$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: TVjYDZCT91sJCIr/9IPKWmseSV3YOGrN9RNQwdSjYto= Subject key identifier: B0:4E:F2:B1:D7:FF:EB:8F:F5:FB:AB:52:5B:C1:59:85:48:66:AE:EA Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A45 Signing time: Mon 30 Jun 2025 19:51:19 +0000 Manifest this update: Mon 30 Jun 2025 19:51:18 +0000 Manifest next update: Mon 07 Jul 2025 19:51:18 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: 8Vf14rLr3qw6ZjTeyd7NPJnvDAY5GY4PwLHt9tYQuXg=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Jun 30 19:51:18 2025 GMT Not After : Jul 7 19:51:18 2025 GMT Subject: CN=6862eab7-f938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:85:b2:5e:cf:79:2c:43:7a:db:0b:eb:4b: fa:29:d6:6b:6c:f7:2d:66:0c:cc:fa:0d:34:37:f3: a9:90:5d:fe:87:db:41:77:2b:24:c6:4f:ca:5f:8b: f1:50:38:f2:28:f7:56:b6:b8:38:54:2b:16:85:f0: 85:76:46:58:70:da:74:80:6a:42:8e:1e:24:11:ea: 52:2d:45:1f:c8:68:85:54:1c:91:a7:34:d0:f9:1a: 68:21:bb:10:48:68:67:63:1a:01:2b:0e:2c:30:bd: 97:63:49:27:5c:43:4f:d7:4f:55:b8:a6:9f:1f:9d: 8d:81:e9:c9:e1:33:a0:ec:2a:be:fc:ff:6d:cd:22: d3:e5:db:e4:1e:03:53:61:df:6f:bb:fa:62:2e:2d: 0a:11:67:1f:28:01:45:be:bd:24:7b:a7:cf:9b:a5: b1:89:40:ca:33:71:4c:d9:74:2d:3f:64:f0:73:9d: 0c:ca:64:bc:e5:aa:ec:d8:8a:87:de:58:c0:b4:eb: 6c:c4:92:eb:8e:59:98:b2:40:f0:65:e3:35:b8:94: 65:53:91:59:18:62:d6:5a:f0:6d:6b:92:41:42:89: 9c:d7:fc:ac:45:9f:ac:7d:e8:35:18:d3:3d:08:59: 27:b8:bc:7a:50:01:9e:57:b9:ae:b1:a2:e3:62:21: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:F2:B1:D7:FF:EB:8F:F5:FB:AB:52:5B:C1:59:85:48:66:AE:EA X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:43:62:2c:a8:c1:06:99:30:74:ce:85:f6:cc:d2:53:cc:d2: 2b:92:ea:3c:5f:b0:4b:d8:8a:71:7e:38:5f:54:78:1e:7b:56: 47:6b:1a:36:4f:35:35:e3:1c:17:21:83:8d:56:57:51:e6:db: 90:44:10:d8:b1:bd:f9:75:99:c3:2b:2b:fb:7b:73:56:cc:82: 6f:d0:a2:7e:51:82:6a:ea:ff:61:96:0c:19:fa:a8:3e:7d:44: ea:ad:0a:db:3a:97:48:95:d0:7b:82:92:0a:16:94:fd:0d:cb: 74:96:20:68:fd:0b:c0:8f:4b:03:a4:b6:1a:ba:95:14:ce:32: a7:a4:96:f9:36:05:dd:16:df:a3:46:7e:9b:d8:a5:51:f1:1e: 72:73:61:09:11:fd:09:72:b8:21:02:93:08:94:0d:96:9d:93: 78:a1:50:ec:54:1c:ec:db:a1:67:a4:7d:43:ae:80:eb:44:cb: 60:e6:d7:1d:67:78:06:97:27:36:eb:51:4d:c6:1a:9c:bb:36: 36:90:9f:69:8a:54:9d:b3:f7:5c:8c:1b:5b:3f:ce:e4:fa:a3: 74:2c:e9:a2:1b:a2:64:a6:e1:d1:ff:cc:bd:5b:8c:39:1d:e2: 75:24:df:2d:a8:c7:88:35:f8:00:1a:27:1f:da:da:9c:24:d5: b0:69:74:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNjMwMTk1MTE4WhcNMjUwNzA3MTk1MTE4WjAYMRYwFAYD VQQDEw02ODYyZWFiNy1mOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9CFsl7PeSxDetsL60v6KdZrbPctZgzM+g00N/OpkF3+h9tBdyskxk/KX4vx UDjyKPdWtrg4VCsWhfCFdkZYcNp0gGpCjh4kEepSLUUfyGiFVByRpzTQ+RpoIbsQ SGhnYxoBKw4sML2XY0knXENP109VuKafH52NgenJ4TOg7Cq+/P9tzSLT5dvkHgNT Yd9vu/piLi0KEWcfKAFFvr0ke6fPm6WxiUDKM3FM2XQtP2Twc50MymS85ars2IqH 3ljAtOtsxJLrjlmYskDwZeM1uJRlU5FZGGLWWvBta5JBQomc1/ysRZ+sfeg1GNM9 CFknuLx6UAGeV7musaLjYiHKFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBO8rHX /+uP9furUlvBWYVIZq7qMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtQ2IsqMEGmTB0zoX2zNJTzNIrkuo8X7BL2IpxfjhfVHgee1ZHaxo2 TzU14xwXIYONVldR5tuQRBDYsb35dZnDKyv7e3NWzIJv0KJ+UYJq6v9hlgwZ+qg+ fUTqrQrbOpdIldB7gpIKFpT9Dct0liBo/QvAj0sDpLYaupUUzjKnpJb5NgXdFt+j Rn6b2KVR8R5yc2EJEf0JcrghApMIlA2WnZN4oVDsVBzs26FnpH1DroDrRMtg5tcd Z3gGlyc261FNxhqcuzY2kJ9pilSds/dcjBtbP87k+qN0LOmiG6JkpuHR/8y9W4w5 HeJ1JN8tqMeINfgAGicf2tqcJNWwaXT0 -----END CERTIFICATE-----Generated at Tue Jul 1 05:38:34 2025 by rpki-client