$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: tCMdOCuAfAI6r5UHPS4fAnQscdDRwTH3KdICdqRlCic= Subject key identifier: 3F:00:CC:B4:C0:A0:C9:07:17:BE:79:55:0B:03:43:08:F9:7E:7E:86 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 064E Signing time: Thu 24 Apr 2025 22:28:59 +0000 Manifest this update: Thu 24 Apr 2025 22:28:59 +0000 Manifest next update: Thu 01 May 2025 22:28:59 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: ixcUuR3j+QOgI/+OdaPaxQsHnFTsWlxYTaBL2VCD/X4=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: GHQh5SwHOMcXY1DsAhaLHUPHu9zL3ZFCXoLdxoLJfeA=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: rALO/Lu7rOVuXfsNKsgW9obWV+R382rqfNHaGZDPjYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Apr 24 22:28:59 2025 GMT Not After : May 1 22:28:59 2025 GMT Subject: CN=680abb2b-c53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:c1:95:a8:be:99:ef:43:dc:6c:c2:9f:65: 47:1f:9b:43:97:59:49:47:64:29:7d:42:8c:60:95: e0:80:36:96:1b:8b:e5:21:ac:bb:2d:ff:fc:80:c2: bd:46:6f:c2:86:79:be:d9:bd:c1:8d:48:09:12:1f: 42:f7:38:a8:5f:f0:7a:cc:29:ae:d3:5a:80:dc:19: 68:b4:d1:67:aa:11:cd:02:d1:9d:5d:49:56:d5:77: 05:42:07:8a:c2:62:82:22:fb:a4:b9:d5:01:b6:0b: c4:ed:dc:c6:cd:6e:af:04:9e:13:1b:66:4a:16:3b: 81:c3:d5:12:a8:28:08:23:3e:73:96:4c:da:46:44: ba:07:79:28:d0:3b:26:b8:6b:a2:bc:e1:8a:2f:38: 20:d4:8b:48:21:0d:f5:ba:5c:19:ba:86:37:59:73: 59:cd:a3:0e:01:66:f3:9e:02:f1:3c:7c:ef:36:96: 5e:04:59:73:88:32:00:8e:53:ca:96:08:29:81:3e: 40:1b:70:6a:4b:d4:c9:2c:b3:19:7d:9e:ee:f7:4b: d5:69:a3:a6:ba:6b:d7:84:03:5d:e7:f1:ca:72:59: d0:4c:f1:97:bb:f8:9c:ef:70:ed:6f:9a:3b:20:19: bc:85:e7:ab:3f:22:d6:41:08:c3:b2:26:18:e7:6d: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:CC:B4:C0:A0:C9:07:17:BE:79:55:0B:03:43:08:F9:7E:7E:86 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a5:8b:9c:c3:d2:1e:cb:ec:95:74:c9:b9:db:ef:fb:3a:f8: 83:bf:96:90:07:c1:fe:5b:fa:19:f7:4c:81:e9:3f:9e:df:44: 49:62:75:b2:c2:5f:41:df:01:72:95:7a:47:bd:c3:e4:02:88: 85:36:a1:31:19:38:97:95:09:42:99:52:6c:b6:65:f2:ea:c9: d7:a8:a8:1b:c3:8e:a1:84:e3:d7:85:da:5c:86:22:11:dd:8b: 8c:3f:7c:51:9b:49:77:6c:e9:90:d6:29:19:0d:29:bf:7c:a6: 7d:28:63:0e:15:3d:dd:9c:1e:1e:e3:a0:6f:ec:4a:9d:af:f2: 8c:e6:ee:2a:62:3a:ed:b9:fc:48:04:1b:68:b2:cd:05:5a:86: a8:8e:49:49:c3:ce:9a:78:8e:70:fc:e8:59:49:5c:6c:6c:85: 1b:d7:cd:9a:c8:c9:dd:b3:a5:41:98:1f:62:b9:99:09:14:dc: a8:cf:ee:8e:ff:c0:ea:ee:4a:dd:07:43:e0:80:ed:c1:a6:69: c1:5b:ba:96:98:4b:0f:94:2c:0d:f4:33:b6:5d:00:03:22:20: 45:8d:64:80:b4:30:ae:00:2e:18:b0:fb:1e:81:33:5d:92:51: 67:5f:3e:52:12:65:ca:ca:31:47:50:5e:0b:33:1a:2f:e5:58: 74:8b:f3:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNDI0MjIyODU5WhcNMjUwNTAxMjIyODU5WjAYMRYwFAYD VQQDEw02ODBhYmIyYi1jNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqXBlai+me9D3GzCn2VHH5tDl1lJR2QpfUKMYJXggDaWG4vlIay7Lf/8gMK9 Rm/Chnm+2b3BjUgJEh9C9zioX/B6zCmu01qA3BlotNFnqhHNAtGdXUlW1XcFQgeK wmKCIvukudUBtgvE7dzGzW6vBJ4TG2ZKFjuBw9USqCgIIz5zlkzaRkS6B3ko0Dsm uGuivOGKLzgg1ItIIQ31ulwZuoY3WXNZzaMOAWbzngLxPHzvNpZeBFlziDIAjlPK lggpgT5AG3BqS9TJLLMZfZ7u90vVaaOmumvXhANd5/HKclnQTPGXu/ic73Dtb5o7 IBm8heerPyLWQQjDsiYY522O+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8AzLTA oMkHF755VQsDQwj5fn6GMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLpYucw9Iey+yVdMm52+/7OviDv5aQB8H+W/oZ90yB6T+e30RJYnWy wl9B3wFylXpHvcPkAoiFNqExGTiXlQlCmVJstmXy6snXqKgbw46hhOPXhdpchiIR 3YuMP3xRm0l3bOmQ1ikZDSm/fKZ9KGMOFT3dnB4e46Bv7Eqdr/KM5u4qYjrtufxI BBtoss0FWoaojklJw86aeI5w/OhZSVxsbIUb182ayMnds6VBmB9iuZkJFNyoz+6O /8Dq7krdB0PggO3BpmnBW7qWmEsPlCwN9DO2XQADIiBFjWSAtDCuAC4YsPsegTNd klFnXz5SEmXKyjFHUF4LMxov5Vh0i/O0 -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:08 2025 by rpki-client