$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json) Hash identifier: Am/xPDqIKIxgsYKMdO2xMWJOh6ewkSDZEJl9BWLI1Ik= Subject key identifier: 4E:AF:FE:98:76:E5:D0:02:18:05:F6:82:F4:98:BF:1E:5A:EF:BC:3B Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Certificate serial: 0FBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft Manifest number: 0FB4 Signing time: Fri 30 May 2025 17:42:16 +0000 Manifest this update: Fri 30 May 2025 17:42:15 +0000 Manifest next update: Fri 06 Jun 2025 17:42:15 +0000 Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: kw7r1vkiVyE9Bvokzv4b89JQAt03xIkBVD4IV62jaiM=) 2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: Zze9TlbBres1fvJuhmxxkKTa+lNOrwdMt9mFrIPRgU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4030 (0xfbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Validity Not Before: May 30 17:42:15 2025 GMT Not After : Jun 6 17:42:15 2025 GMT Subject: CN=6839edf7-cd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:e3:fb:48:12:41:0c:1a:78:34:c3:cc:f9: 84:2a:6c:a0:47:60:5b:a6:98:b4:df:cb:58:84:62: 23:a8:b4:7f:03:23:76:d0:99:ae:6b:7e:2f:18:2b: 5d:fd:21:f4:00:89:68:e5:43:3c:26:2b:53:f6:67: 05:17:54:18:82:0a:4e:61:5a:a5:74:b3:dd:b0:15: ef:3f:ae:23:3e:da:f5:8f:6a:c8:94:65:fa:d6:ad: a9:c0:8d:21:09:06:57:63:ad:43:48:3a:64:9a:88: a1:98:4b:1d:59:bc:97:0d:62:3c:3c:b1:56:0c:a7: 11:e3:24:a1:f1:cb:fa:b8:b9:45:74:3a:d3:0f:b0: b2:2a:06:b2:18:67:ab:d1:fc:ca:d7:4d:76:49:2c: 7a:24:cd:83:73:67:38:b2:e5:1d:3e:36:ac:f0:e2: d9:9e:f1:2b:0f:b3:35:84:46:05:67:d2:b5:b3:c6: 6a:bb:61:07:d7:e3:4d:b8:98:71:3f:67:5a:4b:85: eb:17:10:80:dc:0a:98:8a:17:c0:57:f2:39:a7:15: 61:cd:87:ce:14:ab:cd:a0:5f:50:12:c7:f5:35:26: ad:f0:a4:68:97:91:2b:4a:fa:bc:2a:9f:0f:9f:7e: ca:7d:ce:2e:78:28:d4:b1:95:09:b6:5c:38:9f:b1: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:FE:98:76:E5:D0:02:18:05:F6:82:F4:98:BF:1E:5A:EF:BC:3B X509v3 Authority Key Identifier: keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:95:1f:e4:6a:2a:fe:4a:a1:d6:d2:42:25:40:74:6a:8c:d1: 73:65:80:9f:41:54:77:11:b4:07:25:a2:4b:8e:b2:22:a2:d4: 6a:af:6a:43:78:9c:ed:82:b1:59:5f:3e:bd:6f:34:de:5a:db: 3a:77:84:76:00:6f:39:79:59:5c:46:4f:ec:95:15:54:d7:ee: d4:e7:36:01:de:12:86:da:dd:49:8f:f6:cb:d7:ed:02:3a:cb: 73:ed:37:a6:ab:fb:88:87:e4:ac:73:41:5b:e1:2a:77:77:38: 24:f8:e4:bd:ea:b8:34:52:bf:fb:6e:15:a0:fa:3b:45:97:e6: 90:bc:71:3f:dc:36:93:23:47:6c:32:e8:00:4c:9a:c2:a9:43: f9:c8:86:2e:cd:42:e8:4a:92:ff:70:f3:9b:18:8f:a3:e3:a2: 9f:b1:10:dd:6e:42:f5:1c:71:7e:5e:f2:f1:d5:42:b8:fb:cf: 49:d6:72:35:5d:5b:b4:14:64:9e:65:65:bc:5e:6e:9b:82:d1: a0:cf:95:bf:ca:26:f8:54:32:f1:02:04:fe:cd:28:e7:8d:a6: 7c:11:7d:9d:8a:f7:7c:0c:47:71:12:d5:f9:89:23:43:7d:36: d3:15:49:56:f4:e6:ea:29:49:ac:03:ac:31:d1:c2:54:df:ea: 79:7e:8b:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB MDgyNzI5NDYwHhcNMjUwNTMwMTc0MjE1WhcNMjUwNjA2MTc0MjE1WjAYMRYwFAYD VQQDEw02ODM5ZWRmNy1jZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vzj+0gSQQwaeDTDzPmEKmygR2Bbppi038tYhGIjqLR/AyN20Jmua34vGCtd /SH0AIlo5UM8JitT9mcFF1QYggpOYVqldLPdsBXvP64jPtr1j2rIlGX61q2pwI0h CQZXY61DSDpkmoihmEsdWbyXDWI8PLFWDKcR4ySh8cv6uLlFdDrTD7CyKgayGGer 0fzK1012SSx6JM2Dc2c4suUdPjas8OLZnvErD7M1hEYFZ9K1s8Zqu2EH1+NNuJhx P2daS4XrFxCA3AqYihfAV/I5pxVhzYfOFKvNoF9QEsf1NSat8KRol5ErSvq8Kp8P n37Kfc4ueCjUsZUJtlw4n7EKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6v/ph2 5dACGAX2gvSYvx5a77w7MB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5 MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ2Qi81NkVFQkFFODU5MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBT Sy13X3hoN2tNdjZnZ25LVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/lR/kair+SqHW0kIlQHRqjNFzZYCfQVR3EbQHJaJLjrIiotRqr2pD eJztgrFZXz69bzTeWts6d4R2AG85eVlcRk/slRVU1+7U5zYB3hKG2t1Jj/bL1+0C Ostz7Temq/uIh+Ssc0Fb4Sp3dzgk+OS96rg0Ur/7bhWg+jtFl+aQvHE/3DaTI0ds MugATJrCqUP5yIYuzULoSpL/cPObGI+j46KfsRDdbkL1HHF+XvLx1UK4+89J1nI1 XVu0FGSeZWW8Xm6bgtGgz5W/yib4VDLxAgT+zSjnjaZ8EX2divd8DEdxEtX5iSND fTbTFUlW9ObqKUmsA6wx0cJU3+p5foto -----END CERTIFICATE-----Generated at Sat May 31 17:50:43 2025 by rpki-client