$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: m0JW/OGNey2al4mhrimIPMeyW8jP1LMCu7huWZ3Ej2Q= Subject key identifier: C2:C8:B1:0B:5C:A0:6E:46:27:76:4B:0A:32:57:B1:F3:46:F7:26:58 Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 0130 Signing time: Fri 13 Jun 2025 03:30:56 +0000 Manifest this update: Fri 13 Jun 2025 03:30:56 +0000 Manifest next update: Fri 20 Jun 2025 03:30:56 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: w+2sg4aILe6FVdlQTssm2/5BOx90iKL8lhCILpuDSmk=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: sPgtFXkQiNpbnrX5GSASzjIh/8IU4jkwvbF5ffVha8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Jun 13 03:30:56 2025 GMT Not After : Jun 20 03:30:56 2025 GMT Subject: CN=684b9b70-0fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:f9:10:21:c9:3f:e7:4a:2c:83:c5:96:52: a4:e5:9b:77:48:2e:08:50:eb:8e:5e:46:53:99:25: 60:40:6a:88:56:38:49:66:24:53:8e:a4:f9:87:76: 4e:67:e3:02:b8:6d:ce:5f:81:99:4d:44:63:a6:47: 87:06:80:da:54:e2:3d:3d:f2:0e:cb:ae:ff:a3:68: 16:4b:e4:2a:0a:44:1b:74:2f:80:f3:fc:2b:95:08: 6b:42:4c:0c:26:cf:c7:ea:26:80:66:f8:f1:8f:5c: 7b:3f:51:93:5d:81:e4:33:f8:e1:75:3c:eb:99:29: cd:24:1e:f9:4f:c5:f8:a9:41:00:b2:30:f1:ad:ca: b8:c3:06:64:26:ed:c1:d2:92:0a:b9:bb:fb:6d:5f: 96:2b:2f:48:36:0e:b2:08:28:34:43:1c:a8:cc:d8: d7:89:38:f0:02:19:b6:a7:6d:b8:dc:a1:ef:34:c9: 70:ab:2f:f3:ea:05:f8:bb:74:54:82:f9:25:1a:fe: 5c:c5:f5:a8:75:01:cd:41:df:cd:b1:9d:08:15:a3: 4a:e5:e2:91:22:83:2d:66:8f:30:98:cc:33:e2:19: 38:bb:68:ec:83:eb:f6:b7:73:9c:4a:6e:40:d0:b8: 62:33:fd:56:31:dd:30:dd:22:61:ee:26:db:d9:1e: fc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:B1:0B:5C:A0:6E:46:27:76:4B:0A:32:57:B1:F3:46:F7:26:58 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:18:4d:89:88:a9:dd:f0:e5:ca:90:41:52:0f:04:cb:a2:12: 0c:c0:4f:cd:09:48:6c:33:a2:12:22:b2:8d:2f:e1:48:e1:e0: cb:8a:e6:75:8c:85:d2:f1:78:f7:24:66:a0:2d:0f:fe:a1:67: fa:ff:cc:0d:3b:9f:97:b3:52:8c:6e:8c:a8:ce:31:1e:99:8f: 73:ee:0d:ee:2f:e9:62:e3:e3:49:f7:31:d2:f0:79:a5:9a:40: cf:3a:bf:55:4b:f6:31:46:fb:01:fb:3e:bc:f0:f1:9b:55:7b: ae:e4:91:f1:09:21:37:28:04:11:11:7b:9e:88:a6:6f:a5:48: 82:d4:7a:9e:16:3e:1a:7e:e9:f0:23:c2:ff:2e:a8:31:99:a8: 8b:ad:b5:e5:28:54:83:46:99:4b:9c:64:51:f4:21:9e:02:a9: 47:7b:60:19:59:d2:6d:a1:20:01:37:cd:fa:53:43:82:f3:10: a9:5a:e0:02:0c:c1:20:52:29:e5:93:da:7a:63:14:1c:6b:9c: 29:ac:64:21:77:78:f9:a7:36:46:8a:ab:1e:61:dc:74:63:7a: 45:47:e9:84:1e:47:8f:b0:31:20:de:e7:43:0e:96:ba:6e:c1: f5:c5:e8:1d:6b:67:34:0a:56:cf:58:be:a7:ce:56:3a:b4:0f: ae:3e:b5:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwNjEzMDMzMDU2WhcNMjUwNjIwMDMzMDU2WjAYMRYwFAYD VQQDEw02ODRiOWI3MC0wZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1n5ECHJP+dKLIPFllKk5Zt3SC4IUOuOXkZTmSVgQGqIVjhJZiRTjqT5h3ZO Z+MCuG3OX4GZTURjpkeHBoDaVOI9PfIOy67/o2gWS+QqCkQbdC+A8/wrlQhrQkwM Js/H6iaAZvjxj1x7P1GTXYHkM/jhdTzrmSnNJB75T8X4qUEAsjDxrcq4wwZkJu3B 0pIKubv7bV+WKy9INg6yCCg0QxyozNjXiTjwAhm2p2243KHvNMlwqy/z6gX4u3RU gvklGv5cxfWodQHNQd/NsZ0IFaNK5eKRIoMtZo8wmMwz4hk4u2jsg+v2t3OcSm5A 0LhiM/1WMd0w3SJh7ibb2R78twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLIsQtc oG5GJ3ZLCjJXsfNG9yZYMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+GE2JiKnd8OXKkEFSDwTLohIMwE/NCUhsM6ISIrKNL+FI4eDLiuZ1 jIXS8Xj3JGagLQ/+oWf6/8wNO5+Xs1KMboyozjEemY9z7g3uL+li4+NJ9zHS8Hml mkDPOr9VS/YxRvsB+z688PGbVXuu5JHxCSE3KAQREXueiKZvpUiC1HqeFj4afunw I8L/LqgxmaiLrbXlKFSDRplLnGRR9CGeAqlHe2AZWdJtoSABN836U0OC8xCpWuAC DMEgUinlk9p6YxQca5wprGQhd3j5pzZGiqseYdx0Y3pFR+mEHkePsDEg3udDDpa6 bsH1xegda2c0ClbPWL6nzlY6tA+uPrUT -----END CERTIFICATE-----Generated at Sat Jun 14 17:17:17 2025 by rpki-client