$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json) Hash identifier: 0llNvOIlhA4RwUvnVp/EMlA6CZe6rJh4Z559hhJHn+Q= Subject key identifier: E3:82:7A:CA:AE:85:1E:1E:95:1F:47:8E:8A:9B:B8:A9:B4:71:48:8D Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft Manifest number: 12F8 Signing time: Sat 31 May 2025 18:01:26 +0000 Manifest this update: Sat 31 May 2025 18:01:26 +0000 Manifest next update: Sat 07 Jun 2025 18:01:26 +0000 Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: TcDZ7akjFipFCaqMiKKyq3U0o0GDG/kEWbKI+v1Exa0=) 2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: May 31 18:01:26 2025 GMT Not After : Jun 7 18:01:26 2025 GMT Subject: CN=683b43f6-b0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:38:39:23:c6:e2:24:86:f5:ef:69:d2:eb: 01:44:9d:c6:82:ab:f6:96:1e:ea:15:71:ce:a6:e4: a2:70:31:67:fd:a7:64:a4:f7:c0:51:68:be:45:ec: c3:f2:c8:2a:1f:27:3c:ec:4d:88:76:90:29:15:45: 0e:d6:87:46:3e:c4:17:99:eb:ae:d6:df:4f:e3:49: c7:04:04:87:8d:10:2e:48:28:3c:14:cd:64:cb:78: ea:99:4c:b4:7f:05:37:fd:2a:f5:85:6b:71:f3:e6: 10:8e:6d:a1:fd:52:90:6e:aa:c7:9d:9b:66:95:95: d6:8c:7b:7c:f3:61:b7:83:f9:d1:01:66:33:7d:ab: 03:de:93:0d:60:87:3b:30:a9:30:20:57:89:e2:b2: 72:73:dc:62:df:0c:df:f9:a2:93:91:5c:05:05:5e: 3f:b0:43:9f:0d:ea:11:e7:e0:04:cf:75:86:d4:f7: 3b:80:c6:ee:c5:14:7a:68:3a:0a:10:d2:c7:e1:75: 8b:82:0f:7b:7f:51:c8:6b:9a:f5:25:9d:d0:59:cf: 4f:e4:e8:d4:29:20:54:3a:32:8f:ba:0a:44:c4:b5: b0:e6:2b:09:8c:0c:1d:62:cc:e2:2e:34:50:a6:c7: ca:d0:cd:79:b6:1f:41:a2:8f:31:65:aa:6a:11:41: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:82:7A:CA:AE:85:1E:1E:95:1F:47:8E:8A:9B:B8:A9:B4:71:48:8D X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:05:5a:8e:d9:80:06:9f:ef:0a:f6:71:17:ed:f4:0c:ff:55: bb:f0:a2:80:93:cf:ca:c2:30:35:d0:cd:68:3d:e4:25:46:0e: a2:2c:4a:97:db:a7:e1:9d:b3:64:82:58:fb:e6:ea:29:29:70: 60:03:fa:db:5f:ca:c5:d4:7c:c3:85:aa:df:e1:f9:4e:eb:d9: 76:21:75:46:76:b4:05:85:3f:85:0c:d4:a8:d2:ed:6f:f9:3c: c6:fd:ee:2e:cc:cf:b8:53:c1:22:87:c9:37:2d:96:11:7c:2e: 26:2a:8f:1e:eb:e8:bf:fb:59:02:77:87:9f:22:d4:de:a3:76: 07:2a:0e:dd:0e:51:75:07:ce:11:41:24:3f:8a:dc:d7:0b:46: f8:8b:46:07:c4:7e:b6:3e:cb:25:cd:ba:b3:dc:9d:5f:e6:15: 18:f3:42:dc:b4:5a:4e:3d:eb:c4:1f:21:c2:54:a2:a0:24:75: 2e:18:6a:91:80:89:1a:54:60:0a:60:48:64:18:f1:6b:74:4a: 28:f2:77:bc:3b:26:c9:99:9f:84:37:88:be:55:e5:0f:2c:cc: 33:16:a6:c7:5d:5f:97:5c:c3:95:8c:26:02:20:28:ac:53:dc: 63:49:e3:9a:53:b1:43:4a:56:2b:93:e0:c0:b1:c9:7e:03:34: 34:2c:45:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKDE0QzQ3NUNGRDI4Qjc3RUMxMTUyQzJFRjMzRTVFNDNF MTc1QUMyMjEwHhcNMjUwNTMxMTgwMTI2WhcNMjUwNjA3MTgwMTI2WjAYMRYwFAYD VQQDEw02ODNiNDNmNi1iMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZw4OSPG4iSG9e9p0usBRJ3Ggqv2lh7qFXHOpuSicDFn/adkpPfAUWi+RezD 8sgqHyc87E2IdpApFUUO1odGPsQXmeuu1t9P40nHBASHjRAuSCg8FM1ky3jqmUy0 fwU3/Sr1hWtx8+YQjm2h/VKQbqrHnZtmlZXWjHt882G3g/nRAWYzfasD3pMNYIc7 MKkwIFeJ4rJyc9xi3wzf+aKTkVwFBV4/sEOfDeoR5+AEz3WG1Pc7gMbuxRR6aDoK ENLH4XWLgg97f1HIa5r1JZ3QWc9P5OjUKSBUOjKPugpExLWw5isJjAwdYsziLjRQ psfK0M15th9Boo8xZapqEUHuKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOCesqu hR4elR9HjoqbuKm0cUiNMB8GA1UdIwQYMBaAFBTEdc/Si3fsEVLC7zPl5D4XWsIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQtd1JVc0x2TS1Ya1BoZGF3 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQt d1JVc0x2TS1Ya1BoZGF3aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLBVqO2YAGn+8K9nEX7fQM/1W78KKAk8/KwjA10M1oPeQlRg6iLEqX 26fhnbNkglj75uopKXBgA/rbX8rF1HzDharf4flO69l2IXVGdrQFhT+FDNSo0u1v +TzG/e4uzM+4U8Eih8k3LZYRfC4mKo8e6+i/+1kCd4efItTeo3YHKg7dDlF1B84R QSQ/itzXC0b4i0YHxH62Psslzbqz3J1f5hUY80LctFpOPevEHyHCVKKgJHUuGGqR gIkaVGAKYEhkGPFrdEoo8ne8OybJmZ+EN4i+VeUPLMwzFqbHXV+XXMOVjCYCICis U9xjSeOaU7FDSlYrk+DAscl+AzQ0LEW+ -----END CERTIFICATE-----Generated at Mon Jun 2 07:12:15 2025 by rpki-client