d:28:ee:75:a0:42:b6:10:1d:19:3b:55:60:6b:0a:4d: e5:6f:d7:ac:f4:28:38:ed:19:ce:ae:4a:50:ae:e0:08:78:93: 3d:6e:1d:2c:6a:24:37:d1:37:b3:31:3b:49:05:7b:51:fc:81: 9e:b8:81:ff:a4:81:5e:de:27:3d:b4:c0:e1:cf:72:3d:db:eb: d3:35:31:15:fa:43:98:cc:ca:17:4c:e8:c0:0a:3e:8f:55:30: f2:34:dc:04:17:c5:a8:57:3e:45:b4:8d:9a:18:06:5a:2b:1b: 4a:61:1d:18:64:a0:b7:5d:0b:0d:e4:28:5f:51:a7:eb:71:67: 02:89:45:00:ef:00:25:fb:6b:f3:c4:40:74:12:2f:1c:32:62: 73:21:ec:6d:e9:dc:d0:2f:ff:5d:31:c2:d0:59:68:ea:61:6c: 13:de:3b:31:87:06:87:c4:c1:0b:ca:1b:d8:18:63:3f:f2:7a: bb:3a:d3:88:d3:d1:4a:f6:48:3e:3e:7e:a9:e2:14:a1:16:9d: b8:c3:67:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODU0RDExMC8GA1UEBRMoMTUzNUNBNzkwOUFFN0E0OEMwQkIzOEMwODI3QUVENzY2 RTMwRjgyQTAeFw0yNTA2MDEwNjU4MDdaFw0yNTA2MDgwNjU4MDdaMBgxFjAUBgNV BAMTDTY4M2JmOWZmLTIxOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMNoOVignkGXJzfSHXC8HqGiblneCc/B/TiRRYXm9iLCOPmezJyVKuyFNBPuUK 3F6WTdIFAyrssFQIuGMOJLKBzACBop9Hwhwz2bsdPqJo7Rcj/MupvsctDdfRt9Ka PHSuEFmWXPM7o+jF5pEn4uFYZUFYSqAvxe1QTydMyly/Df8lDVQJ61MwLnZPI/zr mKdNBHieK5TunvjjLWdlOVPCpodoaintoGhZq1JU530iAQrOm0D4D69hkVxikxOH eHZbKpf+cJ36zd+edzsTONW1IL7QkcqSr4g1sY2vb9hObmksJwJ0AGcJvfbK+AJL rS9PKaWuBnZdDg9VMZKIHSc1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyEr1goil RIlaUlTAt/shkz6xhIMwHwYDVR0jBBgwFoAUFTXKeQmuekjAuzjAgnrtdm4w+Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0RGMzg5OERFQzM2 QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtqQXV6akFnbnJ0ZG00dy1D by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlRYS2VRbXVla2pBdXpqQWducnRkbTR3LUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NTREL0RGMzg5OERFQzM2QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtq QXV6akFnbnJ0ZG00dy1Dby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqI3A0hlzgZhukrlYa/KpZSRm7aoy1VlsBq4A4Yn5oLPBBhohqLUecx zkk39vGFBCA2kbj6IQxSbSjudaBCthAdGTtVYGsKTeVv16z0KDjtGc6uSlCu4Ah4 kz1uHSxqJDfRN7MxO0kFe1H8gZ64gf+kgV7eJz20wOHPcj3b69M1MRX6Q5jMyhdM 6MAKPo9VMPI03AQXxahXPkW0jZoYBlorG0phHRhkoLddCw3kKF9Rp+txZwKJRQDv ACX7a/PEQHQSLxwyYnMh7G3p3NAv/10xwtBZaOphbBPeOzGHBofEwQvKG9gYYz/y ers604jT0Ur2SD4+fqniFKEWnbjDZ8U= -----END CERTIFICATE-----Generated at Mon Jun 2 21:03:18 2025 by rpki-client