$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: 7tQ7q2KKeAz8nvyY1mGMCWDcwC9Bbyq9BUY+GZJBJUI= Subject key identifier: B3:11:23:D6:98:1A:F8:06:7F:BA:85:E3:AA:FA:61:A6:95:5A:4B:A8 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: A1 Signing time: Tue 03 Jun 2025 06:00:46 +0000 Manifest this update: Tue 03 Jun 2025 06:00:45 +0000 Manifest next update: Tue 10 Jun 2025 06:00:45 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: UiD1uLugp9tCwghNr50LcwcpxBYgxy8wtdquzCEtlqM=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: t4ZfZhgJCrUUcwGkxWGjP42WHOWCXQN3AYaH4hz5LAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Jun 3 06:00:45 2025 GMT Not After : Jun 10 06:00:45 2025 GMT Subject: CN=683e8f8d-1cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:46:6b:ce:e7:21:d4:f8:f3:0a:2d:b1:f9: 12:89:f2:5a:ed:66:cf:12:79:40:a6:d0:ea:05:a2: 67:e6:c3:9f:a0:6c:d2:26:13:b8:c6:ce:d7:8a:0a: ed:3f:dc:69:e5:34:d7:00:fd:b2:26:d8:48:84:fb: c8:4e:a7:69:84:93:cc:dc:36:6f:d3:d7:aa:12:c9: aa:81:66:b9:76:ef:eb:6f:08:0a:d0:60:23:ef:f5: d1:1c:ae:6a:cb:4e:8f:88:f0:d5:ee:53:e0:ae:88: b4:77:bc:71:54:ad:13:53:24:46:0c:84:ff:59:46: 4a:b4:f2:58:55:a7:49:9f:1b:b8:7e:c1:2c:66:5f: 3b:a4:df:e9:d8:fd:8a:3a:a8:18:5f:5a:ba:cc:d8: 3d:e3:23:91:aa:74:f3:1d:99:40:3a:81:cb:ba:0c: c8:60:a8:fa:04:b1:52:f3:a6:1d:80:a5:52:8c:f9: 85:f8:72:89:ed:fa:48:66:b5:74:e7:27:79:d7:60: d2:1e:38:d0:8b:dc:4d:a7:f3:05:db:93:92:4a:8f: 8e:19:e1:4e:1a:32:96:e0:85:f8:ec:65:b9:63:60: 84:01:54:0a:e1:11:63:b1:87:25:0b:2d:ad:5f:26: df:a6:5f:69:6d:a7:c5:8d:1c:91:9a:a9:ba:6f:0c: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:11:23:D6:98:1A:F8:06:7F:BA:85:E3:AA:FA:61:A6:95:5A:4B:A8 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fb:de:ba:8c:ad:ac:e7:2a:91:70:33:44:2a:11:34:e0:63: 5b:ec:77:69:9c:1a:8b:7a:c6:21:9c:72:1f:f2:a6:85:91:61: 8a:94:3c:dc:34:05:2c:7f:fc:41:a6:e8:a9:1f:70:8c:05:91: e0:90:51:32:7f:ba:b7:f6:59:fa:ac:db:39:6f:cb:02:45:e3: 4c:a8:60:cb:d7:c1:da:f0:f7:68:86:56:d6:b7:10:2e:67:38: 26:96:b7:8b:ef:01:ff:f5:6d:4f:37:22:80:c6:c2:62:7f:e6: 8f:64:d3:d7:49:cd:d5:c4:1a:fb:3a:7b:2a:ba:45:38:0d:9a: ac:95:18:f3:44:68:47:7a:a3:ee:7d:f3:b9:6e:ae:9a:5b:a6: c1:fc:12:a6:a3:7b:29:6f:7d:b3:95:90:2c:1c:f6:ae:c3:53: e2:77:f3:c1:02:20:77:4e:c8:70:db:1c:e0:9a:ec:c8:81:a5: cc:55:98:37:a9:42:aa:7b:ee:0c:d8:0a:47:15:f0:0d:9f:b0: eb:54:2e:ca:6e:6e:6f:20:38:8f:97:9c:46:a4:80:7c:57:30: 84:d7:e5:ff:40:33:1f:ca:6f:35:10:e7:0c:d8:a3:36:76:ff: af:a1:70:77:6c:fe:39:7b:f6:4f:40:ea:80:44:7b:57:fd:82: fb:0d:8f:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwNjAzMDYwMDQ1WhcNMjUwNjEwMDYwMDQ1WjAYMRYwFAYD VQQDEw02ODNlOGY4ZC0xY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1xGa87nIdT48wotsfkSifJa7WbPEnlAptDqBaJn5sOfoGzSJhO4xs7Xigrt P9xp5TTXAP2yJthIhPvITqdphJPM3DZv09eqEsmqgWa5du/rbwgK0GAj7/XRHK5q y06PiPDV7lPgroi0d7xxVK0TUyRGDIT/WUZKtPJYVadJnxu4fsEsZl87pN/p2P2K OqgYX1q6zNg94yORqnTzHZlAOoHLugzIYKj6BLFS86YdgKVSjPmF+HKJ7fpIZrV0 5yd512DSHjjQi9xNp/MF25OSSo+OGeFOGjKW4IX47GW5Y2CEAVQK4RFjsYclCy2t Xybfpl9pbafFjRyRmqm6bwztwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMRI9aY GvgGf7qF46r6YaaVWkuoMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo+966jK2s5yqRcDNEKhE04GNb7HdpnBqLesYhnHIf8qaFkWGKlDzc NAUsf/xBpuipH3CMBZHgkFEyf7q39ln6rNs5b8sCReNMqGDL18Ha8PdohlbWtxAu ZzgmlreL7wH/9W1PNyKAxsJif+aPZNPXSc3VxBr7OnsqukU4DZqslRjzRGhHeqPu ffO5bq6aW6bB/BKmo3spb32zlZAsHPauw1Pid/PBAiB3Tshw2xzgmuzIgaXMVZg3 qUKqe+4M2ApHFfANn7DrVC7Kbm5vIDiPl5xGpIB8VzCE1+X/QDMfym81EOcM2KM2 dv+voXB3bP45e/ZPQOqARHtX/YL7DY+d -----END CERTIFICATE-----Generated at Tue Jun 3 23:57:48 2025 by rpki-client