$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: RuN5c0FcMxUdTYn+VbzTwEh1Gl4lUueN0a/NeOg5cnk= Subject key identifier: 27:B7:5A:2C:8E:6B:B4:76:64:DD:17:82:32:83:33:A0:88:CE:2E:E9 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 0656 Signing time: Sat 10 May 2025 22:16:32 +0000 Manifest this update: Sat 10 May 2025 22:16:32 +0000 Manifest next update: Sat 17 May 2025 22:16:32 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: wJY1JBys5TxR/9SeTmsn+NLVy/Bf2dw3v2KlRJqpG20=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: GHQh5SwHOMcXY1DsAhaLHUPHu9zL3ZFCXoLdxoLJfeA=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: rALO/Lu7rOVuXfsNKsgW9obWV+R382rqfNHaGZDPjYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: May 10 22:16:32 2025 GMT Not After : May 17 22:16:32 2025 GMT Subject: CN=681fd040-5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:a9:47:7e:fe:94:2b:4f:3a:04:4a:a4:71: 19:7f:8c:d2:77:24:ef:04:98:55:59:6c:c3:f1:f6: df:c5:8c:c3:0b:91:f7:24:42:64:2e:3a:67:d5:ef: 43:2a:08:5b:2d:65:8e:47:8c:f8:ed:f6:5e:91:e5: 36:df:dd:7f:d1:be:c4:95:d4:2f:10:81:1c:35:a4: 8a:a3:66:e9:9e:63:9d:1e:9f:25:b9:8d:57:61:27: dc:33:60:75:f2:e1:c3:43:d0:bb:28:2c:93:86:b2: f1:a8:1c:d2:49:f4:42:3a:f8:19:8a:6d:6a:21:4e: 0d:f0:53:d5:26:cd:27:4b:11:35:6f:55:74:e3:4f: d1:30:7a:1f:91:75:a8:ca:51:cc:16:be:98:ec:0a: 4a:6c:f0:7d:d4:21:93:ca:53:fa:ec:52:3c:44:c6: 5e:43:09:db:98:2d:2a:8f:22:8a:24:9f:3b:ef:24: 41:39:6f:b9:eb:41:d2:aa:ef:42:e8:1f:35:77:c0: 2c:91:f9:d6:bb:f9:7e:61:04:45:db:95:1f:c1:61: 61:60:ad:a7:c6:3f:6e:d2:59:6f:85:ec:42:03:ec: ec:18:e7:a6:fb:3c:13:0c:61:bd:4c:95:41:28:69: 7c:a5:df:df:1c:74:67:ef:d5:27:32:37:a9:97:99: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B7:5A:2C:8E:6B:B4:76:64:DD:17:82:32:83:33:A0:88:CE:2E:E9 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:a7:fe:b1:61:2f:81:6e:b3:d7:e4:e3:88:e6:74:4e:93: da:aa:48:ae:07:2b:7a:ca:d9:98:42:91:e1:49:d2:b6:15:2d: f0:f8:45:07:9d:67:22:cb:ed:5f:6c:d3:cb:84:9a:81:83:7a: 21:c7:98:fb:f5:3c:ae:05:35:46:a6:f9:b1:6d:6d:c8:2b:aa: 31:1b:dc:42:3a:bc:1f:06:82:7b:4a:0a:88:62:6e:3a:30:de: e6:37:38:56:78:ec:55:05:37:4a:32:26:9a:11:f0:81:9e:ea: fd:99:ca:c8:03:1f:b7:e2:b9:b5:85:67:1a:d3:80:a1:fc:a3: d4:8b:7a:57:29:d5:cb:01:d0:bc:4b:9e:d1:2e:8c:3c:83:2c: f0:42:34:f4:12:b1:58:90:a6:57:f4:c5:49:ab:f3:54:40:06: ee:72:20:b0:df:0b:1f:9f:8a:24:6c:d9:35:5a:ec:79:20:08: b5:fb:ba:f3:8e:10:db:70:65:e5:eb:fd:18:2c:e2:17:c8:4a: 8f:91:e7:eb:d3:e8:42:35:ed:72:af:d6:93:45:05:97:5c:55: 6b:ce:c7:83:d8:02:78:7f:bc:81:86:a4:0d:4f:75:b2:35:ab: 45:02:d1:8d:2e:af:a8:8a:1b:49:ca:da:6f:71:fa:23:61:58: e9:8d:f6:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNTEwMjIxNjMyWhcNMjUwNTE3MjIxNjMyWjAYMRYwFAYD VQQDEw02ODFmZDA0MC01ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vmpR37+lCtPOgRKpHEZf4zSdyTvBJhVWWzD8fbfxYzDC5H3JEJkLjpn1e9D KghbLWWOR4z47fZekeU2391/0b7EldQvEIEcNaSKo2bpnmOdHp8luY1XYSfcM2B1 8uHDQ9C7KCyThrLxqBzSSfRCOvgZim1qIU4N8FPVJs0nSxE1b1V040/RMHofkXWo ylHMFr6Y7ApKbPB91CGTylP67FI8RMZeQwnbmC0qjyKKJJ877yRBOW+560HSqu9C 6B81d8AskfnWu/l+YQRF25UfwWFhYK2nxj9u0llvhexCA+zsGOem+zwTDGG9TJVB KGl8pd/fHHRn79UnMjepl5kZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe3WiyO a7R2ZN0XgjKDM6CIzi7pMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUKf+sWEvgW6z1+TjiOZ0TpPaqkiuByt6ytmYQpHhSdK2FS3w+EUH nWciy+1fbNPLhJqBg3ohx5j79TyuBTVGpvmxbW3IK6oxG9xCOrwfBoJ7SgqIYm46 MN7mNzhWeOxVBTdKMiaaEfCBnur9mcrIAx+34rm1hWca04Ch/KPUi3pXKdXLAdC8 S57RLow8gyzwQjT0ErFYkKZX9MVJq/NUQAbuciCw3wsfn4okbNk1Wux5IAi1+7rz jhDbcGXl6/0YLOIXyEqPkefr0+hCNe1yr9aTRQWXXFVrzseD2AJ4f7yBhqQNT3Wy NatFAtGNLq+oihtJytpvcfojYVjpjfbT -----END CERTIFICATE-----Generated at Sun May 11 12:37:33 2025 by rpki-client