$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: yxiTjuvv4t6FVdWv0t4cl+2upWu2QL5NpP/fraS9iAs= Subject key identifier: 2C:A4:D8:25:C4:CF:4B:D2:DA:6D:C7:A5:AF:46:BA:26:85:6A:2C:5F Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 013A Signing time: Sun 29 Jun 2025 03:33:21 +0000 Manifest this update: Sun 29 Jun 2025 03:33:21 +0000 Manifest next update: Sun 06 Jul 2025 03:33:21 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: q9vxMrc/x3A4fT11S7mnze9wSJEKx/BWi3OS0k6WXhk=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: EklU2yYDZmbaPYZyZPtK0kbQPPoSC3rB5vaEtJ2TbLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Jun 29 03:33:21 2025 GMT Not After : Jul 6 03:33:21 2025 GMT Subject: CN=6860b401-ba8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:60:75:b9:4d:b5:12:3c:38:74:0a:44:0b: 40:b8:c2:d4:bd:a0:01:63:7a:62:2b:c6:58:3e:b4: 95:0b:d8:7a:02:47:74:3b:2f:78:c2:19:20:fc:b5: 84:4b:3d:6f:e6:e8:ba:52:32:95:be:fd:1b:af:96: 64:19:59:3f:e2:c3:50:07:14:03:8a:6e:ef:90:b6: f0:19:e3:f3:4f:36:d5:8c:ab:7a:d1:71:a4:36:2d: cf:ca:55:5e:78:c3:ab:db:76:1e:61:ba:18:09:f6: d7:22:06:d3:b7:41:b9:a3:56:6e:0e:e2:67:70:d2: 36:69:9d:26:a4:16:23:9b:3c:1e:0e:40:c7:31:16: ea:12:6a:f0:f6:87:af:71:5a:b2:61:dc:f3:04:4f: 31:7b:34:11:37:85:3f:d4:24:8a:e5:90:cc:29:77: 05:7a:b6:1a:64:b4:eb:83:6b:bc:3e:0c:a9:3a:c2: ec:42:da:e2:53:f9:db:31:41:fd:f7:03:5d:57:d6: fb:c2:5c:9f:a7:ab:83:89:e0:15:dc:5b:08:17:b7: b1:ec:bb:b0:a3:35:d7:bf:48:5a:bf:56:84:ee:48: 4a:55:a6:73:de:8d:ed:4c:f0:d3:d4:9f:8e:4c:21: 84:f2:f5:13:96:31:47:8a:fe:f7:e7:86:b5:12:40: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:D8:25:C4:CF:4B:D2:DA:6D:C7:A5:AF:46:BA:26:85:6A:2C:5F X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:08:0e:b3:4b:27:7c:92:b6:95:80:07:7b:32:32:4b:2c:ae: c8:13:28:09:1f:7c:39:d3:7d:0b:50:b5:f2:d2:41:9b:a7:db: 68:0f:72:4c:f3:94:f7:49:b7:24:58:69:db:b2:69:75:8c:bb: 7a:5a:45:e5:1e:b4:d2:ce:4c:92:0f:54:08:fd:ba:b8:c8:8c: f2:f6:e4:82:64:11:2c:3f:84:5e:e4:10:5d:d3:a6:27:51:43: fc:54:5d:20:f8:d5:d4:27:3d:65:21:e9:5f:3d:80:bb:c6:02: f1:0e:e9:53:b2:31:76:64:5d:f6:99:78:70:f1:ed:27:fe:0d: 3f:94:10:b5:13:f8:87:93:d7:e9:0d:de:be:b8:9d:80:14:6d: 36:7d:a4:8b:ef:a9:dc:9d:98:8d:81:d9:69:58:1c:16:05:84: 8f:f3:3f:9f:ed:7a:d6:4e:c8:0f:5e:e9:12:73:e7:50:59:89: 18:a5:57:22:4b:b5:4c:09:8a:9d:e2:3d:63:b3:d7:40:6c:92: 5b:9b:66:34:81:10:df:58:be:28:3f:6c:64:2e:84:6d:73:c2: a0:ae:af:9c:8a:fd:d7:95:5b:f8:a8:74:bb:60:14:21:8c:74: 63:b7:e4:76:63:ca:77:49:d0:70:69:cb:6c:48:e0:1a:63:9a: 0b:9a:32:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwNjI5MDMzMzIxWhcNMjUwNzA2MDMzMzIxWjAYMRYwFAYD VQQDEw02ODYwYjQwMS1iYThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk1gdblNtRI8OHQKRAtAuMLUvaABY3piK8ZYPrSVC9h6Akd0Oy94whkg/LWE Sz1v5ui6UjKVvv0br5ZkGVk/4sNQBxQDim7vkLbwGePzTzbVjKt60XGkNi3PylVe eMOr23YeYboYCfbXIgbTt0G5o1ZuDuJncNI2aZ0mpBYjmzweDkDHMRbqEmrw9oev cVqyYdzzBE8xezQRN4U/1CSK5ZDMKXcFerYaZLTrg2u8PgypOsLsQtriU/nbMUH9 9wNdV9b7wlyfp6uDieAV3FsIF7ex7LuwozXXv0hav1aE7khKVaZz3o3tTPDT1J+O TCGE8vUTljFHiv7354a1EkC0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyk2CXE z0vS2m3Hpa9GuiaFaixfMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfCA6zSyd8kraVgAd7MjJLLK7IEygJH3w5030LULXy0kGbp9toD3JM 85T3SbckWGnbsml1jLt6WkXlHrTSzkySD1QI/bq4yIzy9uSCZBEsP4Re5BBd06Yn UUP8VF0g+NXUJz1lIelfPYC7xgLxDulTsjF2ZF32mXhw8e0n/g0/lBC1E/iHk9fp Dd6+uJ2AFG02faSL76ncnZiNgdlpWBwWBYSP8z+f7XrWTsgPXukSc+dQWYkYpVci S7VMCYqd4j1js9dAbJJbm2Y0gRDfWL4oP2xkLoRtc8Kgrq+civ3XlVv4qHS7YBQh jHRjt+R2Y8p3SdBwactsSOAaY5oLmjIw -----END CERTIFICATE-----Generated at Mon Jun 30 05:17:43 2025 by rpki-client