$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft File: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json) Hash identifier: bwaGS8wgW4aCAdngYthax8O/v1DP0YEkRn/VmsC6MXA= Subject key identifier: FC:19:47:C1:C4:FD:7A:96:19:C5:41:C0:92:68:DE:99:BA:24:8E:82 Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA Certificate issuer: /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft Manifest number: 08A4 Signing time: Fri 30 May 2025 20:44:34 +0000 Manifest this update: Fri 30 May 2025 20:44:34 +0000 Manifest next update: Fri 06 Jun 2025 20:44:34 +0000 Files and hashes: 1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: ouJEwOYgpJbsRjwNvmP7aB50CEFdofUtOUQsGpibqII=) 2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: vDSnr7GTN6AmKRXToXihl2BttDhcvVIF1CJ22BM3AS0=) 3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: 6D+05PkkEBLLvv2UgX08yRx5GMb9vhbOIwJ+Ku99Ia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Validity Not Before: May 30 20:44:34 2025 GMT Not After : Jun 6 20:44:34 2025 GMT Subject: CN=683a18b2-054b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:6a:55:e3:8c:38:23:ae:47:aa:5d:70:67: 2f:8c:f9:0b:7c:f4:69:93:d7:88:0b:aa:2a:28:65: b9:a8:91:43:43:de:f5:4f:fa:41:d1:df:56:a7:c3: ff:2b:89:08:5f:bc:7b:86:54:1b:5c:26:b3:17:77: 0c:03:bc:02:35:df:0c:61:4d:05:b6:a1:d8:73:40: 84:33:10:8a:05:93:67:57:95:cf:31:fb:2f:71:e9: da:36:85:f1:e1:81:01:de:4b:96:01:a0:e1:57:a9: 1e:74:ea:58:e5:6d:00:41:ac:9f:a3:fd:f0:a9:01: 78:ee:ae:3a:67:6e:03:43:84:36:30:ef:f9:98:38: d8:f8:5a:1a:38:21:fe:05:4e:af:cd:42:fb:a0:4d: 47:c6:07:33:9f:bf:49:44:0a:5e:b0:5a:c9:2c:18: c7:37:b9:07:4f:a7:ea:a1:8e:b2:d3:0d:f3:62:d9: ad:a8:9f:49:7b:c3:26:cc:cf:bf:8f:2b:28:6a:aa: 93:e3:e3:be:b7:96:4b:30:9b:8a:b7:ad:c3:40:1f: b6:51:d0:e0:d0:f8:a5:35:49:35:5b:67:87:22:36: 09:be:6c:4a:fb:76:fb:b5:af:c8:4b:0c:33:6a:1c: fd:ed:c5:13:53:6d:85:06:21:6f:00:72:02:6a:9d: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:47:C1:C4:FD:7A:96:19:C5:41:C0:92:68:DE:99:BA:24:8E:82 X509v3 Authority Key Identifier: keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:5f:cb:e1:b0:f1:30:32:08:d1:e2:15:95:30:4d:d7:96:cb: 8d:96:0b:80:fa:61:fc:60:33:7b:94:17:de:e2:52:00:28:16: 05:5c:bf:5f:4a:e1:23:80:a6:3d:ad:3e:da:0f:11:50:5c:d2: aa:a1:75:19:23:1a:22:11:9a:bf:69:85:08:a4:75:53:b8:77: d7:03:22:a2:c0:ad:a9:29:79:7a:19:e1:0d:97:e0:77:78:f5: d9:0e:a5:87:22:f4:2d:83:19:8c:13:20:6c:ab:e1:68:34:3a: 96:3d:95:19:c0:fb:5b:67:dc:4f:40:fb:a0:a6:cf:91:33:95: 2f:62:7e:11:e7:34:7c:32:e8:36:57:b2:e0:24:98:0b:94:53: 25:0a:45:bc:20:3c:14:70:d3:c6:3c:5d:ab:fe:05:d0:5d:52: 09:5e:db:04:8f:c3:5a:cc:a5:8b:53:dc:f7:11:38:dc:9b:58: be:b5:d8:96:1a:67:b9:7d:e1:cb:08:b1:6a:e5:e0:00:f4:c2: a1:83:0d:bf:7c:2f:5a:4b:50:6f:80:a8:5b:99:fb:38:09:79: 37:cc:5f:fb:75:0a:03:45:88:9b:ed:1a:e8:e6:7e:7d:4e:44: 23:5e:b8:b7:27:2b:ec:7a:89:f2:13:c9:6b:5a:e5:45:93:48: 53:08:33:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx NTlEMjc4QkEwHhcNMjUwNTMwMjA0NDM0WhcNMjUwNjA2MjA0NDM0WjAYMRYwFAYD VQQDEw02ODNhMThiMi0wNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AZqVeOMOCOuR6pdcGcvjPkLfPRpk9eIC6oqKGW5qJFDQ971T/pB0d9Wp8P/ K4kIX7x7hlQbXCazF3cMA7wCNd8MYU0FtqHYc0CEMxCKBZNnV5XPMfsvcenaNoXx 4YEB3kuWAaDhV6kedOpY5W0AQayfo/3wqQF47q46Z24DQ4Q2MO/5mDjY+FoaOCH+ BU6vzUL7oE1Hxgczn79JRApesFrJLBjHN7kHT6fqoY6y0w3zYtmtqJ9Je8MmzM+/ jysoaqqT4+O+t5ZLMJuKt63DQB+2UdDg0PilNUk1W2eHIjYJvmxK+3b7ta/ISwwz ahz97cUTU22FBiFvAHICap0r5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwZR8HE /XqWGcVBwJJo3pm6JI6CMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5 QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg3Ri9BQjU2OTk5OEI5QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3Vjhx WHU1WXJnMG1ObkVWblNlTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8X8vhsPEwMgjR4hWVME3XlsuNlguA+mH8YDN7lBfe4lIAKBYFXL9f SuEjgKY9rT7aDxFQXNKqoXUZIxoiEZq/aYUIpHVTuHfXAyKiwK2pKXl6GeENl+B3 ePXZDqWHIvQtgxmMEyBsq+FoNDqWPZUZwPtbZ9xPQPugps+RM5UvYn4R5zR8Mug2 V7LgJJgLlFMlCkW8IDwUcNPGPF2r/gXQXVIJXtsEj8NazKWLU9z3ETjcm1i+tdiW Gme5feHLCLFq5eAA9MKhgw2/fC9aS1BvgKhbmfs4CXk3zF/7dQoDRYib7Rro5n59 TkQjXri3JyvseonyE8lrWuVFk0hTCDNZ -----END CERTIFICATE-----Generated at Sat May 31 16:55:04 2025 by rpki-client