$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft File: FOUWOGcQb85FUq7s-x8gJmHm310.mft (raw, json) Hash identifier: Le/LDVyzCvECbohl7Ihu7/QeGLjyTOApTPnqdPlTzZA= Subject key identifier: F1:20:11:EC:3B:F5:D0:35:83:8D:61:23:DC:33:4A:35:54:BC:AA:2C Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft Manifest number: 0680 Signing time: Fri 30 May 2025 22:33:16 +0000 Manifest this update: Fri 30 May 2025 22:33:15 +0000 Manifest next update: Fri 06 Jun 2025 22:33:15 +0000 Files and hashes: 1: FOUWOGcQb85FUq7s-x8gJmHm310.crl (hash: LX0UWlQQZh1iC8YLkCWd64wDFAm8F4PdO3COovXAECs=) 2: 81D7961ADD9211EDA5A21671C4F9AE02.roa (hash: gNRYTYMwj494RNxbNtDWuzvBMRPNNtKBT2cX5Pzvaas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F9F6, serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D Validity Not Before: May 30 22:33:15 2025 GMT Not After : Jun 6 22:33:15 2025 GMT Subject: CN=683a322c-07ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:fe:42:e5:8f:2f:10:d2:ca:41:64:5f:7b: 00:f6:ed:e4:36:f2:52:52:1b:3a:c8:38:be:c8:ea: 3c:12:a8:d1:f4:3a:62:8c:cf:7e:5d:f3:05:21:65: 28:c0:b5:c2:14:89:95:e8:5d:c5:17:ea:ce:03:0f: d5:2a:94:32:14:8b:b7:45:35:e1:d2:23:48:32:17: c4:ef:aa:14:3c:24:d2:e5:72:12:b6:07:8f:2d:61: 09:f4:f2:0e:a4:22:65:85:17:2d:75:50:9f:12:e5: 49:27:0a:71:51:6a:a0:13:1a:d7:7a:e6:9f:c4:da: 0b:ea:ed:c8:56:98:41:01:23:20:4e:76:9d:1a:37: 6f:2d:b4:82:32:38:54:cc:3f:f2:16:9d:21:c2:d8: 1c:5b:14:d3:5f:74:f2:1f:6f:b3:0c:0b:64:b3:75: 85:07:e7:d4:4f:13:5a:21:1d:42:e7:9c:65:11:ff: 64:ef:2f:5d:a1:87:fd:07:4a:5a:d4:23:44:bc:7a: 6e:ea:f3:31:79:2e:aa:27:cd:4e:24:bc:e3:9d:98: 5f:45:93:24:a1:36:db:09:5a:43:c5:10:b8:0b:63: 44:af:ec:2d:e1:26:82:c1:ca:f1:7c:4c:8d:3d:69: 40:59:fc:a1:41:dd:a2:df:e9:e4:5d:cd:dc:4e:3b: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:11:EC:3B:F5:D0:35:83:8D:61:23:DC:33:4A:35:54:BC:AA:2C X509v3 Authority Key Identifier: keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e4:ee:e6:38:50:91:e2:eb:12:b1:a6:0a:f2:08:3c:e6:ad: 65:99:a7:b5:62:57:3c:9a:c5:fd:ce:37:a7:1a:7d:cb:54:e9: a2:6f:8a:27:26:c8:73:32:b9:cc:c2:08:2d:94:0b:63:4b:73: 53:36:c0:13:71:e1:cd:48:2c:18:86:f4:0b:e4:e4:24:3a:68: 43:b5:e6:96:8d:ab:15:ff:cf:90:fb:af:0c:a3:ca:f0:c4:44: 0c:e9:be:d8:54:0d:18:0a:6d:4b:cc:4a:d7:48:7b:7e:0f:75: d5:51:c0:ea:70:67:7a:68:72:79:28:ba:a4:77:95:03:1f:de: b3:28:29:b3:69:01:b3:60:f9:e4:56:9b:d5:b0:0b:65:1b:02: c6:63:08:85:93:ed:8a:4b:b2:b7:b7:35:8a:42:0e:75:59:47: 1d:06:a7:d5:f5:e2:55:a3:ce:2e:e8:c1:14:4c:32:4e:4b:59: b8:c2:1a:f3:28:06:b2:41:6f:44:23:ff:87:65:3c:d1:62:1f: 9f:88:cd:e9:6c:15:c5:98:94:61:7c:dd:8f:66:22:d7:fc:1b: 19:06:8a:61:76:12:37:bd:63:05:67:3d:d3:af:66:b8:ca:6c: aa:61:27:a2:03:49:4a:4e:eb:27:4a:65:e5:c5:79:d8:7a:f8: 07:34:12:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5RjYxMTAvBgNVBAUTKDE0RTUxNjM4NjcxMDZGQ0U0NTUyQUVFQ0ZCMUYyMDI2 NjFFNkRGNUQwHhcNMjUwNTMwMjIzMzE1WhcNMjUwNjA2MjIzMzE1WjAYMRYwFAYD VQQDEw02ODNhMzIyYy0wN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CT+QuWPLxDSykFkX3sA9u3kNvJSUhs6yDi+yOo8EqjR9DpijM9+XfMFIWUo wLXCFImV6F3FF+rOAw/VKpQyFIu3RTXh0iNIMhfE76oUPCTS5XIStgePLWEJ9PIO pCJlhRctdVCfEuVJJwpxUWqgExrXeuafxNoL6u3IVphBASMgTnadGjdvLbSCMjhU zD/yFp0hwtgcWxTTX3TyH2+zDAtks3WFB+fUTxNaIR1C55xlEf9k7y9doYf9B0pa 1CNEvHpu6vMxeS6qJ81OJLzjnZhfRZMkoTbbCVpDxRC4C2NEr+wt4SaCwcrxfEyN PWlAWfyhQd2i3+nkXc3cTjss2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEgEew7 9dA1g41hI9wzSjVUvKosMB8GA1UdIwQYMBaAFBTlFjhnEG/ORVKu7PsfICZh5t9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjlGNi9GNjU1RjdGNjdB NjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4NUZVcTdzLXg4Z0ptSG0z MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPVVdPR2NRYjg1RlVxN3MteDhnSm1IbTMxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjlGNi9GNjU1RjdGNjdBNjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4 NUZVcTdzLXg4Z0ptSG0zMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB65O7mOFCR4usSsaYK8gg85q1lmae1Ylc8msX9zjenGn3LVOmib4on JshzMrnMwggtlAtjS3NTNsATceHNSCwYhvQL5OQkOmhDteaWjasV/8+Q+68Mo8rw xEQM6b7YVA0YCm1LzErXSHt+D3XVUcDqcGd6aHJ5KLqkd5UDH96zKCmzaQGzYPnk VpvVsAtlGwLGYwiFk+2KS7K3tzWKQg51WUcdBqfV9eJVo84u6MEUTDJOS1m4whrz KAayQW9EI/+HZTzRYh+fiM3pbBXFmJRhfN2PZiLX/BsZBophdhI3vWMFZz3Tr2a4 ymyqYSeiA0lKTusnSmXlxXnYevgHNBJg -----END CERTIFICATE-----Generated at Sat May 31 16:34:01 2025 by rpki-client