$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: 3pLZRWL1rru3hAmvfdNFL+oUdCduvSyTQe2BGSTyg9s= Subject key identifier: F9:E6:2A:D6:77:B2:5F:FF:B1:1A:69:2D:15:AE:DF:CF:AB:66:D7:BF Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: FD Signing time: Tue 01 Jul 2025 05:41:19 +0000 Manifest this update: Tue 01 Jul 2025 05:41:18 +0000 Manifest next update: Tue 08 Jul 2025 05:41:18 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: oljiBxJIfSRHT4NlT2wizdcFZ0GkUL2zzVGdeEFl7oc=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Jul 1 05:41:18 2025 GMT Not After : Jul 8 05:41:18 2025 GMT Subject: CN=686374fe-14f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:b9:68:6c:50:f7:70:f0:8a:fa:f4:2b:af: b9:90:17:07:b0:45:b7:03:7c:c8:b0:e5:69:62:65: 49:6c:05:47:d8:a3:09:88:7f:7e:0b:8b:42:66:c4: c5:71:e3:7b:bd:67:35:ec:5b:15:7c:26:c5:46:bb: da:9e:97:2f:dd:7c:58:cb:ae:fc:d6:94:58:eb:f6: f8:2a:1a:fe:a7:0d:c5:e2:dc:ed:7c:65:25:89:16: 3d:4e:b6:b1:59:48:11:90:1a:bb:78:73:76:6a:e7: bd:4c:2f:96:a7:c8:6b:df:68:4e:d7:02:f6:2a:37: 3d:eb:5a:13:06:82:38:1c:99:79:16:ee:0a:7d:52: 26:3d:2e:2d:2b:0b:a6:24:aa:41:c1:f2:92:72:c9: 6a:6d:ab:3e:e5:ac:12:cd:8d:f1:f4:d3:38:87:c9: c5:e9:8e:dc:03:ae:c9:b5:94:7c:90:0b:e5:2f:9e: cd:2d:39:b5:94:af:a0:76:f3:02:34:04:7f:ec:fc: f9:f7:13:3a:f7:6b:bc:72:56:11:03:91:1d:93:93: 3c:65:26:53:16:8a:b7:ef:55:6d:c5:c7:05:86:2a: 7b:f9:c7:70:80:5e:70:8b:87:f3:f5:34:e8:4d:39: 13:71:16:b1:1c:9a:27:0a:4a:a3:8c:a4:02:1f:00: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E6:2A:D6:77:B2:5F:FF:B1:1A:69:2D:15:AE:DF:CF:AB:66:D7:BF X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1f:8c:16:9c:66:c9:17:02:10:b4:16:ae:1c:0f:20:19:66: 51:41:ff:ac:b3:93:51:83:a2:dd:04:98:d6:74:f4:2f:a1:64: 7c:8e:cd:1f:a4:f9:3b:0e:1c:9d:05:14:8c:18:f0:ac:29:a8: 30:8b:11:56:4d:23:9b:d5:aa:94:44:42:e1:b6:7c:9b:dd:04: f5:5b:66:5d:fe:d9:94:76:76:54:e1:25:20:a0:15:90:60:22: 0f:d5:3a:1f:7f:38:f2:6d:fc:35:8b:b6:c9:5d:51:db:b2:14: bf:51:29:e3:f0:81:e0:39:c6:85:05:9b:a6:60:d3:2b:d5:a3: 31:a7:28:58:2e:b2:f8:00:e7:22:a2:4e:74:58:1a:18:01:bd: e9:0c:a8:3f:b6:53:d6:7a:27:7d:64:57:d3:7c:d1:e5:83:29: 85:14:0d:90:87:5b:62:cf:5a:2b:d0:f7:7b:e7:64:e0:49:45: 1c:3a:b7:b6:0d:ea:03:51:c0:3c:c1:31:f5:1f:cc:cc:72:e2: 76:ba:bb:83:39:7b:da:31:af:c8:ed:c8:a4:3b:9c:ee:be:f6: 9b:3d:7e:f9:4c:9e:da:44:fd:eb:07:1c:c3:de:50:f6:5c:d7: 01:db:1a:2a:40:05:18:bb:31:5a:1a:39:8e:27:c9:8d:e5:7b: 5f:9e:f7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwNzAxMDU0MTE4WhcNMjUwNzA4MDU0MTE4WjAYMRYwFAYD VQQDEw02ODYzNzRmZS0xNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gm5aGxQ93Dwivr0K6+5kBcHsEW3A3zIsOVpYmVJbAVH2KMJiH9+C4tCZsTF ceN7vWc17FsVfCbFRrvanpcv3XxYy6781pRY6/b4Khr+pw3F4tztfGUliRY9Trax WUgRkBq7eHN2aue9TC+Wp8hr32hO1wL2Kjc961oTBoI4HJl5Fu4KfVImPS4tKwum JKpBwfKScslqbas+5awSzY3x9NM4h8nF6Y7cA67JtZR8kAvlL57NLTm1lK+gdvMC NAR/7Pz59xM692u8clYRA5Edk5M8ZSZTFoq371VtxccFhip7+cdwgF5wi4fz9TTo TTkTcRaxHJonCkqjjKQCHwCYbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnmKtZ3 sl//sRppLRWu38+rZte/MB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgH4wWnGbJFwIQtBauHA8gGWZRQf+ss5NRg6LdBJjWdPQvoWR8js0f pPk7DhydBRSMGPCsKagwixFWTSOb1aqURELhtnyb3QT1W2Zd/tmUdnZU4SUgoBWQ YCIP1Toffzjybfw1i7bJXVHbshS/USnj8IHgOcaFBZumYNMr1aMxpyhYLrL4AOci ok50WBoYAb3pDKg/tlPWeid9ZFfTfNHlgymFFA2Qh1tiz1or0Pd752TgSUUcOre2 DeoDUcA8wTH1H8zMcuJ2uruDOXvaMa/I7cikO5zuvvabPX75TJ7aRP3rBxzD3lD2 XNcB2xoqQAUYuzFaGjmOJ8mN5Xtfnvds -----END CERTIFICATE-----Generated at Wed Jul 2 20:15:18 2025 by rpki-client