$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: WhACtvrm4yVQrJc8QoZDTQAbUiEWS15fQIZXPpVqwVs= Subject key identifier: F6:4D:D4:1E:67:C5:3E:C2:4E:99:C6:C6:4F:44:D5:99:9A:83:FE:E4 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 030A Signing time: Mon 09 Jun 2025 00:48:08 +0000 Manifest this update: Mon 09 Jun 2025 00:48:07 +0000 Manifest next update: Mon 16 Jun 2025 00:48:07 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: X6sDyUDNoQZ6kuuywVfBLJ2BSYC88VdTfnQKf/EvrkE=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Jun 9 00:48:07 2025 GMT Not After : Jun 16 00:48:07 2025 GMT Subject: CN=68462f47-87f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:df:c8:42:cd:93:6d:46:00:ba:2a:b3:6f: 32:39:30:7b:70:0c:50:0f:52:d5:83:09:b5:79:a4: 7d:99:9d:b3:f6:e5:be:71:55:f7:dd:88:99:df:45: d6:b9:c0:18:0f:ea:4a:ce:9f:02:8a:59:15:a3:7f: 74:47:a7:3f:a0:20:c2:99:b2:25:de:35:75:a0:8a: cf:a2:f0:3e:1f:47:18:e2:20:b9:5f:93:63:99:4f: dc:6b:53:cf:b2:81:4a:67:47:9e:01:6d:64:ae:80: 56:2d:8d:f8:bd:e9:5e:b4:16:df:19:52:2d:25:4f: 54:e9:96:c9:85:6b:4a:12:be:c9:d0:bf:0c:ac:48: d1:f7:ae:37:6b:84:48:a0:af:35:ec:d5:8a:82:1b: 4e:7c:81:26:be:35:e6:ce:9e:e2:dd:0e:13:13:09: 43:e5:00:da:a0:99:2e:f5:aa:a0:15:e0:f7:14:1b: 22:57:bd:f0:d4:63:8a:d5:54:a1:89:82:40:5e:14: 2c:04:8a:55:c2:6a:1b:85:31:86:87:3d:c9:06:79: 63:e9:7a:14:20:b2:8c:c1:38:7c:10:9e:8d:78:97: 30:7d:83:9e:48:a5:23:a4:7d:7b:67:3b:65:8a:e0: 6a:c9:fd:d6:0e:77:7e:49:13:6b:02:d6:d7:23:a3: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:D4:1E:67:C5:3E:C2:4E:99:C6:C6:4F:44:D5:99:9A:83:FE:E4 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a9:66:97:34:70:4d:9e:da:ad:59:93:3c:b6:6c:77:da:86: 32:4b:34:53:07:fd:c9:87:89:f5:97:52:fb:58:c9:ca:db:12: bf:61:00:5b:a1:ee:1d:22:28:64:c0:6a:9a:df:cc:02:55:c6: 58:49:da:8f:f1:8d:1a:ca:e5:a3:6a:4b:b8:db:a7:d0:7a:e9: 16:83:62:a5:cf:ab:b6:10:7e:84:cd:5d:29:bc:83:ab:a7:ae: 37:be:78:c2:32:f6:bd:d5:4e:69:ad:a4:8c:e6:1b:a2:c3:bd: 8a:95:74:b6:d9:cc:d6:9b:a8:63:35:02:f8:13:77:c3:87:98: 4d:05:d1:3f:e3:77:45:20:1b:b2:48:98:1a:c2:0e:da:a5:af: 44:1a:9b:65:b8:a3:4f:26:31:87:34:91:82:f1:1d:90:3e:14: b0:e6:29:61:60:f6:e7:f3:57:05:24:72:fd:bb:ef:11:76:77: 75:e6:1a:ac:f7:cb:e5:74:ad:61:08:71:42:61:60:58:44:bf: ca:92:cd:be:db:07:9a:4e:cc:9b:da:18:cf:59:3f:ac:9a:72: d5:3b:eb:1f:97:79:80:76:21:57:18:a9:0d:cc:26:e7:cf:8e: 64:8b:11:43:ce:46:29:7b:f2:6b:c2:51:56:68:b0:9e:d1:5f: d0:f9:f8:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUwNjA5MDA0ODA3WhcNMjUwNjE2MDA0ODA3WjAYMRYwFAYD VQQDEw02ODQ2MmY0Ny04N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EnfyELNk21GALoqs28yOTB7cAxQD1LVgwm1eaR9mZ2z9uW+cVX33YiZ30XW ucAYD+pKzp8CilkVo390R6c/oCDCmbIl3jV1oIrPovA+H0cY4iC5X5NjmU/ca1PP soFKZ0eeAW1kroBWLY34veletBbfGVItJU9U6ZbJhWtKEr7J0L8MrEjR9643a4RI oK817NWKghtOfIEmvjXmzp7i3Q4TEwlD5QDaoJku9aqgFeD3FBsiV73w1GOK1VSh iYJAXhQsBIpVwmobhTGGhz3JBnlj6XoUILKMwTh8EJ6NeJcwfYOeSKUjpH17Zztl iuBqyf3WDnd+SRNrAtbXI6PyRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZN1B5n xT7CTpnGxk9E1Zmag/7kMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwqWaXNHBNntqtWZM8tmx32oYySzRTB/3Jh4n1l1L7WMnK2xK/YQBb oe4dIihkwGqa38wCVcZYSdqP8Y0ayuWjaku426fQeukWg2Klz6u2EH6EzV0pvIOr p643vnjCMva91U5praSM5huiw72KlXS22czWm6hjNQL4E3fDh5hNBdE/43dFIBuy SJgawg7apa9EGptluKNPJjGHNJGC8R2QPhSw5ilhYPbn81cFJHL9u+8Rdnd15hqs 98vldK1hCHFCYWBYRL/Kks2+2weaTsyb2hjPWT+smnLVO+sfl3mAdiFXGKkNzCbn z45kixFDzkYpe/JrwlFWaLCe0V/Q+fgO -----END CERTIFICATE-----Generated at Mon Jun 9 14:15:33 2025 by rpki-client