$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json) Hash identifier: J3ciu0A5p6ZU/4eC8FjkhtAqyZlACItl7FeG3RRE/xs= Subject key identifier: 24:88:23:96:1D:7C:B4:23:19:D6:69:A2:60:38:4E:3D:C1:64:1D:88 Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Certificate serial: 0FB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft Manifest number: 0FAE Signing time: Fri 16 May 2025 17:45:53 +0000 Manifest this update: Fri 16 May 2025 17:45:53 +0000 Manifest next update: Fri 23 May 2025 17:45:53 +0000 Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: Lyg/VozReepoiRIZ/uAW78t5qwl9MX+ESd5nsIUgma8=) 2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: Zze9TlbBres1fvJuhmxxkKTa+lNOrwdMt9mFrIPRgU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4024 (0xfb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Validity Not Before: May 16 17:45:53 2025 GMT Not After : May 23 17:45:53 2025 GMT Subject: CN=682779d1-a605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:6c:22:c0:22:1e:60:92:a5:30:79:66:59: f7:45:16:7b:0c:6d:cd:de:1a:b5:79:1b:bd:5b:e0: eb:bb:96:d0:26:64:c3:41:a1:4b:bd:6b:73:cb:ba: 17:2c:b2:9e:e7:d5:5b:43:79:2e:64:de:cd:bb:9e: 04:7c:ce:d1:7c:05:78:89:a5:97:63:80:d8:28:fa: 28:08:37:92:5b:af:98:b4:ee:36:97:dc:79:a1:2e: cd:29:9f:de:cc:62:a8:ac:2d:8d:b6:ee:31:bc:a4: dd:ca:61:b7:ea:16:4d:fb:90:62:0b:3f:c7:7c:bd: 0b:87:df:29:f4:ef:cf:e3:67:c3:2a:ad:3d:37:f7: 88:24:63:0d:d7:36:88:93:ac:ac:eb:bc:cc:8f:4a: 65:15:fe:62:93:90:05:a5:86:be:ec:aa:cf:f9:77: 6e:3e:3a:b1:40:cd:3a:f0:db:17:19:a1:19:21:1e: d9:fc:7c:70:09:df:f4:36:a1:c7:78:9e:b3:e1:84: f6:b1:d6:f2:7e:23:37:99:1b:3a:70:b7:68:e8:e1: e3:80:7a:9b:74:5b:5b:49:9b:ff:df:9c:b1:2b:79: 48:f7:4e:1b:31:0d:e0:68:71:96:fa:dd:0c:90:04: 49:87:45:49:ac:0e:8b:9b:10:26:30:d3:29:6b:a3: a9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:23:96:1D:7C:B4:23:19:D6:69:A2:60:38:4E:3D:C1:64:1D:88 X509v3 Authority Key Identifier: keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:ba:95:d4:07:4e:f2:15:db:e4:ee:48:20:d3:a2:ca:b9: f2:fb:92:6e:88:a5:07:a6:f2:93:35:ac:c5:a6:cd:7e:8d:26: ce:da:9b:1f:e4:76:ad:a9:85:3c:52:74:cf:bc:4c:d6:56:c4: ac:38:4f:06:03:e5:0a:c0:70:2a:f5:fc:71:7a:c6:a9:f7:e2: 90:a3:ed:ea:0f:4c:e4:81:df:b8:95:0f:92:ec:c0:62:18:f0: 7b:9b:fa:86:63:b8:51:c8:f7:77:1e:23:aa:9c:6f:ff:33:f9: b7:c6:59:6b:ee:4e:8b:93:47:30:d0:6b:21:9f:2d:34:21:94: 09:37:af:b2:5f:9c:42:02:6d:50:80:53:1c:e1:00:44:84:b7: bb:15:a9:0c:df:70:1a:26:48:e6:8b:62:12:df:4c:40:68:18: 75:09:81:c2:b7:f6:c2:7f:76:ed:9b:b7:64:06:91:54:44:c0: ab:ec:51:ce:31:56:f1:b4:57:13:8e:d0:c4:43:db:ef:00:da: 68:9d:1e:38:d7:77:1e:f0:37:a0:b1:66:dc:4f:cb:06:1b:d0: 41:6c:77:a6:bd:7f:eb:81:cf:c5:d4:e4:28:d2:60:f8:3f:f9: 79:98:63:a8:e1:40:30:75:71:e1:4a:bd:64:1f:0b:25:ac:61: 3e:2e:81:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB MDgyNzI5NDYwHhcNMjUwNTE2MTc0NTUzWhcNMjUwNTIzMTc0NTUzWjAYMRYwFAYD VQQDEw02ODI3NzlkMS1hNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7RsIsAiHmCSpTB5Zln3RRZ7DG3N3hq1eRu9W+Dru5bQJmTDQaFLvWtzy7oX LLKe59VbQ3kuZN7Nu54EfM7RfAV4iaWXY4DYKPooCDeSW6+YtO42l9x5oS7NKZ/e zGKorC2Ntu4xvKTdymG36hZN+5BiCz/HfL0Lh98p9O/P42fDKq09N/eIJGMN1zaI k6ys67zMj0plFf5ik5AFpYa+7KrP+XduPjqxQM068NsXGaEZIR7Z/HxwCd/0NqHH eJ6z4YT2sdbyfiM3mRs6cLdo6OHjgHqbdFtbSZv/35yxK3lI904bMQ3gaHGW+t0M kARJh0VJrA6LmxAmMNMpa6OpaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSII5Yd fLQjGdZpomA4Tj3BZB2IMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5 MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ2Qi81NkVFQkFFODU5MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBT Sy13X3hoN2tNdjZnZ25LVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGj7qV1AdO8hXb5O5IINOiyrny+5JuiKUHpvKTNazFps1+jSbO2psf 5HatqYU8UnTPvEzWVsSsOE8GA+UKwHAq9fxxesap9+KQo+3qD0zkgd+4lQ+S7MBi GPB7m/qGY7hRyPd3HiOqnG//M/m3xllr7k6Lk0cw0Gshny00IZQJN6+yX5xCAm1Q gFMc4QBEhLe7FakM33AaJkjmi2IS30xAaBh1CYHCt/bCf3btm7dkBpFURMCr7FHO MVbxtFcTjtDEQ9vvANponR4413ce8DegsWbcT8sGG9BBbHemvX/rgc/F1OQo0mD4 P/l5mGOo4UAwdXHhSr1kHwslrGE+LoH5 -----END CERTIFICATE-----Generated at Sat May 17 05:53:59 2025 by rpki-client