$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: BaRIvzQbAml6OcMUK1NGVbsvXDZjUjB3YsRlN7I7CQY= Subject key identifier: 23:53:DF:90:AC:03:72:63:85:6E:BF:7B:3C:DE:F2:9C:3C:2F:DF:76 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A60 Signing time: Fri 22 Aug 2025 19:48:12 +0000 Manifest this update: Fri 22 Aug 2025 19:48:12 +0000 Manifest next update: Fri 29 Aug 2025 19:48:12 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: SEfzqQtyEiCChXrfWIBXT/wP1VbcSw2CpJTBXWwqLuI=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Aug 22 19:48:12 2025 GMT Not After : Aug 29 19:48:12 2025 GMT Subject: CN=68a8c97c-e14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:04:6b:ce:f2:e4:ed:64:16:e2:e6:b4:41: cf:7b:d3:6b:f0:77:1a:c5:9d:33:9f:17:55:58:77: 3b:6d:24:23:f4:3f:f2:e3:d9:e1:49:35:fd:75:f6: ab:e7:cc:7e:3f:42:da:d1:d3:37:09:eb:c8:36:31: 96:50:e0:8e:40:f2:fe:f8:b6:09:55:28:c4:9e:b6: 4b:f7:d7:b5:97:e5:30:77:44:b5:5b:45:33:7c:49: 0a:14:7d:e9:ef:d1:e4:f4:88:7c:de:66:82:2b:75: b2:42:72:87:72:e2:c7:0c:c5:23:50:c5:be:18:e6: 39:f9:d5:4b:07:9f:22:4a:b3:bd:22:9d:37:c2:18: a8:16:25:ae:bd:2c:b6:fb:76:96:ef:b5:87:24:5d: 6f:78:34:e5:bd:31:6f:9b:ca:0c:28:d8:72:45:34: 68:ca:76:d5:b6:31:8b:a4:63:fa:81:d8:14:cc:11: 70:34:0d:b2:7d:3a:98:89:7d:7d:46:3b:e1:41:9a: c9:a7:fb:c2:3f:cb:fa:78:f6:b6:70:83:0d:9f:16: 22:01:b0:73:3a:4c:88:0f:98:0a:91:5e:0e:c5:a0: 38:e8:ba:57:da:8c:51:3a:af:05:38:5f:db:ad:98: cd:03:48:de:09:48:2b:6e:a1:c7:85:c3:59:23:4b: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:DF:90:AC:03:72:63:85:6E:BF:7B:3C:DE:F2:9C:3C:2F:DF:76 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c4:0e:6c:20:7a:99:19:6b:07:06:95:72:91:3d:d5:d5:43: 2d:9e:58:69:3e:72:a1:bd:a6:8e:6e:47:45:71:89:bc:e5:e6: 60:d6:70:38:6f:db:2e:e8:fe:b5:eb:a3:4e:d1:ae:41:ab:c8: fb:6a:5e:55:d5:18:5d:b8:ca:53:c3:78:34:1d:97:cd:07:97: 9d:35:19:55:cc:92:8b:d3:97:64:1b:55:2d:db:ef:e6:1a:18: a0:ab:b2:f8:37:df:ce:9f:a3:1e:5c:31:3f:a2:ae:e2:af:f6: 63:27:2f:34:b8:cc:7a:4a:c2:40:42:31:d3:9f:95:c2:08:2e: 83:76:68:f9:cd:8e:18:6c:f1:61:e5:f4:b4:aa:2d:b2:a5:92: 4a:05:1d:d0:8d:3d:70:8f:59:b4:76:94:c4:60:b1:7c:7c:40: c9:b3:89:35:34:7a:3f:a5:09:91:1e:d4:1f:78:21:fb:78:c4: 0d:3a:99:b4:24:5b:7b:09:10:9c:b4:13:6c:e8:2e:05:ad:c9: 89:1e:0e:c2:95:70:00:8f:ea:50:31:60:ce:98:6e:56:e7:d6: bf:69:6e:37:9f:58:98:17:b1:6e:f6:ea:3d:cb:ea:e7:32:50: 40:a5:d7:e6:19:02:a3:4e:2b:3b:9c:23:ab:b6:53:98:06:a2: 2c:16:3d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwODIyMTk0ODEyWhcNMjUwODI5MTk0ODEyWjAYMRYwFAYD VQQDEw02OGE4Yzk3Yy1lMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+UEa87y5O1kFuLmtEHPe9Nr8HcaxZ0znxdVWHc7bSQj9D/y49nhSTX9dfar 58x+P0La0dM3CevINjGWUOCOQPL++LYJVSjEnrZL99e1l+Uwd0S1W0UzfEkKFH3p 79Hk9Ih83maCK3WyQnKHcuLHDMUjUMW+GOY5+dVLB58iSrO9Ip03whioFiWuvSy2 +3aW77WHJF1veDTlvTFvm8oMKNhyRTRoynbVtjGLpGP6gdgUzBFwNA2yfTqYiX19 RjvhQZrJp/vCP8v6ePa2cIMNnxYiAbBzOkyID5gKkV4OxaA46LpX2oxROq8FOF/b rZjNA0jeCUgrbqHHhcNZI0v/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNT35Cs A3JjhW6/ezze8pw8L992MB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7xA5sIHqZGWsHBpVykT3V1UMtnlhpPnKhvaaObkdFcYm85eZg1nA4 b9su6P6166NO0a5Bq8j7al5V1RhduMpTw3g0HZfNB5edNRlVzJKL05dkG1Ut2+/m Ghigq7L4N9/On6MeXDE/oq7ir/ZjJy80uMx6SsJAQjHTn5XCCC6Ddmj5zY4YbPFh 5fS0qi2ypZJKBR3QjT1wj1m0dpTEYLF8fEDJs4k1NHo/pQmRHtQfeCH7eMQNOpm0 JFt7CRCctBNs6C4FrcmJHg7ClXAAj+pQMWDOmG5W59a/aW43n1iYF7Fu9uo9y+rn MlBApdfmGQKjTis7nCOrtlOYBqIsFj21 -----END CERTIFICATE-----Generated at Sat Aug 23 09:25:45 2025 by rpki-client