$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: M2H4K5KMKcp17vpRFS+749+RQ9mWl+/75Y3b1LfiPdI= Subject key identifier: 85:28:5D:C2:49:82:55:3D:7C:90:C1:B3:12:AD:97:B7:B1:E1:AD:96 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A2B Signing time: Thu 08 May 2025 19:42:34 +0000 Manifest this update: Thu 08 May 2025 19:42:33 +0000 Manifest next update: Thu 15 May 2025 19:42:33 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: vzw8OQrDmJhVGkv9ZnS72yhc7xOdVFeUGzScfy1slU8=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: May 8 19:42:33 2025 GMT Not After : May 15 19:42:33 2025 GMT Subject: CN=681d0929-99ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:6d:40:eb:da:37:03:01:1f:67:6f:1f:7b: a6:82:07:c1:48:97:bd:7c:bc:1b:f0:49:d3:5f:ee: 9e:f8:22:11:20:77:2a:d5:0a:a3:c6:87:2a:8e:77: 59:c8:f4:cc:ed:24:b6:80:2a:87:f9:75:41:48:e7: 3f:0b:ef:8b:88:e7:8b:ed:bf:68:ad:8f:1b:59:76: d6:fb:6f:1f:13:06:fe:3a:21:6f:7d:9c:40:20:ea: 9f:64:1d:ab:2a:29:ee:8c:7e:22:7d:f5:0a:10:8f: 09:a1:78:90:35:76:f2:92:5e:45:51:1b:af:1d:f5: e8:35:19:47:24:5c:0b:b3:6c:35:6e:74:84:1f:a0: 21:10:b3:6e:75:d2:7d:47:b1:f5:96:d1:e0:fe:a7: ff:2d:13:84:30:b8:e5:ea:f0:08:e8:0f:a6:c9:14: 32:71:31:83:bc:ff:6e:3e:12:5e:c5:68:a0:74:8c: f8:e6:67:c1:92:ea:37:e5:87:5e:d0:4d:1d:a0:8b: 17:33:a3:ce:97:eb:74:58:ee:dd:5d:10:e6:66:96: e1:b2:e8:6f:c2:28:05:42:33:bc:4f:0b:46:95:c9: 1d:95:f5:28:ac:ac:e0:cf:6e:7f:36:e4:a2:3b:26: 0f:77:b0:7e:c6:53:c0:67:82:ac:ee:df:fa:6b:a7: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:5D:C2:49:82:55:3D:7C:90:C1:B3:12:AD:97:B7:B1:E1:AD:96 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4a:bc:65:7c:6e:11:81:32:94:92:dc:a8:8c:6b:74:a5:2c: 7f:32:7b:e8:5f:a3:f9:97:be:15:66:8e:e2:35:d5:1d:74:b4: 55:e9:9b:01:1f:e6:cd:eb:b2:9b:d9:90:a5:9a:3b:2c:52:24: c4:96:88:09:2b:f6:4a:6e:69:39:fe:82:53:56:94:bf:e4:ff: da:3d:da:92:08:f1:23:5b:1c:3b:35:e2:1a:ca:ec:c3:c7:26: 8f:e3:4c:32:18:67:6e:9b:2b:d2:a6:64:7d:6e:7c:2a:f0:5a: b4:81:97:7d:78:71:8f:92:8f:4d:84:e5:c3:e2:0e:a5:54:02: 0c:dd:02:bf:33:54:32:89:54:c2:20:52:2a:84:6d:6d:ca:ed: f6:35:1d:3d:de:e1:87:dc:91:f5:1f:45:28:dc:96:41:ca:5a: 6d:78:f1:85:53:35:0a:50:4b:91:f0:c4:ab:8b:51:cd:82:06: 8f:4f:52:37:7a:72:10:68:a2:1f:98:4b:90:ed:2b:99:30:21: 8a:31:f1:01:9d:43:70:9d:18:5b:82:f6:10:d5:a9:db:7e:03: ae:e2:7d:26:c9:a5:3d:a0:48:cb:5c:24:2e:9b:15:f2:7e:59: ef:66:69:ee:81:b6:10:dd:0e:5c:93:ed:ee:34:42:74:d5:0f: 02:fd:2a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNTA4MTk0MjMzWhcNMjUwNTE1MTk0MjMzWjAYMRYwFAYD VQQDEw02ODFkMDkyOS05OWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw49tQOvaNwMBH2dvH3umggfBSJe9fLwb8EnTX+6e+CIRIHcq1QqjxocqjndZ yPTM7SS2gCqH+XVBSOc/C++LiOeL7b9orY8bWXbW+28fEwb+OiFvfZxAIOqfZB2r KinujH4iffUKEI8JoXiQNXbykl5FURuvHfXoNRlHJFwLs2w1bnSEH6AhELNuddJ9 R7H1ltHg/qf/LROEMLjl6vAI6A+myRQycTGDvP9uPhJexWigdIz45mfBkuo35Yde 0E0doIsXM6POl+t0WO7dXRDmZpbhsuhvwigFQjO8TwtGlckdlfUorKzgz25/NuSi OyYPd7B+xlPAZ4Ks7t/6a6eSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUoXcJJ glU9fJDBsxKtl7ex4a2WMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbSrxlfG4RgTKUktyojGt0pSx/MnvoX6P5l74VZo7iNdUddLRV6ZsB H+bN67Kb2ZClmjssUiTElogJK/ZKbmk5/oJTVpS/5P/aPdqSCPEjWxw7NeIayuzD xyaP40wyGGdumyvSpmR9bnwq8Fq0gZd9eHGPko9NhOXD4g6lVAIM3QK/M1QyiVTC IFIqhG1tyu32NR093uGH3JH1H0Uo3JZBylptePGFUzUKUEuR8MSri1HNggaPT1I3 enIQaKIfmEuQ7SuZMCGKMfEBnUNwnRhbgvYQ1anbfgOu4n0myaU9oEjLXCQumxXy flnvZmnugbYQ3Q5ck+3uNEJ01Q8C/Sqf -----END CERTIFICATE-----Generated at Sat May 10 13:51:19 2025 by rpki-client