$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: /zXqCPuWEbOuKc5P/60ejaLyaKGqnA4fivaorkGPF2M= Subject key identifier: F3:BC:97:1C:6E:A6:80:C2:EC:74:6F:39:F5:5C:76:89:15:87:D7:0B Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02A0 Signing time: Sat 31 May 2025 01:49:44 +0000 Manifest this update: Sat 31 May 2025 01:49:43 +0000 Manifest next update: Sat 07 Jun 2025 01:49:43 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: gt6o2qP7F6P+ZQvC/pE/ECg5Av+PClDIGzh/jYS+RdY=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: DeTJWRmDeKmiEdEbaqf7bVSh2DO8AXjNSQova+ZvrBU=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: May 31 01:49:43 2025 GMT Not After : Jun 7 01:49:43 2025 GMT Subject: CN=683a6038-4be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:c9:e0:80:2d:29:c3:e3:19:08:f3:38:c6: aa:ae:5a:23:fd:a8:d8:4a:31:f5:de:f6:2c:8d:e9: ee:e4:21:34:44:3d:d3:34:aa:80:7c:3c:e3:e1:93: bc:8d:79:61:20:93:e8:16:bc:4e:87:f3:b5:93:65: 1e:a6:09:d0:a2:c0:5d:b1:dd:b4:32:42:b1:82:a2: f2:d2:4d:87:45:1a:6b:c3:4a:6d:d1:d0:05:ed:15: 5d:70:8a:69:c5:71:a3:3d:ea:d1:2d:a8:69:67:5e: ee:4f:00:b6:e6:01:5c:02:d6:2e:4b:b7:d1:dc:b3: 6a:5d:b9:cd:4c:4a:fd:c1:a9:02:7c:63:a3:7a:cc: 59:2b:d4:d5:2d:bd:2e:6e:2b:1c:32:80:dd:2b:8c: b6:71:b1:89:84:4a:7b:1e:7c:a5:d9:a4:7b:d9:cc: 62:b7:1f:83:97:a9:d8:5a:bc:15:0d:e3:dc:a9:4a: 55:bc:16:a2:1a:14:36:dc:7c:a6:f7:43:a3:0d:71: 35:bc:07:1f:8e:23:d4:e4:b3:14:42:90:78:ac:6f: 57:24:7a:b2:ef:28:8e:ed:2b:d1:bc:f6:bc:2c:01: 14:ec:e0:66:e8:05:d6:64:ad:a9:57:b8:40:40:1b: 9d:ff:19:60:5b:22:dd:e2:83:ff:5b:18:d2:b5:4e: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BC:97:1C:6E:A6:80:C2:EC:74:6F:39:F5:5C:76:89:15:87:D7:0B X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:7c:1e:6c:a5:d9:e7:c8:77:cb:ab:02:89:45:4e:65:58: e9:3c:b5:e0:cf:2a:d4:87:c7:20:e2:8d:f7:f4:40:85:54:5f: 89:5d:c7:f7:cc:fb:86:ee:54:84:fd:c4:7f:69:ff:f1:53:df: 8e:65:b8:f2:4a:b9:66:c2:90:a2:0e:65:90:ad:c5:f9:84:b1: 4f:7f:f9:c3:9b:da:36:51:50:0f:45:de:88:40:47:30:ca:f4: af:5c:d6:5d:f2:38:9b:4e:bd:c3:35:3f:83:6c:1b:40:9a:0c: cd:a6:de:69:15:39:19:f4:40:aa:1d:0b:25:da:96:48:64:18: 79:f9:e5:05:5b:47:15:46:84:dd:4e:b6:2a:63:a9:e4:ee:db: 3e:fe:a0:f1:95:9b:e2:2e:7e:fe:b3:48:6d:10:2c:a7:75:95: c4:2d:b7:24:6a:91:80:57:6b:c8:1e:15:7c:06:5e:46:b3:a0: 58:f9:62:84:31:dd:e2:42:3e:da:8e:7d:ee:87:0f:ca:a8:d1: e4:49:1a:20:fb:ea:de:0f:60:c1:bc:34:7f:b7:ab:37:50:df: 20:75:fe:c9:7e:03:07:42:8a:d4:2c:50:7b:0b:71:74:b3:31: f8:f5:92:9b:da:a6:02:fb:9e:10:8e:1f:1c:b7:78:31:3e:f7: a4:14:58:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwNTMxMDE0OTQzWhcNMjUwNjA3MDE0OTQzWjAYMRYwFAYD VQQDEw02ODNhNjAzOC00YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPLJ4IAtKcPjGQjzOMaqrloj/ajYSjH13vYsjenu5CE0RD3TNKqAfDzj4ZO8 jXlhIJPoFrxOh/O1k2UepgnQosBdsd20MkKxgqLy0k2HRRprw0pt0dAF7RVdcIpp xXGjPerRLahpZ17uTwC25gFcAtYuS7fR3LNqXbnNTEr9wakCfGOjesxZK9TVLb0u biscMoDdK4y2cbGJhEp7Hnyl2aR72cxitx+Dl6nYWrwVDePcqUpVvBaiGhQ23Hym 90OjDXE1vAcfjiPU5LMUQpB4rG9XJHqy7yiO7SvRvPa8LAEU7OBm6AXWZK2pV7hA QBud/xlgWyLd4oP/WxjStU7IUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPO8lxxu poDC7HRvOfVcdokVh9cLMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAe3webKXZ58h3y6sCiUVOZVjpPLXgzyrUh8cg4o339ECFVF+JXcf3 zPuG7lSE/cR/af/xU9+OZbjySrlmwpCiDmWQrcX5hLFPf/nDm9o2UVAPRd6IQEcw yvSvXNZd8jibTr3DNT+DbBtAmgzNpt5pFTkZ9ECqHQsl2pZIZBh5+eUFW0cVRoTd TrYqY6nk7ts+/qDxlZviLn7+s0htECyndZXELbckapGAV2vIHhV8Bl5Gs6BY+WKE Md3iQj7ajn3uhw/KqNHkSRog++reD2DBvDR/t6s3UN8gdf7JfgMHQorULFB7C3F0 szH49ZKb2qYC+54Qjh8ct3gxPvekFFgd -----END CERTIFICATE-----Generated at Sat May 31 14:53:19 2025 by rpki-client